Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DCEEF876280AD0F8A64408AA561950E992DBCBD8.cer
File:                     DCEEF876280AD0F8A64408AA561950E992DBCBD8.cer (raw, json)
Hash identifier:          U9RTCQXNoBdZdylnl4fQlNlUzPHqtjcqqcXVGOqSCHk=
Subject key identifier:   DC:EE:F8:76:28:0A:D0:F8:A6:44:08:AA:56:19:50:E9:92:DB:CB:D8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       226A0B472165E67A0FA985A2A9BF259CADEFB2FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/0/DCEEF876280AD0F8A64408AA561950E992DBCBD8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Oct 2021 16:50:26 +0000
Certificate not after:    Fri 30 Sep 2022 16:55:26 +0000
Subordinate resources:    AS: 263582
                          IP: 131.255.204.0/22
                          IP: 168.196.80.0/22
                          IP: 179.109.80.0/21
                          IP: 2804:f60::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6a:0b:47:21:65:e6:7a:0f:a9:85:a2:a9:bf:25:9c:ad:ef:b2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  1 16:50:26 2021 GMT
            Not After : Sep 30 16:55:26 2022 GMT
        Subject: CN=DCEEF876280AD0F8A64408AA561950E992DBCBD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:89:64:22:b5:93:8a:c0:3c:64:66:66:12:1f:
                    3f:ad:34:ef:33:08:82:0d:16:17:df:50:f9:70:85:
                    77:79:d5:2c:77:dd:49:0b:4d:40:09:82:3f:da:9e:
                    1d:a2:57:cc:7d:be:c9:01:8d:3b:93:b6:55:06:5d:
                    e5:f4:2d:09:ff:ec:39:51:7c:ef:4f:58:70:04:f4:
                    04:bf:89:b1:78:53:1f:dc:84:82:9f:f0:ac:4e:c4:
                    38:92:ce:86:36:b7:87:8c:ca:e6:a2:c7:9f:7b:9c:
                    c4:8a:49:aa:a2:d5:47:61:fc:8e:bf:4c:5a:48:15:
                    ae:f0:f7:d4:51:b2:f3:ac:5a:3a:04:0e:47:fa:68:
                    a8:f8:4f:b1:bb:55:70:ac:a5:f6:b4:ea:b2:dc:38:
                    29:d9:23:97:b1:03:16:f5:12:af:0f:a0:ed:bb:25:
                    7d:e1:b2:b7:50:68:26:e4:f9:67:96:f1:86:8d:5f:
                    92:41:88:40:a4:ce:c6:56:66:b9:90:12:2b:82:b5:
                    43:08:cc:78:e7:30:57:ad:46:09:90:0d:85:31:e3:
                    58:b4:5d:d9:11:bc:7c:78:bd:c1:66:62:5a:2f:07:
                    b2:e2:52:96:95:5d:b2:52:64:77:fa:bc:55:5d:1b:
                    8b:f2:84:65:da:f2:14:24:c9:3e:81:16:93:27:5e:
                    2d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:EE:F8:76:28:0A:D0:F8:A6:44:08:AA:56:19:50:E9:92:DB:CB:D8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/0/DCEEF876280AD0F8A64408AA561950E992DBCBD8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.204.0/22
                  168.196.80.0/22
                  179.109.80.0/21
                IPv6:
                  2804:f60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263582

    Signature Algorithm: sha256WithRSAEncryption
         1d:fc:9f:52:46:a4:3c:b7:2a:de:29:a8:7b:73:5f:f8:2a:50:
         41:80:32:57:cd:be:66:4f:c0:ad:78:cb:8c:fb:27:ca:f5:ff:
         c2:bb:90:8d:0f:ed:46:f2:24:47:28:3a:03:84:71:33:af:89:
         ff:ff:2d:00:10:fa:81:52:c3:ff:d8:fa:ae:11:3e:56:8f:e7:
         f0:69:21:1f:75:f6:3e:3f:f8:67:06:f6:8b:a9:a7:9a:08:ab:
         e5:b1:2a:12:bd:e7:e3:0f:1d:dc:6a:e4:87:59:23:ae:91:22:
         ee:cb:bf:d7:7a:ad:88:ae:4e:9a:03:5e:f9:2f:82:90:7a:82:
         69:f3:8d:82:61:99:af:ac:bb:20:bf:ab:03:4f:6d:5b:66:55:
         7c:04:86:23:73:2e:5b:6b:b6:d0:50:f5:ed:f8:62:36:8d:b0:
         1a:df:d5:34:c9:cf:fc:a6:0a:96:a0:7e:12:ad:8d:e7:a6:15:
         17:89:f5:01:2f:a6:2b:46:20:96:f0:34:15:27:d9:1e:19:ae:
         22:3d:41:1a:33:ab:f1:bf:b8:75:68:16:6c:9d:0f:5c:66:50:
         56:48:bd:98:df:c0:41:7b:33:6c:ee:cd:08:14:de:a8:c2:23:
         c0:e5:20:a6:fe:0c:c4:0a:ab:4d:70:01:dd:41:42:65:b0:ab:
         13:10:54:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:31 2025 by rpki-client