Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C957413BE32385F72A1AF99B5E7247C21C78FE68.cer
File:                     C957413BE32385F72A1AF99B5E7247C21C78FE68.cer (raw, json)
Hash identifier:          GLiJMkZlXzhs8ft3vdkdRIfFrAGA4Qz1Cj7Bge8al0I=
Subject key identifier:   C9:57:41:3B:E3:23:85:F7:2A:1A:F9:9B:5E:72:47:C2:1C:78:FE:68
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7B4A3B7D013E3564133A44C73A5A4202EA03043B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/C957413BE32385F72A1AF99B5E7247C21C78FE68.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Nov 2022 19:29:28 +0000
Certificate not after:    Thu 09 Nov 2023 19:34:28 +0000
Subordinate resources:    AS: 268668
                          IP: 45.164.220.0/22
                          IP: 2804:54c0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4a:3b:7d:01:3e:35:64:13:3a:44:c7:3a:5a:42:02:ea:03:04:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 10 19:29:28 2022 GMT
            Not After : Nov  9 19:34:28 2023 GMT
        Subject: CN=C957413BE32385F72A1AF99B5E7247C21C78FE68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:3b:c7:9b:0a:0e:2f:45:b8:0d:4a:26:e6:
                    25:d5:ea:20:e6:7f:f0:44:d4:b1:1f:4d:65:a4:b5:
                    8f:27:3e:77:a9:f4:ad:77:25:ba:9e:97:b4:78:bc:
                    29:6a:d7:f6:66:e3:60:ab:ec:06:3e:18:23:bd:79:
                    45:76:ac:d4:49:63:e8:17:57:4e:49:30:cb:d7:69:
                    77:78:a8:8e:7c:f7:b2:7c:cf:c7:19:23:e9:9e:1b:
                    92:db:c3:67:88:87:70:90:86:78:ad:f7:46:2b:da:
                    b0:b9:50:29:55:64:23:3f:63:c1:06:87:9f:32:f5:
                    38:2a:06:c3:9d:c9:9a:5b:b2:0a:72:9c:8e:6e:6f:
                    38:f2:27:8e:a9:76:e7:3b:00:d3:55:36:c6:18:ca:
                    bd:18:b3:1d:1a:db:df:f4:4a:65:d2:82:50:ad:a7:
                    90:53:bc:2c:86:0a:99:a2:9f:a0:5a:57:30:23:27:
                    a1:00:dc:14:83:0c:ef:2d:3d:29:b7:24:98:63:f7:
                    16:f4:dd:cc:0e:b0:98:1a:27:67:50:7e:d7:46:1b:
                    d3:00:70:f9:50:3d:01:ee:84:6d:ce:4b:d2:a7:d4:
                    fe:55:08:8a:94:83:0a:e6:f9:e9:88:c0:73:4d:5a:
                    fc:e8:24:1e:13:14:a9:8f:c3:70:cb:03:51:bd:ef:
                    ed:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:57:41:3B:E3:23:85:F7:2A:1A:F9:9B:5E:72:47:C2:1C:78:FE:68
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/C957413BE32385F72A1AF99B5E7247C21C78FE68.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.220.0/22
                IPv6:
                  2804:54c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268668

    Signature Algorithm: sha256WithRSAEncryption
         27:71:50:d1:bc:8f:eb:d0:d8:87:4c:d2:76:36:7d:9e:73:54:
         ca:70:de:9b:7b:77:c9:07:5a:fa:c9:42:8b:1f:98:f3:84:71:
         47:a6:ee:10:e9:ed:e0:b9:73:6d:e6:4b:49:80:aa:1e:64:0e:
         16:83:cc:aa:53:39:4d:84:a9:ba:46:d3:05:fd:a0:df:0b:75:
         05:cc:49:ca:88:f1:7d:de:43:f3:4e:a5:51:94:6f:99:e7:65:
         f6:40:b8:47:dd:d3:3a:1a:9b:bc:a6:f7:89:81:77:1a:82:f8:
         d1:71:58:26:ea:ea:03:cb:65:3e:c0:fc:7d:cb:88:d2:41:10:
         11:dc:14:22:5d:b9:cf:ab:5f:1d:82:dc:d5:3a:1e:d9:bd:82:
         5d:0d:2c:51:b7:bf:32:e6:85:97:24:90:2b:1f:42:df:3b:ac:
         85:f0:a7:d1:58:dd:58:90:88:ce:52:04:f1:e8:17:3f:8c:b4:
         8e:98:05:05:4d:63:b5:f2:28:e9:19:fc:87:77:20:09:49:b0:
         2a:41:1a:f2:35:fe:c6:99:6c:97:bf:e2:1b:f1:6b:ec:96:7d:
         0f:fc:63:2c:3c:85:b8:df:5a:ea:c2:ad:36:b3:06:c8:06:12:
         e9:2a:4b:85:ec:ef:4f:96:52:82:be:2d:39:71:07:83:11:06:
         3d:2d:0f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:17 2025 by rpki-client