Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DEC7D95EABAC6E27B59D47C1F7198CE2294C1289.cer
File:                     DEC7D95EABAC6E27B59D47C1F7198CE2294C1289.cer (raw, json)
Hash identifier:          EEXobCSMW7gAGK5ZT3PvdG6IZPe5mW4iZLKbhAO8mcA=
Subject key identifier:   DE:C7:D9:5E:AB:AC:6E:27:B5:9D:47:C1:F7:19:8C:E2:29:4C:12:89
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5E2B16ACB22F753C4F90549F2A6F07A3CDD9EB34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/DEC7D95EABAC6E27B59D47C1F7198CE2294C1289.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Jun 2022 18:04:38 +0000
Certificate not after:    Fri 09 Jun 2023 18:09:38 +0000
Subordinate resources:    AS: 266232
                          IP: 45.6.180.0/22
                          IP: 2804:3cc0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2b:16:ac:b2:2f:75:3c:4f:90:54:9f:2a:6f:07:a3:cd:d9:eb:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 10 18:04:38 2022 GMT
            Not After : Jun  9 18:09:38 2023 GMT
        Subject: CN=DEC7D95EABAC6E27B59D47C1F7198CE2294C1289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cd:fb:1e:65:b5:a3:d4:17:9e:09:2a:ed:81:
                    97:40:e4:cc:c6:d0:93:d4:c0:2a:17:4e:f9:ef:05:
                    b9:8f:81:f4:69:fa:3b:4e:9a:a2:96:08:ce:12:a4:
                    b3:78:55:b8:56:a1:f7:0e:d8:8f:d8:35:9a:51:eb:
                    5f:33:d4:fb:67:38:04:45:a9:c3:b8:35:7f:76:71:
                    7a:c9:65:9d:23:88:21:87:81:cf:c1:6b:b6:12:6c:
                    6b:13:bb:43:d8:b5:fd:22:55:1d:fd:e4:de:71:0e:
                    0a:a4:75:24:5d:4f:52:ae:38:14:b8:90:a9:16:a1:
                    99:22:c3:bc:24:17:c1:a0:05:73:8d:13:10:c3:b5:
                    1a:0a:fb:3c:de:ca:0d:7b:34:93:d7:5b:5b:73:9b:
                    d9:86:56:d9:33:59:d2:d8:4b:7d:42:29:7a:4f:6d:
                    8d:cb:8a:37:ff:9f:ab:c8:3d:17:3c:40:e4:1f:29:
                    0f:8a:6d:76:1b:ec:b7:b7:23:4d:c6:37:22:41:e6:
                    68:64:8a:00:86:03:7a:eb:18:c7:4b:39:d6:bd:6f:
                    a2:4a:9a:d8:03:01:20:d6:52:ee:e2:e6:f9:26:34:
                    cc:28:fe:2f:89:a7:88:90:71:27:8d:56:4b:ff:92:
                    85:e1:54:c5:8a:1d:b1:f6:82:1b:25:e2:7c:42:8f:
                    dd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:C7:D9:5E:AB:AC:6E:27:B5:9D:47:C1:F7:19:8C:E2:29:4C:12:89
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/DEC7D95EABAC6E27B59D47C1F7198CE2294C1289.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.180.0/22
                IPv6:
                  2804:3cc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266232

    Signature Algorithm: sha256WithRSAEncryption
         a8:fb:42:cf:ee:b8:7e:95:61:89:dd:f6:28:41:ac:3d:c8:73:
         c9:d7:07:08:cf:92:f5:60:42:26:a1:b6:0f:7b:16:fc:4f:40:
         4e:94:89:d4:b3:da:80:b1:60:c2:58:3e:6c:4c:a4:d2:f0:88:
         7d:53:95:22:e5:69:fa:36:ad:e8:9f:9f:b9:97:29:5b:32:b5:
         f9:a4:00:09:4f:65:86:69:9c:89:80:41:9b:88:6f:0e:fe:fc:
         e2:a6:a7:2b:6b:17:f6:e9:96:5b:4f:e8:24:16:9e:d7:57:9a:
         99:ae:c3:eb:f0:85:c6:db:c5:f3:d1:4e:4f:f1:84:78:e2:51:
         4d:42:00:e0:01:f7:1a:99:ae:78:c9:4a:4e:5b:08:25:8c:c6:
         03:01:d0:14:a0:d6:58:28:44:c9:33:e7:f3:84:ae:8f:ab:09:
         bd:41:fb:6f:0c:88:f9:f5:73:89:e8:05:c2:b8:4c:55:e2:79:
         06:93:24:d4:13:58:b1:9a:14:08:c2:e7:e6:95:fe:2b:57:58:
         f2:28:1b:88:a7:25:0b:eb:a0:cd:77:ad:9c:5e:a3:cd:87:a1:
         fc:b8:7e:d0:99:a4:b4:f5:07:2a:54:42:e1:73:db:9d:cd:6d:
         cd:5a:47:0d:27:77:78:51:d9:9d:4b:94:2c:53:c7:bc:33:5d:
         57:ba:b4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:39:45 2025 by rpki-client