Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D5FC9B1DD99097BCB7562113D4173B7EB61DF782.cer
File:                     D5FC9B1DD99097BCB7562113D4173B7EB61DF782.cer (raw, json)
Hash identifier:          LgNZ3mVVz9FWBcGjrVdTRLk/bsvSHpdEk3mdASwVUCU=
Subject key identifier:   D5:FC:9B:1D:D9:90:97:BC:B7:56:21:13:D4:17:3B:7E:B6:1D:F7:82
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       12D7D49F64BB57FD01A39509B7E22DDF3C953F27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/0/D5FC9B1DD99097BCB7562113D4173B7EB61DF782.mft
caRepository:             rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 02 Jan 2023 14:15:12 +0000
Certificate not after:    Mon 01 Jan 2024 14:20:12 +0000
Subordinate resources:    AS: 266647
                          IP: 128.201.164.0/22
                          IP: 2804:3f3c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d7:d4:9f:64:bb:57:fd:01:a3:95:09:b7:e2:2d:df:3c:95:3f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  2 14:15:12 2023 GMT
            Not After : Jan  1 14:20:12 2024 GMT
        Subject: CN=D5FC9B1DD99097BCB7562113D4173B7EB61DF782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:27:c7:a0:90:b0:47:ba:dd:1c:5e:00:7c:3b:
                    11:49:ec:79:2d:12:b1:33:40:62:38:e6:d1:36:d8:
                    48:ce:b0:71:fc:26:40:b8:4b:09:3b:c9:47:b7:88:
                    94:a1:76:9c:08:61:3a:38:f9:64:4f:cc:be:db:20:
                    66:a4:23:a0:69:42:ac:08:72:ca:0d:a7:cd:86:a9:
                    a0:1f:81:e0:3e:16:02:75:70:ad:a2:f7:ec:71:d4:
                    7b:12:5d:6a:80:81:a9:09:24:5e:83:0a:e8:26:de:
                    d4:49:18:a3:7e:c4:1b:36:99:46:7f:d6:ce:70:02:
                    9d:da:72:63:a1:94:95:d9:e0:e5:9d:39:3b:b1:ac:
                    77:75:47:d5:c2:c5:bf:be:d1:e3:dd:db:fd:c1:be:
                    b8:3c:11:e7:17:4b:cd:46:a2:82:5e:ba:90:d0:a0:
                    ec:38:96:4f:c6:c2:42:06:fe:2c:48:c3:6f:d6:8d:
                    03:a6:35:02:84:f8:fc:a6:4b:78:71:9b:d7:b8:8e:
                    5b:b6:b3:18:04:c0:15:8e:15:6c:e9:0d:91:d2:ba:
                    08:b1:40:6c:d3:be:9f:d2:64:8a:31:14:29:24:72:
                    af:be:17:8e:8c:5e:2b:15:48:5f:19:ef:29:8f:98:
                    44:7b:99:7c:9c:ae:e9:5a:53:da:90:89:fe:a9:8b:
                    1e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:FC:9B:1D:D9:90:97:BC:B7:56:21:13:D4:17:3B:7E:B6:1D:F7:82
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/97PJnaV91PLGva4tj7iCQ1Eskx2QA7ZXVEB6ZwGwDy5u/0/D5FC9B1DD99097BCB7562113D4173B7EB61DF782.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.164.0/22
                IPv6:
                  2804:3f3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266647

    Signature Algorithm: sha256WithRSAEncryption
         17:7a:27:1c:c8:cf:e2:1e:92:42:c6:d8:f4:79:e4:a6:d5:5d:
         91:8f:c2:3e:58:e6:1d:d2:5c:17:b7:49:88:66:1b:c8:54:79:
         4e:a4:c6:32:73:5b:f7:8c:83:d3:a7:d8:c3:e2:96:0b:53:68:
         b2:e2:be:4e:58:ea:2d:67:fe:08:e2:1f:da:2d:9c:e1:1d:d7:
         c4:6a:8a:76:4f:5f:1e:bc:73:e6:c0:f5:1c:2e:97:fa:09:df:
         bc:63:78:25:be:b1:a2:3a:2a:ee:ee:4b:52:d4:59:d2:db:25:
         9d:5a:5b:81:60:af:62:90:06:77:23:75:ae:40:8e:93:db:84:
         a2:fa:f4:4b:3c:23:c1:85:bf:e6:fc:1f:e5:3a:af:ff:dc:09:
         e9:d6:05:f1:89:3f:cb:c5:2a:93:2f:99:39:38:b9:3d:20:31:
         84:1d:3e:6a:de:02:9c:4d:07:34:e3:3b:a3:98:89:7b:83:c7:
         4d:d1:8c:84:c3:b2:5d:b9:f8:3a:12:66:92:e2:bf:3f:aa:79:
         ec:a1:9b:58:28:a4:93:5c:94:78:6b:a3:3f:0c:c5:4e:1c:c8:
         e7:26:50:54:bd:31:55:c8:60:4b:0e:33:02:12:24:cb:ad:fa:
         40:36:e9:18:b5:28:6f:db:99:70:70:a3:9b:2e:e4:ec:8c:08:
         9f:60:06:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 05:53:19 2025 by rpki-client