Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B540516BF13E60C4B889243545C5A243667A1C8E.cer
File:                     B540516BF13E60C4B889243545C5A243667A1C8E.cer (raw, json)
Hash identifier:          J1oVh3zjglk0mcCp/v9/VajjRFhjoRG2oGHE8NokrdY=
Subject key identifier:   B5:40:51:6B:F1:3E:60:C4:B8:89:24:35:45:C5:A2:43:66:7A:1C:8E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       26F3695A2DCA09F6F421D56EA2B09087526586E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/B540516BF13E60C4B889243545C5A243667A1C8E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Oct 2022 19:03:59 +0000
Certificate not after:    Thu 12 Oct 2023 19:08:59 +0000
Subordinate resources:    AS: 266123
                          IP: 45.5.220.0/22
                          IP: 2804:3afc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f3:69:5a:2d:ca:09:f6:f4:21:d5:6e:a2:b0:90:87:52:65:86:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 13 19:03:59 2022 GMT
            Not After : Oct 12 19:08:59 2023 GMT
        Subject: CN=B540516BF13E60C4B889243545C5A243667A1C8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b5:4c:b0:0a:ad:48:80:0c:1d:47:ba:55:b6:
                    b7:c4:28:19:b0:60:bc:2b:a9:94:d5:12:8a:a2:aa:
                    b1:bd:b5:1e:fe:74:a7:e6:c0:5a:f2:0f:52:42:6f:
                    eb:31:bf:35:d5:85:4c:51:4f:33:f0:13:4d:1e:49:
                    35:ed:6c:44:28:03:3c:1d:e3:e9:09:5a:66:6f:92:
                    35:53:f5:cf:b4:fb:7e:e1:d4:30:38:70:a5:2e:b9:
                    2d:21:89:b2:68:4f:08:23:cf:dd:5f:88:cf:8f:31:
                    a4:57:2e:e2:b0:b8:54:55:a3:f4:44:04:56:c9:22:
                    c8:45:80:56:ed:55:49:d8:0d:8d:1a:c9:46:e1:ec:
                    8e:62:a2:14:ac:a1:6b:92:68:3e:0a:13:5a:c1:09:
                    ab:b0:21:6b:ac:b8:bc:0f:df:eb:fe:f6:ff:50:7d:
                    ab:2e:bf:57:55:c5:b9:ec:d3:6c:55:74:ac:fb:3b:
                    12:c4:47:79:8e:59:64:e8:86:ed:c2:03:28:6e:55:
                    b0:0e:ba:e1:66:16:54:37:dc:e9:f3:57:66:ac:73:
                    e8:83:08:05:c7:34:bf:f7:e7:2c:2e:50:b9:bb:b5:
                    9c:1f:b2:43:9e:69:9a:ad:22:5d:eb:87:82:86:2f:
                    87:bf:e4:1f:f2:b1:ce:38:50:b6:c5:d6:47:16:94:
                    af:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:40:51:6B:F1:3E:60:C4:B8:89:24:35:45:C5:A2:43:66:7A:1C:8E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/B540516BF13E60C4B889243545C5A243667A1C8E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.220.0/22
                IPv6:
                  2804:3afc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266123

    Signature Algorithm: sha256WithRSAEncryption
         ac:97:6a:3d:ec:cb:8c:32:c9:d0:ef:f4:2e:a9:3a:b1:51:04:
         b4:2a:9d:3d:d7:90:13:69:79:88:10:cf:8a:96:05:0c:40:b1:
         5f:b8:88:86:e2:64:76:84:13:5e:52:36:21:bd:3c:66:ff:70:
         cb:ea:c9:3e:8a:a8:3a:46:5d:68:51:b8:02:e1:33:35:ee:de:
         81:66:1a:b3:a2:eb:1e:1e:f9:4e:64:34:72:30:1a:2c:ae:b9:
         88:04:b0:a3:b8:14:88:49:f0:61:13:4b:b2:73:c3:13:9d:01:
         06:f8:6e:15:0d:7a:77:af:29:de:bb:e0:43:98:b2:36:da:65:
         81:2e:fb:7e:03:3c:78:2c:25:fa:6e:4e:ad:b8:4e:8b:1d:31:
         bc:e5:f7:0b:f6:b1:f0:b6:36:91:e3:a9:b2:12:ab:bb:1b:e0:
         1a:2c:ec:5f:52:fa:8a:16:fa:21:e4:f8:0d:1f:9d:73:8c:4f:
         e9:88:8a:e8:bf:88:aa:82:37:66:57:a5:8e:fe:6f:d4:2c:c5:
         d9:41:6b:5a:2c:41:52:67:91:f3:cf:8a:4d:28:df:7f:cf:e0:
         8a:2a:1e:e1:ff:a4:78:3a:95:8f:fe:7d:f9:48:db:6c:fc:54:
         b7:a7:40:71:bb:75:ad:00:90:91:ce:d0:cc:78:26:23:48:40:
         95:7c:28:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 01:24:36 2025 by rpki-client