Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D58BDF9714001D4DF114FE00EE6526934B0CD314.cer
File:                     D58BDF9714001D4DF114FE00EE6526934B0CD314.cer (raw, json)
Hash identifier:          Jers2NHEQCkXwAPpxwWXBVH4f/FCj/Rn5nk2ke3NYVE=
Subject key identifier:   D5:8B:DF:97:14:00:1D:4D:F1:14:FE:00:EE:65:26:93:4B:0C:D3:14
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A8DCD00889DBF82F57C99D77173B0909257636B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/D58BDF9714001D4DF114FE00EE6526934B0CD314.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Jul 2022 19:14:18 +0000
Certificate not after:    Thu 06 Jul 2023 19:19:18 +0000
Subordinate resources:    AS: 61726
                          IP: 131.72.96.0/22
                          IP: 2804:1b68::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8d:cd:00:88:9d:bf:82:f5:7c:99:d7:71:73:b0:90:92:57:63:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  7 19:14:18 2022 GMT
            Not After : Jul  6 19:19:18 2023 GMT
        Subject: CN=D58BDF9714001D4DF114FE00EE6526934B0CD314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:86:cb:78:55:bb:b0:ac:87:00:c0:4f:02:e8:
                    50:ee:58:f1:b2:89:2c:3c:fb:c2:20:d2:c8:15:b8:
                    0b:a6:41:5c:cf:f6:6b:a9:31:a8:13:d8:9b:a3:51:
                    09:c5:a8:1e:42:7f:59:88:6f:85:fd:73:65:80:02:
                    ff:87:86:7c:34:d5:ea:ea:75:b7:7c:92:32:ee:87:
                    56:49:65:ba:42:72:a7:ba:83:eb:18:ea:18:01:28:
                    94:d2:9b:f4:35:50:6c:99:2c:49:a4:5f:08:6c:23:
                    1f:a8:1b:0d:6f:98:ad:1a:16:71:7c:91:c1:e8:b1:
                    63:62:b0:17:80:c6:18:4e:c4:c3:69:60:39:4e:9b:
                    4f:3c:3c:ab:b1:3a:3f:6d:cd:77:18:5a:fd:ed:51:
                    72:c6:db:23:b0:8f:ce:96:77:00:d7:c3:15:99:0d:
                    64:77:3b:d4:3c:f2:b9:8c:3f:e1:9b:50:6f:9c:c2:
                    4d:97:aa:71:67:26:71:03:a9:98:0a:4d:d4:89:db:
                    67:7c:dc:d5:a1:6e:42:ab:a7:ff:26:42:a3:4a:aa:
                    93:30:cd:b8:77:77:f1:15:c4:30:cf:96:69:a9:c3:
                    28:a0:28:4c:51:a8:54:a8:06:aa:44:d1:ae:12:cf:
                    56:03:54:2b:e1:d0:74:de:a0:18:da:97:25:78:b4:
                    50:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:8B:DF:97:14:00:1D:4D:F1:14:FE:00:EE:65:26:93:4B:0C:D3:14
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/D58BDF9714001D4DF114FE00EE6526934B0CD314.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.96.0/22
                IPv6:
                  2804:1b68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61726

    Signature Algorithm: sha256WithRSAEncryption
         26:0c:c9:fe:a8:0b:e3:2f:5a:74:7c:1b:45:fd:3e:90:9c:b7:
         f2:39:43:64:9e:db:5b:89:6a:3d:7a:aa:2b:73:04:27:4a:16:
         40:71:f4:86:9c:79:08:61:57:54:3e:2c:bd:dc:9d:d0:c0:c0:
         4b:08:9d:64:ee:18:1e:68:20:85:75:db:df:32:06:06:37:ec:
         8b:82:bd:df:b1:1d:b2:b2:8e:52:d7:af:25:1b:88:58:17:2e:
         85:a7:70:57:41:ef:6a:1f:36:1d:90:83:f0:4d:23:28:a5:24:
         7b:1e:b0:20:d9:34:bf:94:9a:e1:5a:49:37:cf:0d:67:b8:51:
         a8:81:af:e4:d3:0d:e4:2d:65:91:06:ef:ff:a7:31:e1:44:09:
         c2:d1:c8:4f:81:16:81:1f:45:90:4d:83:64:68:2a:73:45:b6:
         05:09:65:14:ec:12:f1:ca:51:2e:8d:0b:43:df:47:28:6d:9c:
         5a:1c:ff:62:03:2d:85:a6:77:bd:6a:3e:f1:6e:06:ba:1a:57:
         c6:98:90:c9:d7:91:5e:b2:d8:b5:e3:54:f6:e1:20:92:36:07:
         09:13:0a:12:ab:75:8f:2d:63:ea:a4:0a:d0:93:45:68:cd:e8:
         8a:0d:5b:7c:74:c1:d8:53:27:b6:8d:96:68:75:97:a6:7c:0f:
         b2:4a:1e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 09:46:14 2025 by rpki-client