Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CB376E6EA49BF804959F0F1161364FC81213BB93.cer
File:                     CB376E6EA49BF804959F0F1161364FC81213BB93.cer (raw, json)
Hash identifier:          9HV0hafzHarRr47w7Rn/MDF5OfKHS9Wl1ePPFLOY/RA=
Subject key identifier:   CB:37:6E:6E:A4:9B:F8:04:95:9F:0F:11:61:36:4F:C8:12:13:BB:93
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1B30E36505BF1DD616BE46714FDA1FC64F32E01C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/CB376E6EA49BF804959F0F1161364FC81213BB93.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Aug 2022 13:48:41 +0000
Certificate not after:    Mon 07 Aug 2023 13:53:41 +0000
Subordinate resources:    AS: 262293
                          IP: 131.161.132.0/22
                          IP: 138.94.108.0/22
                          IP: 143.202.240.0/22
                          IP: 168.232.152.0/22
                          IP: 170.80.176.0/22
                          IP: 177.154.192.0/19
                          IP: 179.107.224.0/19
                          IP: 2804:a80::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:30:e3:65:05:bf:1d:d6:16:be:46:71:4f:da:1f:c6:4f:32:e0:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  8 13:48:41 2022 GMT
            Not After : Aug  7 13:53:41 2023 GMT
        Subject: CN=CB376E6EA49BF804959F0F1161364FC81213BB93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:78:97:a6:d2:83:0d:f2:e9:fb:9c:eb:d4:59:
                    05:c4:d3:95:d5:14:ab:c0:6c:8b:33:e3:dc:f6:8b:
                    3b:d4:45:46:38:e8:86:32:af:ca:77:ce:18:f0:08:
                    06:82:78:59:8e:94:a5:8b:e5:96:72:31:0b:ee:90:
                    36:07:a2:4c:7d:a9:81:20:86:ed:5a:a0:df:2a:bd:
                    dd:c4:33:b9:0e:ef:ca:e2:a9:dc:1b:58:b8:f6:8a:
                    40:6f:4c:58:32:40:46:53:1b:c5:d5:57:6f:79:ff:
                    ea:98:d9:ff:2c:6a:62:0a:4e:da:63:da:b0:93:25:
                    ff:ce:f6:52:86:75:03:00:65:49:88:0f:c0:61:a9:
                    2a:6d:8b:1a:b7:d5:4a:52:d9:57:dd:5c:c2:f1:bf:
                    19:44:f1:66:87:d9:49:a6:5a:8d:37:43:4c:3a:f3:
                    61:e1:2d:e6:75:e8:30:03:63:34:1c:fc:4a:98:9b:
                    59:cf:27:ed:26:9d:49:55:ff:66:50:a1:5f:c3:c8:
                    1a:e9:5d:2f:5c:ed:92:ba:50:45:62:d8:46:41:e8:
                    22:7b:25:1e:a1:1e:a9:e1:b7:7f:75:a8:ea:68:84:
                    26:c0:61:87:e5:7a:80:75:e1:2a:b9:2e:e3:ff:3b:
                    26:5c:4d:6d:38:b4:f4:b4:d6:d0:2e:a9:8a:f9:12:
                    60:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:37:6E:6E:A4:9B:F8:04:95:9F:0F:11:61:36:4F:C8:12:13:BB:93
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/CB376E6EA49BF804959F0F1161364FC81213BB93.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.132.0/22
                  138.94.108.0/22
                  143.202.240.0/22
                  168.232.152.0/22
                  170.80.176.0/22
                  177.154.192.0/19
                  179.107.224.0/19
                IPv6:
                  2804:a80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262293

    Signature Algorithm: sha256WithRSAEncryption
         b7:14:66:3d:5d:c3:64:83:7f:5e:f0:a3:44:e4:05:25:bd:c9:
         fc:96:db:0d:0d:3e:b7:ca:e5:3b:d8:38:89:7f:51:d3:46:e7:
         03:be:e9:34:ff:78:6a:ca:e4:aa:af:be:59:a7:30:c6:50:36:
         45:ae:c4:aa:cb:67:c4:25:54:0a:09:54:87:92:ad:c1:da:df:
         d9:de:b0:9e:10:a9:0d:0e:d4:d6:3d:26:46:88:5f:6c:b2:b7:
         47:e9:bf:54:68:6b:1f:cc:25:41:a7:a3:ac:a9:e6:6f:a0:03:
         dd:2f:88:9c:80:a3:39:a3:9e:32:a6:67:17:6f:b3:1b:20:54:
         a2:58:f0:60:0c:f2:bb:be:06:7b:6f:d3:06:e2:26:12:33:b1:
         75:a3:fc:9d:e8:f3:90:6b:d4:25:54:de:47:0f:8c:25:59:5c:
         68:4e:20:6e:2c:28:2c:c7:71:b4:98:c8:0c:7f:b4:a4:42:ea:
         e6:c0:df:19:b5:9f:10:02:11:3b:4a:91:52:34:c9:e1:49:16:
         f2:10:6e:63:f4:c7:89:ba:8c:39:a8:17:49:13:32:6a:4b:00:
         e4:0a:28:63:54:dc:cb:1a:a1:12:84:6b:cd:9f:65:76:3c:da:
         41:1e:7b:49:36:64:76:29:99:49:05:97:47:8f:5f:16:cf:cd:
         21:65:6b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:33:42 2025 by rpki-client