Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B304F25F68E66FA3FC0469ECCAE9D1C6E1AD522A.cer
File:                     B304F25F68E66FA3FC0469ECCAE9D1C6E1AD522A.cer (raw, json)
Hash identifier:          w+ZQrsf6H96WJjj6WPvnvblCv+4O0vPVLr1MEI1lMiM=
Subject key identifier:   B3:04:F2:5F:68:E6:6F:A3:FC:04:69:EC:CA:E9:D1:C6:E1:AD:52:2A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       275BF37F11EE064FBC8E95644BF79B0614A23A6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/B304F25F68E66FA3FC0469ECCAE9D1C6E1AD522A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Jan 2023 14:08:37 +0000
Certificate not after:    Mon 22 Jan 2024 14:13:37 +0000
Subordinate resources:    AS: 61722
                          IP: 131.72.36.0/22
                          IP: 2804:1b54::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5b:f3:7f:11:ee:06:4f:bc:8e:95:64:4b:f7:9b:06:14:a2:3a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 23 14:08:37 2023 GMT
            Not After : Jan 22 14:13:37 2024 GMT
        Subject: CN=B304F25F68E66FA3FC0469ECCAE9D1C6E1AD522A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3c:76:fb:f6:4a:40:98:cd:e6:38:3c:a1:05:
                    5e:dd:45:29:0e:99:e5:eb:75:22:b7:62:5e:f7:51:
                    98:69:09:2f:ed:51:f3:50:e0:d4:fb:6f:bf:25:ab:
                    47:dd:e8:b4:57:41:bf:6a:6b:24:c6:7f:d7:34:ae:
                    95:2a:8f:98:14:03:15:a5:5a:a4:16:64:88:92:54:
                    bd:b0:82:23:29:f8:2d:0f:45:75:e0:33:a9:b8:d0:
                    4f:a9:2d:fc:c2:dc:b3:1b:35:df:2a:10:0e:6f:b2:
                    0a:52:6b:dc:a3:2a:8f:0f:61:35:a0:d0:af:c5:48:
                    a4:8b:e8:5b:b1:d7:96:9f:37:d6:ac:74:6a:6f:db:
                    4e:db:45:48:cf:99:da:de:5e:6a:bd:82:38:6e:ae:
                    5d:30:75:81:a1:45:0e:2f:d0:f9:82:bd:67:8d:4c:
                    a2:14:f4:1d:85:e9:64:bc:22:d2:38:ac:64:0e:28:
                    18:a8:70:48:73:87:17:52:78:8c:8f:eb:30:dc:4b:
                    d8:62:90:2a:52:63:3b:1b:f7:50:e7:ed:02:d8:e2:
                    21:ef:39:62:9b:1f:5d:89:b9:0d:e8:6d:27:c1:2b:
                    e7:b9:58:3d:6f:78:2b:b8:23:5a:38:b0:f2:72:0d:
                    81:c8:05:29:92:60:63:bd:52:6d:8c:c7:5c:4d:5d:
                    26:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:04:F2:5F:68:E6:6F:A3:FC:04:69:EC:CA:E9:D1:C6:E1:AD:52:2A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/B304F25F68E66FA3FC0469ECCAE9D1C6E1AD522A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.36.0/22
                IPv6:
                  2804:1b54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61722

    Signature Algorithm: sha256WithRSAEncryption
         03:6f:f5:e4:45:70:9d:a6:26:46:f0:ce:a2:ca:d1:32:e4:1a:
         7d:ca:60:c3:6f:05:5a:ba:86:73:b9:3b:aa:b0:40:98:dd:4a:
         dd:ce:b4:30:a1:5c:14:c7:00:10:b6:aa:2b:6b:c3:ea:6c:cd:
         54:79:65:fc:ba:e9:51:cc:d8:0d:44:f4:52:9e:5c:8d:2a:f0:
         ba:5f:c2:c7:5e:98:05:79:8b:72:be:a3:cd:b6:59:94:72:e5:
         bc:b8:61:fa:96:17:d4:80:85:b9:b5:b2:4c:36:99:8d:2a:2a:
         58:6a:c1:92:b3:46:9d:d1:9c:73:5c:49:5b:89:e3:89:32:54:
         f9:ed:f9:f5:60:c7:53:cd:4f:33:51:31:64:58:7f:b2:32:2a:
         0d:a1:b3:38:68:71:81:46:1f:b9:c0:76:a0:1f:8c:31:ff:7c:
         c0:c7:f3:83:dc:98:f5:97:af:a1:31:60:61:f2:56:2a:bc:90:
         e9:c5:03:ca:75:6d:13:76:62:b1:be:70:23:45:ed:28:4f:59:
         c3:b2:6c:ac:7e:c3:a6:76:15:ae:33:ff:6f:e7:2f:6f:88:fa:
         5b:0d:1b:d4:d5:4c:e3:0d:9b:f0:89:40:b3:ab:fb:43:2c:f3:
         70:5b:3d:65:d0:8a:4a:bc:8f:c6:58:be:62:bd:5d:2a:c6:d0:
         45:b4:37:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:19:25 2025 by rpki-client