Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D2CBB60B1EAB383D6CF9F9009D9F617D7DC16FC7.cer
File:                     D2CBB60B1EAB383D6CF9F9009D9F617D7DC16FC7.cer (raw, json)
Hash identifier:          4nSbA2N/I6Sh4ShE1cfppiJ9w+cCtCf8X5WNxig4M98=
Subject key identifier:   D2:CB:B6:0B:1E:AB:38:3D:6C:F9:F9:00:9D:9F:61:7D:7D:C1:6F:C7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       22E5BE6225B8684D4983B6A657FD395E6B29F2D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/D2CBB60B1EAB383D6CF9F9009D9F617D7DC16FC7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Mar 2023 00:40:55 +0000
Certificate not after:    Fri 15 Mar 2024 00:45:55 +0000
Subordinate resources:    AS: 264344
                          IP: 138.185.84.0/22
                          IP: 2804:2674::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e5:be:62:25:b8:68:4d:49:83:b6:a6:57:fd:39:5e:6b:29:f2:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 17 00:40:55 2023 GMT
            Not After : Mar 15 00:45:55 2024 GMT
        Subject: CN=D2CBB60B1EAB383D6CF9F9009D9F617D7DC16FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:d8:bd:4b:ae:84:30:38:1e:eb:ec:b2:40:
                    1c:9e:3e:dc:66:f5:90:f7:de:c2:35:01:d3:7a:20:
                    3c:bf:7e:75:12:f1:47:e6:a1:01:4e:ba:68:74:c4:
                    d7:26:c2:f3:c3:9e:62:c9:af:16:f2:f1:f4:be:65:
                    5b:34:3e:78:fe:60:3c:c9:d5:46:cd:55:f8:10:a5:
                    a4:b5:27:8c:15:38:40:a7:88:32:99:9a:eb:da:3b:
                    ad:78:bd:1d:9a:13:2b:5d:9b:bc:45:0d:5d:46:4e:
                    29:ba:ea:29:32:54:a7:ee:e4:f7:1f:05:64:9a:7d:
                    fb:3a:6c:11:ca:70:54:70:ce:78:5d:c6:c7:c0:cd:
                    78:5f:13:ab:a5:e5:fc:3d:27:07:20:ed:48:9d:7b:
                    1d:3d:0d:f7:33:f2:c6:53:a3:15:4d:fb:44:c6:8a:
                    0b:44:72:75:50:90:f9:9c:e2:6f:5c:9d:90:19:ad:
                    fe:ae:cd:4e:3f:fa:da:c9:04:ff:ed:00:ac:d8:9a:
                    76:2e:db:6f:68:cc:b4:f0:cf:8b:6c:7f:62:cb:0b:
                    ce:d3:72:53:08:fa:f2:b3:4b:b6:aa:f8:7b:70:34:
                    ba:49:61:4f:e0:b3:82:b4:d7:37:20:0f:a1:da:2b:
                    77:e4:7a:0f:ff:72:dd:32:b1:01:4c:cf:23:e9:6a:
                    19:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:CB:B6:0B:1E:AB:38:3D:6C:F9:F9:00:9D:9F:61:7D:7D:C1:6F:C7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/D2CBB60B1EAB383D6CF9F9009D9F617D7DC16FC7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.84.0/22
                IPv6:
                  2804:2674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264344

    Signature Algorithm: sha256WithRSAEncryption
         3f:72:7a:8b:4d:29:04:a6:73:b0:c9:78:05:c4:f1:32:dd:21:
         7e:df:16:5d:45:72:ff:8b:49:1d:83:f2:66:be:35:0b:d8:63:
         5f:43:cf:b1:37:47:73:dc:50:90:e8:f3:8f:e6:b5:c2:8e:15:
         3a:90:fe:fc:98:50:94:64:e5:42:01:5c:67:85:14:88:d3:8a:
         df:32:09:f3:a7:1d:0d:12:d7:b6:92:be:a6:9e:90:d1:04:a1:
         73:4c:f9:b9:7a:c5:e6:9d:d1:15:0e:58:8b:d1:b6:2a:cd:68:
         22:7c:c1:a2:22:32:22:c6:b4:90:05:cb:0c:4d:58:07:e8:cf:
         e3:88:4f:b7:5b:03:ff:e1:b2:91:e5:26:bf:51:7f:f6:75:fc:
         b5:0e:1b:0a:ea:68:f9:da:11:14:42:79:8b:46:4b:c9:e3:f6:
         48:fe:e6:64:9e:a4:48:38:13:e5:11:4b:e7:ca:47:a1:98:c6:
         bc:97:03:7a:90:48:3f:62:75:82:3a:84:15:be:03:a5:cb:98:
         8a:51:26:fa:3d:99:51:88:0e:42:78:e6:53:5b:b8:06:2a:97:
         2c:46:f0:0d:83:d5:23:cc:2b:1d:a2:66:75:5c:38:94:17:ca:
         b5:90:3b:57:7f:41:d7:3c:3c:37:ed:8e:e8:4e:b6:ea:85:ad:
         9f:ff:8a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:22 2025 by rpki-client