Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DB5FFBAA001BE1EF6AFC52EA20F64BB33FA3E228.cer
File:                     DB5FFBAA001BE1EF6AFC52EA20F64BB33FA3E228.cer (raw, json)
Hash identifier:          C7Ps+FXFm9vk0s27Y5hZneJfnO9TIs/yq2cPgz+27iY=
Subject key identifier:   DB:5F:FB:AA:00:1B:E1:EF:6A:FC:52:EA:20:F6:4B:B3:3F:A3:E2:28
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       16385729C292E5493E051F16D93F8F1AA0B41786
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/DB5FFBAA001BE1EF6AFC52EA20F64BB33FA3E228.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Jul 2022 21:12:54 +0000
Certificate not after:    Wed 19 Jul 2023 21:17:54 +0000
Subordinate resources:    AS: 263326
                          IP: 191.7.176.0/21
                          IP: 2804:1458::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:38:57:29:c2:92:e5:49:3e:05:1f:16:d9:3f:8f:1a:a0:b4:17:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 20 21:12:54 2022 GMT
            Not After : Jul 19 21:17:54 2023 GMT
        Subject: CN=DB5FFBAA001BE1EF6AFC52EA20F64BB33FA3E228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:f6:38:29:bc:3b:b9:4c:20:59:12:af:1a:
                    9f:1b:04:c1:17:19:e9:5d:d4:38:f2:d6:25:78:73:
                    20:87:a1:81:85:bc:6b:ec:9c:fe:61:e6:0e:3b:38:
                    a2:c4:a7:cd:99:4a:15:b3:63:96:8d:a2:c9:2d:fa:
                    e7:f8:b9:50:ca:2e:15:ab:84:8d:62:a1:d3:07:80:
                    62:51:64:46:ab:79:69:2e:6f:47:1c:2f:ae:77:e0:
                    98:8e:62:a8:47:56:a3:a1:29:3a:53:8f:8e:b9:b6:
                    b3:68:c1:6c:e6:36:e7:77:a3:b5:db:90:41:cc:57:
                    20:01:a5:b2:19:24:ff:2c:7e:df:6d:25:2f:f7:eb:
                    66:9e:c1:c3:2c:c4:12:bd:6d:f9:f9:9a:0f:1d:88:
                    4e:23:6e:70:6b:ef:a5:49:20:16:e4:e2:e7:93:24:
                    a5:83:c5:83:cd:58:9b:33:bf:63:e0:c8:02:a2:19:
                    92:55:65:39:89:6a:59:f7:93:20:c1:6d:68:87:54:
                    fc:db:a7:97:53:fb:f2:a1:c8:58:7b:5e:f1:9d:a1:
                    de:97:5b:ec:89:88:eb:90:a3:5f:04:2a:bd:45:a3:
                    b4:95:f2:ca:94:0b:02:09:77:ce:34:c5:0e:2e:55:
                    dc:54:2f:2f:73:00:72:76:1f:98:f7:93:fb:33:cc:
                    5b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:5F:FB:AA:00:1B:E1:EF:6A:FC:52:EA:20:F6:4B:B3:3F:A3:E2:28
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/DB5FFBAA001BE1EF6AFC52EA20F64BB33FA3E228.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.176.0/21
                IPv6:
                  2804:1458::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263326

    Signature Algorithm: sha256WithRSAEncryption
         56:30:d5:d5:35:d9:ac:88:d7:a7:a3:f8:32:44:9f:92:3c:50:
         08:82:20:d0:8e:9f:13:96:1f:90:64:5b:64:c5:19:1e:e0:44:
         aa:5d:20:98:6c:20:30:c8:95:f0:fe:db:02:5f:e3:9a:e8:4d:
         64:55:40:3a:a2:f6:19:5b:bf:c2:1f:05:44:1c:4a:dd:89:fa:
         72:c8:e8:aa:72:4f:77:d0:8f:c8:fb:c0:d5:49:32:70:7f:ea:
         73:29:e5:c3:2f:b3:cb:5c:ba:a5:50:ca:87:09:d3:84:75:7b:
         56:c1:f2:ba:94:b0:8a:67:8d:e5:7f:e9:51:b0:26:a5:f5:f9:
         9c:8c:81:12:31:91:a2:d3:03:48:17:64:e6:a7:3d:12:c6:fc:
         a1:3b:34:a7:5a:f7:17:f3:54:ee:25:4c:58:01:f9:6b:40:ba:
         12:c4:fc:ae:3b:98:72:37:d5:bb:04:53:d9:1a:de:c7:54:55:
         c6:03:96:c6:ce:0b:77:b6:a6:9b:b1:87:ee:3d:2f:da:41:a2:
         eb:ed:9d:f3:4e:83:18:8e:70:f1:cd:b3:11:e9:fe:0f:dc:8c:
         a0:ec:59:e1:2a:7f:f7:37:85:10:20:2e:7c:24:3e:6d:07:1d:
         c9:96:d1:26:b6:3d:58:21:e9:0e:f3:bf:23:55:c5:9a:df:72:
         5b:82:95:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:41 2025 by rpki-client