Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D423EE56121837F3E2A9345C78241A27F56D76AE.cer
File:                     D423EE56121837F3E2A9345C78241A27F56D76AE.cer (raw, json)
Hash identifier:          YPDRXo7GSMB8qAAwCinlcTZTHsn6T33JmPXkDX3K2S0=
Subject key identifier:   D4:23:EE:56:12:18:37:F3:E2:A9:34:5C:78:24:1A:27:F5:6D:76:AE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1591A27D612FA92326A5A8950852AD04CB34E51A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/736R7tiZmcBcx8SBm9noMQ5GPWXkdnRt1XdJWxt3Qv2J/0/D423EE56121837F3E2A9345C78241A27F56D76AE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/736R7tiZmcBcx8SBm9noMQ5GPWXkdnRt1XdJWxt3Qv2J/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 08 Mar 2022 13:40:42 +0000
Certificate not after:    Tue 07 Mar 2023 13:45:42 +0000
Subordinate resources:    AS: 267401
                          IP: 45.234.96.0/22
                          IP: 2804:4cec::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:91:a2:7d:61:2f:a9:23:26:a5:a8:95:08:52:ad:04:cb:34:e5:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 13:40:42 2022 GMT
            Not After : Mar  7 13:45:42 2023 GMT
        Subject: CN=D423EE56121837F3E2A9345C78241A27F56D76AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:16:32:13:1f:14:96:ce:d6:77:ba:12:08:
                    dc:44:f0:54:78:df:de:be:42:ea:74:28:f5:0b:27:
                    4a:67:43:05:69:47:88:98:50:23:2c:a6:25:7b:b5:
                    e5:c4:26:e1:16:d2:cb:42:31:8d:bb:55:5f:63:26:
                    94:4f:43:de:b6:71:5e:a2:4f:ed:2e:39:a3:69:90:
                    a6:cd:f4:42:38:ae:e2:cc:a4:5d:99:86:db:cf:66:
                    e8:f7:72:a5:d4:85:49:97:26:af:dd:3c:45:fc:f4:
                    e9:7d:97:29:2a:75:ee:ee:69:b6:a5:49:82:99:aa:
                    18:96:db:18:e8:3a:d6:69:50:06:0c:2b:ff:d1:42:
                    9f:5c:49:f7:7b:a2:1c:86:2d:98:e5:69:8b:5f:4c:
                    0a:e5:c9:70:45:b1:ab:82:02:56:2f:56:e4:c9:50:
                    e4:14:d9:5c:9b:da:e7:af:20:5d:21:20:c1:f1:f7:
                    27:3f:4e:e2:bf:07:8b:38:b7:68:52:06:f5:db:1a:
                    58:73:80:37:17:2a:08:ca:8e:a1:cd:13:9e:0d:f3:
                    71:21:63:75:d1:5f:38:b0:6f:dc:ba:6b:f3:96:c8:
                    b7:64:2a:f3:ad:31:ba:05:50:62:50:70:30:b9:65:
                    14:28:bb:88:98:dd:98:23:dd:b3:c8:f5:78:62:f6:
                    28:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:23:EE:56:12:18:37:F3:E2:A9:34:5C:78:24:1A:27:F5:6D:76:AE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/736R7tiZmcBcx8SBm9noMQ5GPWXkdnRt1XdJWxt3Qv2J/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/736R7tiZmcBcx8SBm9noMQ5GPWXkdnRt1XdJWxt3Qv2J/0/D423EE56121837F3E2A9345C78241A27F56D76AE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.96.0/22
                IPv6:
                  2804:4cec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267401

    Signature Algorithm: sha256WithRSAEncryption
         92:c3:96:4c:cb:fa:5b:df:42:63:95:10:d4:d3:05:15:cb:41:
         34:fe:9f:a9:f3:c9:18:9d:28:b9:c7:57:cd:4f:61:4b:17:5d:
         28:78:0b:50:fa:ed:a7:7c:27:87:e4:91:98:9d:bf:f0:be:1b:
         ef:34:5e:e6:87:27:8c:c6:0d:83:7f:92:ce:1c:84:5a:61:2f:
         27:da:17:4a:c7:4a:5e:d4:a1:8e:00:31:aa:5a:73:e1:99:ba:
         53:a1:a5:dd:ce:20:70:77:c4:ea:b6:46:5f:d9:5c:7f:45:59:
         61:0a:b8:bd:03:ff:7b:2a:7c:37:ce:d9:57:ca:1b:9c:89:da:
         d6:42:5e:74:c4:d8:e2:a4:41:e0:87:6a:7c:17:c8:54:ab:6d:
         23:f6:2c:c1:df:ee:09:2c:cc:dc:ad:9a:31:93:64:66:8d:a8:
         4c:bb:f2:03:72:6b:ee:5c:02:4b:f7:6a:3a:4a:42:d1:dd:7f:
         57:cf:5c:39:35:88:7e:b2:d1:c2:7e:ca:d3:16:d6:4a:95:1f:
         bb:3c:bc:c8:a3:bf:4d:79:22:83:58:2c:cf:d9:8a:a0:49:2a:
         34:8c:d3:a6:aa:49:85:32:01:fd:f5:94:0f:b4:ee:fd:05:cb:
         a6:93:70:79:a7:76:cd:49:df:eb:e4:d1:ad:cf:6d:3f:24:67:
         f2:12:f9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:21:38 2025 by rpki-client