Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C91ED752D608227CA4FEC2AF91A5C673CD2DBA2C.cer
File:                     C91ED752D608227CA4FEC2AF91A5C673CD2DBA2C.cer (raw, json)
Hash identifier:          iT1Loabh1MnNi62ibRAMYv8xqlHcrWO9L5RdOue2wZM=
Subject key identifier:   C9:1E:D7:52:D6:08:22:7C:A4:FE:C2:AF:91:A5:C6:73:CD:2D:BA:2C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3FB5C4FABB1E74741BF509DB79E8DE915CA74F54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/C91ED752D608227CA4FEC2AF91A5C673CD2DBA2C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Feb 2024 18:35:26 +0000
Certificate not after:    Tue 04 Feb 2025 18:40:26 +0000
Subordinate resources:    AS: 268608
                          IP: 45.164.80.0/22
                          IP: 2804:53d0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b5:c4:fa:bb:1e:74:74:1b:f5:09:db:79:e8:de:91:5c:a7:4f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  6 18:35:26 2024 GMT
            Not After : Feb  4 18:40:26 2025 GMT
        Subject: CN=C91ED752D608227CA4FEC2AF91A5C673CD2DBA2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b0:3b:54:32:1f:73:b9:01:7a:ad:1d:07:ec:
                    22:ef:ae:5c:39:ec:62:72:f3:c0:18:29:47:a4:24:
                    e6:f9:86:64:a9:f3:8c:f0:6f:74:10:80:a6:84:2a:
                    6e:3c:94:e8:93:47:36:47:18:0d:b2:2a:f3:9e:39:
                    b8:66:c1:4a:ee:41:39:16:f0:e1:85:fd:d6:7d:7f:
                    db:c6:60:66:10:c7:d9:b9:86:41:2d:43:ce:af:f2:
                    bb:0c:62:c0:24:74:b9:4c:d6:c1:de:21:e7:58:72:
                    bc:41:f9:56:2e:56:80:04:9e:12:43:d0:99:c6:cc:
                    90:4a:8a:5f:3c:45:79:5d:09:71:73:99:3d:29:e4:
                    4c:39:c2:c2:72:c6:4e:c3:3c:2f:d0:af:11:39:8e:
                    17:a0:1f:c3:5d:89:06:06:f1:65:1e:c4:21:01:00:
                    44:aa:12:64:ed:7f:50:d4:7b:f6:70:e5:5a:27:4d:
                    37:9c:bb:df:c0:38:61:3c:67:a3:55:80:38:7a:54:
                    fc:8a:0d:ab:bf:d2:de:cc:85:78:60:cb:45:43:16:
                    5d:d2:53:7b:f0:f5:ee:50:ab:36:b2:d4:a9:08:6c:
                    78:fe:54:7e:63:a0:be:e3:68:be:fd:6e:86:ff:9f:
                    b5:c7:33:9c:b6:d2:ca:12:87:2b:36:96:22:41:31:
                    c9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:1E:D7:52:D6:08:22:7C:A4:FE:C2:AF:91:A5:C6:73:CD:2D:BA:2C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/C91ED752D608227CA4FEC2AF91A5C673CD2DBA2C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.80.0/22
                IPv6:
                  2804:53d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268608

    Signature Algorithm: sha256WithRSAEncryption
         18:03:03:f0:09:67:4c:ab:83:b6:21:eb:60:f0:3c:f3:52:a3:
         bc:2b:c5:16:39:96:9d:c9:ef:df:65:67:f9:96:cb:b0:af:99:
         69:db:18:05:fa:4e:8b:2b:79:45:13:41:43:8e:5c:fb:ae:1b:
         fb:c2:9d:a5:d2:51:6a:1f:af:37:6c:03:05:29:41:6b:52:9f:
         83:da:85:5c:6a:36:b8:a8:6d:6d:1a:63:d9:72:d4:87:4a:52:
         6c:1b:ec:25:01:93:b9:98:3b:86:5e:bd:ea:fd:67:c2:73:d2:
         46:ee:4c:d5:5a:1d:fa:f8:66:eb:f7:8a:60:71:77:ce:9e:06:
         9f:b1:7b:01:ff:22:f1:e8:5f:a8:05:42:e5:27:2e:b2:60:97:
         7c:17:c5:16:12:8e:1c:99:db:e6:b2:f5:19:01:04:1c:d6:38:
         5f:cc:06:1a:e5:bc:ef:ea:d2:07:5b:ce:3d:44:42:22:06:a9:
         c1:c5:fc:8a:60:ba:d7:c9:fa:8d:09:5f:4d:8d:17:2e:90:c9:
         a2:bd:c7:e9:bf:4b:06:74:e5:9d:04:b9:88:ce:9a:f8:dd:6f:
         e2:59:fa:57:6c:d1:c7:c6:ff:64:c8:20:2d:a0:9b:34:26:1c:
         a4:7a:cd:48:3a:14:91:d3:2b:c9:5b:e1:08:cb:8d:01:03:da:
         3c:92:4b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:42:19 2025 by rpki-client