Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CAC619EFFB54E020F1BDAAB2B856BBE7482E0DF8.cer
File:                     CAC619EFFB54E020F1BDAAB2B856BBE7482E0DF8.cer (raw, json)
Hash identifier:          /eEJj3IzsJmwK5PyLMUjv96FgOf/0AXhOIvCiOJNvqs=
Subject key identifier:   CA:C6:19:EF:FB:54:E0:20:F1:BD:AA:B2:B8:56:BB:E7:48:2E:0D:F8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4828C7C8FFB57483FF357F8F126AE603B255087E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/0/CAC619EFFB54E020F1BDAAB2B856BBE7482E0DF8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 03 Dec 2022 14:46:09 +0000
Certificate not after:    Sat 02 Dec 2023 14:51:09 +0000
Subordinate resources:    AS: 262343
                          IP: 143.255.124.0/22
                          IP: 177.126.128.0/20
                          IP: 2804:80c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:28:c7:c8:ff:b5:74:83:ff:35:7f:8f:12:6a:e6:03:b2:55:08:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  3 14:46:09 2022 GMT
            Not After : Dec  2 14:51:09 2023 GMT
        Subject: CN=CAC619EFFB54E020F1BDAAB2B856BBE7482E0DF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:93:c3:ef:35:31:8c:7c:93:62:d4:22:71:
                    0b:b2:14:0b:15:f2:77:4c:66:99:27:be:b7:1b:ef:
                    69:66:35:49:f2:6b:39:00:e8:f8:b4:1f:bc:83:1f:
                    cf:d5:dc:b8:d9:d4:bb:4e:08:08:ea:a3:46:5d:fd:
                    11:54:eb:38:65:09:b2:11:b9:22:2b:e7:84:45:92:
                    6f:f0:69:17:48:36:fa:1f:a1:3d:dd:ea:60:19:1b:
                    df:47:da:92:cc:9e:6f:2d:ae:7d:27:80:d8:9d:78:
                    59:9d:50:70:35:a8:5b:91:6d:04:c8:d5:32:77:bf:
                    e6:62:11:87:e7:e4:d8:9c:21:83:06:67:a6:8b:e1:
                    ed:22:96:bb:26:97:71:64:1f:bf:85:59:dc:f6:ca:
                    24:f4:70:fc:d6:fe:9a:e7:a8:c9:61:f5:f0:49:c9:
                    35:4e:35:7b:4b:50:80:97:b4:e2:79:c7:ff:6d:e7:
                    73:60:8c:27:89:08:7b:81:2c:9c:3c:73:90:7d:cb:
                    76:1d:91:b9:fa:03:fc:7e:1a:62:11:75:5a:87:a4:
                    97:ef:8e:3a:5d:2e:3e:f1:0d:0c:2f:81:00:1e:89:
                    8e:bf:03:b3:c0:a3:89:13:d8:eb:3b:5a:7f:f5:a0:
                    f9:c4:a2:b6:89:ac:0f:81:9c:e1:8b:21:4e:df:81:
                    aa:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:C6:19:EF:FB:54:E0:20:F1:BD:AA:B2:B8:56:BB:E7:48:2E:0D:F8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/0/CAC619EFFB54E020F1BDAAB2B856BBE7482E0DF8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.124.0/22
                  177.126.128.0/20
                IPv6:
                  2804:80c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262343

    Signature Algorithm: sha256WithRSAEncryption
         66:34:ea:21:8a:3c:f8:6f:e6:43:6d:13:fd:da:d7:81:82:01:
         3b:5b:5d:09:0c:1a:7c:1c:34:f0:0c:cf:67:cb:00:1c:49:4c:
         3c:30:f3:42:81:65:d6:22:4f:fa:ec:01:1b:b5:53:dc:b4:1d:
         b8:27:f6:bb:b9:33:f6:a7:df:79:8e:62:52:bf:20:53:52:9d:
         b8:ac:14:73:6e:0b:29:cf:4c:a3:ec:4a:7f:98:dd:4b:74:18:
         52:88:01:57:2d:41:b9:4f:36:14:6a:e1:6b:ae:f4:01:a3:7c:
         02:48:5f:77:9a:44:b2:07:41:a2:b9:61:38:75:67:04:64:0f:
         ea:cc:df:20:83:0e:0b:3f:32:5d:80:21:2f:88:c1:7c:58:cc:
         81:1c:14:11:23:a3:ad:b7:76:2b:14:bd:e4:6c:6e:3f:0a:e0:
         5e:4f:86:7b:c8:8a:05:d1:de:10:74:ba:7f:cb:c0:98:1b:79:
         2b:19:c8:4f:54:43:f2:f3:9c:d5:8c:6b:8b:ac:93:ad:33:fa:
         b3:c2:cd:ca:d1:61:00:e5:85:e4:25:f8:32:26:30:7e:a2:42:
         6b:cf:14:44:22:79:57:55:dd:4f:b5:fb:88:20:b7:20:32:91:
         0b:69:f3:7b:e9:4e:04:15:fb:8d:81:f0:cb:3e:e7:84:a1:5c:
         5a:35:e9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:59:43 2025 by rpki-client