Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CD751FD85EB2EA218659B38ACB7AA70081FE0026.cer
File:                     CD751FD85EB2EA218659B38ACB7AA70081FE0026.cer (raw, json)
Hash identifier:          7s+BoxQ8+2gx0Asw2MZfIH9Hvjclz7FsrV4gmeYFwdQ=
Subject key identifier:   CD:75:1F:D8:5E:B2:EA:21:86:59:B3:8A:CB:7A:A7:00:81:FE:00:26
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3981604D8735C6FF399D3F2A88830E373D4DF17C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/CD751FD85EB2EA218659B38ACB7AA70081FE0026.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 Feb 2023 21:52:55 +0000
Certificate not after:    Mon 19 Feb 2024 21:57:55 +0000
Subordinate resources:    AS: 272578
                          IP: 45.173.21.0/24
                          IP: 2804:856c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:81:60:4d:87:35:c6:ff:39:9d:3f:2a:88:83:0e:37:3d:4d:f1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 20 21:52:55 2023 GMT
            Not After : Feb 19 21:57:55 2024 GMT
        Subject: CN=CD751FD85EB2EA218659B38ACB7AA70081FE0026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:09:8d:23:1d:53:00:9f:cd:9e:ad:14:b0:a5:
                    fc:a7:47:3b:99:41:49:4e:95:cb:4b:76:66:bf:1d:
                    73:6e:c9:3d:c8:04:80:41:96:75:68:42:56:c7:e7:
                    fb:53:2d:ec:37:20:95:3d:25:3a:16:45:6e:44:fe:
                    3a:80:33:4f:d5:d4:a2:78:c3:a6:a0:0a:00:d1:93:
                    76:93:94:5c:6d:73:f7:f5:0f:38:c8:1f:23:1f:c4:
                    d6:01:b0:e6:ca:1b:d3:f7:f8:9e:f3:19:8b:ba:c3:
                    cd:6e:ed:78:d7:87:66:82:e2:4a:3f:6e:a9:ac:21:
                    3b:3c:6f:97:58:6a:27:53:60:c9:26:dc:68:88:1f:
                    87:c4:4e:d6:03:73:88:c1:81:75:25:3f:c1:b9:dd:
                    ff:0f:5a:d9:a1:f7:83:47:ee:b2:af:7d:e7:84:4e:
                    96:1c:0c:8d:d2:33:c1:9a:ae:b4:38:90:30:96:e4:
                    eb:3b:5f:30:8f:15:12:c9:3e:0a:f4:59:9d:8a:38:
                    f4:04:8a:34:e6:55:3f:f5:bd:c9:bc:43:c7:77:6c:
                    74:d8:cb:39:b1:e5:dd:0a:0b:ed:45:ee:74:6a:b8:
                    b1:3a:08:80:6a:48:41:b9:63:cd:41:d4:43:ea:61:
                    2d:f6:5d:6f:00:5f:8f:13:57:43:48:34:77:b1:9b:
                    bd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:75:1F:D8:5E:B2:EA:21:86:59:B3:8A:CB:7A:A7:00:81:FE:00:26
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/CD751FD85EB2EA218659B38ACB7AA70081FE0026.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.21.0/24
                IPv6:
                  2804:856c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272578

    Signature Algorithm: sha256WithRSAEncryption
         54:11:1e:3b:95:c2:8a:31:61:f8:54:80:83:3e:1d:97:75:77:
         5c:fc:d2:d8:0c:ca:14:15:10:79:9e:52:8e:bc:08:a7:b1:03:
         a8:40:e7:68:3b:20:07:22:ce:7f:89:50:93:1f:07:e8:f8:4f:
         c1:69:0f:72:bf:98:75:12:2e:bb:d7:9f:ce:0f:50:62:65:6d:
         b1:cb:bc:18:6f:65:a1:bc:69:61:60:98:ef:c8:e7:f2:c3:73:
         3a:34:08:c1:3e:1d:d4:e7:d4:69:5f:33:e7:29:6f:72:32:20:
         d2:9a:39:79:ed:ba:45:0a:19:7f:8f:0b:c7:cf:5f:68:4d:da:
         06:4d:26:f6:18:47:29:77:f9:d5:32:07:06:b5:47:44:a3:dc:
         95:d5:ae:49:28:a3:3c:fd:2a:b8:88:05:76:60:e4:8b:60:60:
         d4:cc:6e:94:39:3e:a5:81:20:44:8f:f8:37:ef:5f:ca:fd:10:
         36:7c:29:d9:91:f3:06:45:27:f8:c3:74:0b:5a:fa:36:a8:9b:
         fd:8d:1f:dd:44:61:2b:d9:ec:94:49:67:7c:66:af:be:6e:0a:
         ba:67:05:3f:b8:b1:c8:6d:53:1a:08:4f:45:15:ec:51:19:4c:
         b0:3e:ba:6e:d4:44:ac:45:6a:dc:5d:01:28:5f:83:3e:aa:0c:
         40:1a:ee:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 18:02:32 2025 by rpki-client