Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CEC0AF5AF059297918DAF4B61D5340AFC06062F0.cer
File:                     CEC0AF5AF059297918DAF4B61D5340AFC06062F0.cer (raw, json)
Hash identifier:          UQ4QhrocVnquIfS6ZfYU3r/sWYRPjz2VZKw/DHbMNmk=
Subject key identifier:   CE:C0:AF:5A:F0:59:29:79:18:DA:F4:B6:1D:53:40:AF:C0:60:62:F0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4A733BC7D67ECC6816471237BB1AB3BA4AE44E2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/CEC0AF5AF059297918DAF4B61D5340AFC06062F0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Sep 2022 18:55:30 +0000
Certificate not after:    Fri 08 Sep 2023 19:00:30 +0000
Subordinate resources:    AS: 268676
                          IP: 45.165.132.0/22
                          IP: 2804:54e4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:73:3b:c7:d6:7e:cc:68:16:47:12:37:bb:1a:b3:ba:4a:e4:4e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  9 18:55:30 2022 GMT
            Not After : Sep  8 19:00:30 2023 GMT
        Subject: CN=CEC0AF5AF059297918DAF4B61D5340AFC06062F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d2:7d:76:aa:3f:94:2b:ff:84:16:95:4d:ea:
                    8f:dd:2a:17:a9:01:57:9f:1c:01:f6:c9:4f:0d:d5:
                    a9:1e:71:2c:dc:ab:2d:ba:1a:b6:80:2f:d0:4a:2a:
                    09:0d:b5:c1:3d:29:64:04:20:3a:f0:ca:ca:5a:0b:
                    66:af:6f:4e:75:1f:1d:9d:0b:cf:4f:41:e9:5a:32:
                    31:74:e1:22:d4:ce:6d:ed:43:77:1c:66:74:d1:5f:
                    77:e3:7c:f9:2e:22:46:a8:be:06:ed:d4:41:5c:67:
                    61:88:42:9c:53:c5:df:5e:73:07:9c:65:13:46:72:
                    a2:26:f7:ff:df:fe:ec:76:7d:11:2d:46:49:7c:c6:
                    a6:c9:c5:ce:1f:af:e9:98:52:72:ed:b2:f1:50:b9:
                    b5:6d:17:6c:79:a9:c5:19:62:32:6b:f1:c6:e3:13:
                    02:76:03:05:a7:84:7c:3e:de:9f:4d:da:d1:da:25:
                    c0:52:ce:d9:93:50:14:15:b7:bf:fc:9d:19:82:ec:
                    96:3d:4d:0a:57:74:e0:56:a4:3a:c5:48:e1:d5:1c:
                    78:ae:69:62:bd:9c:fd:51:78:0f:6a:96:fc:ea:bf:
                    a9:03:86:67:b5:4a:7f:57:c3:02:04:ff:ef:41:1b:
                    15:f9:18:c6:f6:75:46:c2:10:14:83:21:b2:1a:4e:
                    0e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:C0:AF:5A:F0:59:29:79:18:DA:F4:B6:1D:53:40:AF:C0:60:62:F0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/CEC0AF5AF059297918DAF4B61D5340AFC06062F0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.132.0/22
                IPv6:
                  2804:54e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268676

    Signature Algorithm: sha256WithRSAEncryption
         b7:b3:c6:c0:ab:c2:92:0a:b5:f6:ee:ff:27:9c:3a:ef:e4:4b:
         bb:ff:22:93:b4:eb:5f:96:cf:c0:11:9d:e3:ee:e8:0b:6f:8f:
         34:78:1c:b4:71:2c:09:5f:2c:cf:72:be:d2:1a:d6:23:b4:db:
         37:f3:40:69:09:d7:e6:73:29:1d:0d:08:b4:ed:d1:b7:dc:95:
         6a:04:07:d2:d6:14:e1:96:bf:de:92:c8:bd:c0:0a:1a:df:f9:
         29:4c:11:69:9b:b7:66:a6:60:c6:6c:64:58:6e:cf:89:e4:81:
         4d:9a:ba:e9:58:59:ab:92:99:a0:55:2e:de:47:72:cd:f1:fc:
         70:fc:b1:49:4f:d4:9c:39:8b:4a:df:35:39:0b:fc:5e:f7:75:
         bc:ec:57:26:c9:00:b7:1b:76:ee:35:dc:99:9d:b1:c6:5d:bf:
         58:39:88:b9:23:78:75:14:c4:52:c5:b2:a7:9c:4e:e1:73:55:
         c8:6c:44:1b:ed:95:3c:88:52:e2:47:fd:a8:7a:69:37:bf:ee:
         96:b8:24:c5:de:ec:94:e4:ed:e5:89:38:c9:07:a8:5e:c1:68:
         d2:b7:f5:7a:68:71:80:9e:15:69:fa:0f:02:ed:a7:15:4b:0e:
         ce:0b:71:4a:3d:2b:e2:86:67:99:ec:ba:96:06:8c:e1:28:06:
         79:54:59:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:39:51 2025 by rpki-client