Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D8F169AAC441A89B47C87E14D1D567D129DB0224.cer
File:                     D8F169AAC441A89B47C87E14D1D567D129DB0224.cer (raw, json)
Hash identifier:          yJ3oSJJS9nKihEL503R21HJYcO/dpGQ0pQyxrzoeaZs=
Subject key identifier:   D8:F1:69:AA:C4:41:A8:9B:47:C8:7E:14:D1:D5:67:D1:29:DB:02:24
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       72567782B0BA700D34736BC2B84E0155114DC282
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/0/D8F169AAC441A89B47C87E14D1D567D129DB0224.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Oct 2022 16:57:23 +0000
Certificate not after:    Tue 17 Oct 2023 17:02:23 +0000
Subordinate resources:    AS: 262343
                          IP: 143.255.124.0/22
                          IP: 177.126.128.0/20
                          IP: 2804:80c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:56:77:82:b0:ba:70:0d:34:73:6b:c2:b8:4e:01:55:11:4d:c2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 18 16:57:23 2022 GMT
            Not After : Oct 17 17:02:23 2023 GMT
        Subject: CN=D8F169AAC441A89B47C87E14D1D567D129DB0224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e1:5a:db:cc:0a:93:55:04:41:7a:0c:1f:99:
                    20:41:e4:0d:e0:a5:e9:c2:57:59:e0:96:30:b7:a1:
                    ca:b0:30:7a:cd:f9:16:1d:c8:ae:81:54:91:98:6c:
                    e7:dc:16:09:7d:06:7d:04:8b:bb:c1:4b:4b:6c:2a:
                    f6:f8:8b:24:50:8b:c3:c3:29:9e:0b:fe:16:2e:bb:
                    1f:72:66:21:f7:79:7d:e3:b3:1a:32:80:26:dc:79:
                    01:43:fe:10:bc:47:7d:39:92:b7:91:1e:44:9e:ba:
                    7b:ad:fe:0a:51:dc:55:48:c2:9f:a8:f9:2a:dc:3b:
                    17:7e:67:df:ee:9f:11:0a:2d:a5:f3:53:b1:33:e1:
                    a9:94:0b:61:94:df:33:10:99:ac:75:0a:90:56:27:
                    e8:bc:1c:10:c0:48:47:6e:96:2c:7a:4e:46:7f:a9:
                    99:6f:89:bd:98:0e:11:9f:88:4a:01:cb:09:cb:f6:
                    b9:95:85:d2:c7:d1:50:9b:71:a0:ac:53:8b:d9:1d:
                    b1:ef:7e:08:2d:e8:86:18:ff:a4:37:43:6b:d4:a6:
                    46:71:01:0f:58:35:80:06:bf:c8:11:9e:b1:ba:fe:
                    f4:59:0e:0e:fe:e6:f0:ab:fb:f7:be:b7:53:36:ee:
                    30:d1:96:16:2f:ed:fe:4c:22:5e:ce:94:68:dc:f5:
                    c2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:F1:69:AA:C4:41:A8:9B:47:C8:7E:14:D1:D5:67:D1:29:DB:02:24
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/0/D8F169AAC441A89B47C87E14D1D567D129DB0224.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.124.0/22
                  177.126.128.0/20
                IPv6:
                  2804:80c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262343

    Signature Algorithm: sha256WithRSAEncryption
         4d:31:59:6b:ec:8a:5d:d9:fb:d5:b1:2e:75:e9:4f:b0:92:3d:
         39:8c:3d:d7:7f:18:39:f1:dd:f2:d4:12:3b:5f:ad:66:78:22:
         16:9e:3f:f6:28:74:a1:6e:3f:53:8a:22:9a:e2:3d:b0:b8:66:
         9f:38:60:c6:92:74:b4:31:36:16:12:9b:84:20:31:b1:15:dd:
         03:2f:d7:1e:cd:ed:4b:c7:20:a9:49:19:d8:35:25:cc:62:0a:
         3a:0e:5d:34:a5:99:d5:07:73:db:67:96:61:07:27:58:67:a6:
         d8:71:f8:b6:5a:82:a0:bb:5f:41:d7:dc:62:a9:71:1d:67:07:
         d2:6d:4e:e1:98:f4:07:d3:65:47:5e:66:15:c3:24:b1:f0:01:
         1c:d2:4d:64:fd:4d:c8:e0:47:c8:9c:e0:e9:a8:d2:a7:85:ee:
         b2:5e:20:99:fb:bd:46:0c:2d:a2:52:a1:d1:51:6a:b6:21:d2:
         21:29:fe:c6:10:8e:da:5b:8d:16:c4:a4:5e:d1:85:b6:82:5a:
         df:34:d3:43:06:42:65:0d:bb:56:ba:a8:e0:1e:38:0d:f1:5d:
         d0:57:78:89:7a:f7:92:32:a6:6f:be:4f:36:62:35:e3:b1:3b:
         58:2d:ca:b0:93:dc:55:ac:21:36:f9:1c:14:b0:5d:e1:04:72:
         dc:3c:d7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:56 2025 by rpki-client