Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B231578DB1CA545EA8EE47036C9DC03DCACD0306.cer
File:                     B231578DB1CA545EA8EE47036C9DC03DCACD0306.cer (raw, json)
Hash identifier:          PhOXJ1vqlppDoq+IInpkvIdEkXKTuU0HBAnWfxpg5Ts=
Subject key identifier:   B2:31:57:8D:B1:CA:54:5E:A8:EE:47:03:6C:9D:C0:3D:CA:CD:03:06
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       64641CA1C485C3ABE8166CE2FA5127CF544E3EF5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/0/B231578DB1CA545EA8EE47036C9DC03DCACD0306.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Sep 2022 13:58:48 +0000
Certificate not after:    Wed 27 Sep 2023 14:03:48 +0000
Subordinate resources:    AS: 271002
                          IP: 177.223.144.0/22
                          IP: 2804:74c4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:64:1c:a1:c4:85:c3:ab:e8:16:6c:e2:fa:51:27:cf:54:4e:3e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 28 13:58:48 2022 GMT
            Not After : Sep 27 14:03:48 2023 GMT
        Subject: CN=B231578DB1CA545EA8EE47036C9DC03DCACD0306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:04:88:08:2a:e1:a4:55:4a:6c:63:a5:e8:
                    ca:3a:27:db:a1:95:69:42:c3:a5:65:db:d7:df:a9:
                    79:5b:c4:81:41:40:47:cf:cb:cb:64:0f:53:ce:87:
                    b6:61:fd:48:96:ed:26:41:48:3d:7a:a2:de:8c:f8:
                    a4:b9:0e:ba:4f:e2:7b:4a:59:33:c9:d9:3b:a6:25:
                    01:15:39:20:7a:56:ef:d4:81:8c:d3:b1:c7:16:97:
                    52:d0:fd:64:71:19:86:54:a2:15:08:6b:ff:d4:dc:
                    a4:f1:f2:d5:d9:f7:9c:ab:21:a7:47:7c:c4:14:50:
                    7c:69:cb:eb:57:1f:fa:ec:26:df:6e:36:04:7f:2a:
                    db:6f:d6:f6:14:25:c3:00:79:e0:77:5d:98:39:19:
                    fb:a2:e0:ec:2d:ff:47:bf:a2:fc:9b:46:41:05:68:
                    17:54:17:23:65:4a:6a:9b:bc:c6:13:c2:00:b5:95:
                    1a:4a:3e:92:d0:95:3b:d2:9b:0c:fa:1d:25:9d:0c:
                    10:da:d1:14:7d:0a:0e:81:8a:2f:c2:0f:57:d8:89:
                    b7:e3:2c:46:25:a9:46:35:eb:3d:7b:ec:81:80:4b:
                    bf:e3:96:30:f7:b3:82:d0:73:67:40:c0:a4:c6:66:
                    fb:bf:3d:f5:13:69:15:ca:56:59:d4:95:d0:7a:0c:
                    ee:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B2:31:57:8D:B1:CA:54:5E:A8:EE:47:03:6C:9D:C0:3D:CA:CD:03:06
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/0/B231578DB1CA545EA8EE47036C9DC03DCACD0306.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.144.0/22
                IPv6:
                  2804:74c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271002

    Signature Algorithm: sha256WithRSAEncryption
         25:23:6a:9f:d0:13:49:78:13:c8:59:5d:4f:fa:15:a7:23:88:
         1f:c5:41:02:32:b5:0c:79:58:f8:87:c8:d2:de:da:b6:4b:ad:
         7c:2b:2a:d0:ed:df:70:1f:e7:79:5e:db:5b:59:a3:d4:3b:a9:
         ad:53:04:9d:c7:35:c6:4e:12:d4:08:30:ea:fe:87:2c:31:c1:
         a3:f6:ee:9c:ea:48:b4:ba:fc:8a:ac:8d:f9:c6:90:fe:1b:19:
         28:ea:4b:c7:af:a4:dc:cf:f0:48:15:eb:19:6d:6b:41:8c:03:
         3c:24:a9:3c:be:ee:c1:ce:cf:01:5c:9d:28:ed:48:6b:fb:23:
         50:bf:a9:28:9f:a8:85:b8:ce:e5:35:7a:ce:e5:cc:4c:28:28:
         c3:dc:3a:f2:25:6a:ce:95:fc:d2:28:33:21:8a:8b:be:94:21:
         77:a1:87:57:e2:d4:ec:76:80:20:67:2f:12:6c:02:db:15:c3:
         93:67:1f:3a:ad:ba:f0:fc:24:2f:e4:9e:b9:ac:2d:67:45:99:
         dc:49:9e:66:e2:3a:a2:bd:8f:f3:1f:00:34:b3:3b:66:bb:e0:
         27:2a:ae:e2:a9:c2:1b:f7:24:8c:40:e7:c5:48:b5:d4:d7:67:
         38:af:7e:24:de:45:5a:65:09:83:78:e4:67:90:3d:9b:75:4d:
         78:ef:17:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:33 2025 by rpki-client