Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C192B5FD11964A2C15A34C0C4710783B5EE8C6C0.cer
File:                     C192B5FD11964A2C15A34C0C4710783B5EE8C6C0.cer (raw, json)
Hash identifier:          HBC7aonEAxpOk4Ms69VwTEOFrk6kvbEXjXA9lQrtfgI=
Subject key identifier:   C1:92:B5:FD:11:96:4A:2C:15:A3:4C:0C:47:10:78:3B:5E:E8:C6:C0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2486939E2AFA70129ED5F3F0042FFAD24A5476D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/C192B5FD11964A2C15A34C0C4710783B5EE8C6C0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Aug 2023 17:02:10 +0000
Certificate not after:    Mon 19 Aug 2024 17:07:10 +0000
Subordinate resources:    AS: 28173
                          IP: 177.137.224.0/20
                          IP: 189.84.208.0/20
                          IP: 2804:10a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:86:93:9e:2a:fa:70:12:9e:d5:f3:f0:04:2f:fa:d2:4a:54:76:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 21 17:02:10 2023 GMT
            Not After : Aug 19 17:07:10 2024 GMT
        Subject: CN=C192B5FD11964A2C15A34C0C4710783B5EE8C6C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:74:0e:ff:75:65:fc:f0:e0:2d:62:51:7d:d0:
                    f8:c2:a8:20:0f:1d:21:91:14:1a:ad:58:c5:59:f3:
                    f0:a2:ea:f4:89:e1:5b:78:6a:f4:f6:8e:15:3c:f0:
                    ec:4c:a4:91:d0:34:eb:17:56:f8:03:bd:ed:8d:b9:
                    92:6c:01:03:71:4f:89:86:e1:b8:9d:78:3a:8c:9d:
                    ad:e0:92:3e:72:b6:a6:22:33:88:d5:d3:93:17:5c:
                    0a:6d:04:ee:a1:2e:36:63:e1:10:af:68:fc:7f:5f:
                    51:0b:d9:23:e6:af:df:e0:d2:bd:b1:7e:ea:f9:11:
                    40:83:d1:24:55:9b:de:d7:f4:2f:43:cc:9a:8a:f2:
                    99:51:c9:e4:5a:f4:e1:5e:1b:f5:cc:16:6c:44:39:
                    a5:9a:00:ed:c4:b7:15:9c:e1:dc:dd:73:96:aa:d3:
                    4a:7d:ca:e2:1e:4b:ff:06:0d:bc:31:b9:fe:52:1b:
                    4c:ec:3f:75:4e:a5:a8:e9:f4:e2:50:50:d0:30:56:
                    2d:21:aa:c7:9e:4e:67:1b:d1:c5:b1:a4:e6:45:a2:
                    92:5b:b0:58:db:a0:cf:ac:85:f2:68:a5:50:64:dc:
                    a6:d4:32:bd:7d:be:2a:09:a7:52:bd:64:4b:9e:39:
                    82:f9:2a:4a:63:d4:3b:20:13:cd:b5:47:3a:fd:ac:
                    fb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:92:B5:FD:11:96:4A:2C:15:A3:4C:0C:47:10:78:3B:5E:E8:C6:C0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/C192B5FD11964A2C15A34C0C4710783B5EE8C6C0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.224.0/20
                  189.84.208.0/20
                IPv6:
                  2804:10a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28173

    Signature Algorithm: sha256WithRSAEncryption
         18:74:f9:ef:5f:df:82:7d:7d:16:08:84:19:83:c6:0f:1f:c4:
         d7:12:57:4a:36:1b:4c:48:51:b3:d2:9a:c2:7d:46:03:51:25:
         35:2a:f8:80:0b:19:d3:b6:82:5a:1d:23:a6:61:d6:8b:05:f9:
         1f:ab:47:71:fc:5d:d3:67:f6:80:60:86:51:ed:bf:52:70:b0:
         1c:95:5e:66:f0:31:9e:2e:a4:df:91:73:1d:59:dc:b7:bf:0f:
         6e:fd:d6:98:b2:a2:02:5d:9d:d0:5a:52:8d:30:1a:03:8d:a8:
         f1:98:35:a5:85:49:76:b8:b8:e0:b4:e5:29:e2:91:59:0f:2e:
         41:c6:a9:49:e2:10:87:3d:37:5f:b7:3e:4f:da:5e:39:31:b3:
         68:7a:52:20:03:fd:4b:a0:3c:3e:50:d5:c0:99:45:2e:2f:72:
         b5:ad:b5:c6:79:21:f8:c6:7a:33:52:77:f8:a9:74:10:36:03:
         82:55:96:c2:c4:50:ae:11:d4:43:c4:dd:a5:eb:b7:de:74:4d:
         71:e0:df:89:a6:f6:74:df:46:84:ac:0c:ce:ea:e2:ff:4d:81:
         eb:9c:6c:91:2b:5a:18:ad:25:d0:9a:ea:8e:77:be:5a:79:fa:
         bd:81:e9:00:49:8f:65:08:6a:58:3f:f5:92:45:7b:fb:a9:8e:
         2d:b5:65:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:13:53 2025 by rpki-client