Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E106FEFC240ABBEBD1D589EFF1774FFC909DB7B9.cer
File:                     E106FEFC240ABBEBD1D589EFF1774FFC909DB7B9.cer (raw, json)
Hash identifier:          kaTjaFq3MxnreXztTJc0kchAz9nEuhK3mLk1ajYUpTw=
Subject key identifier:   E1:06:FE:FC:24:0A:BB:EB:D1:D5:89:EF:F1:77:4F:FC:90:9D:B7:B9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0BDAA8E7AB5D87CA151A0D16ECFAC14AE2A7C17A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/1/E106FEFC240ABBEBD1D589EFF1774FFC909DB7B9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Dec 2022 11:23:33 +0000
Certificate not after:    Mon 18 Dec 2023 11:28:33 +0000
Subordinate resources:    AS: 265102
                          IP: 170.254.96.0/22
                          IP: 2804:32e0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:da:a8:e7:ab:5d:87:ca:15:1a:0d:16:ec:fa:c1:4a:e2:a7:c1:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 19 11:23:33 2022 GMT
            Not After : Dec 18 11:28:33 2023 GMT
        Subject: CN=E106FEFC240ABBEBD1D589EFF1774FFC909DB7B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:76:ce:67:47:dd:cd:34:42:27:30:c2:5b:f3:
                    85:21:8d:94:c2:d2:78:37:3b:51:2c:d7:45:21:98:
                    5c:28:f0:8a:89:e0:18:44:b3:27:9d:77:52:40:83:
                    e5:f6:b5:3f:c4:5c:18:27:a6:2a:2f:1b:c3:78:92:
                    2a:bd:2f:3a:ce:81:c4:aa:ee:1c:d5:0d:e3:2c:fc:
                    ae:65:c0:42:dc:42:f5:84:ea:65:ef:d3:79:ee:5b:
                    5b:71:78:cf:5d:a0:2f:03:29:3b:ee:0a:f3:ef:2e:
                    bb:1a:8a:cf:dd:b7:88:f3:68:47:33:2e:44:91:c1:
                    ab:b8:5f:9e:34:7e:0e:30:b5:a8:99:42:a3:b5:95:
                    f3:01:f4:96:c3:31:ca:89:af:dd:a8:85:f1:f3:35:
                    21:23:f5:e5:3b:4c:4e:2c:70:94:7b:ea:8d:a0:3a:
                    99:ac:1a:dc:f8:0a:95:f4:26:aa:e3:5f:99:01:e5:
                    02:05:0c:f7:da:6c:ee:28:fd:75:46:08:68:a0:0c:
                    7b:d1:5e:f5:38:ef:40:68:8d:82:0f:58:8e:dd:8f:
                    fb:88:c7:b9:d0:ea:fa:cb:10:d1:fa:6f:50:9d:87:
                    0f:2a:e5:a4:2f:62:7d:09:6e:b3:8f:6b:34:e3:e9:
                    48:ab:2a:23:7b:36:6c:43:dd:94:90:89:74:ea:ef:
                    b4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:06:FE:FC:24:0A:BB:EB:D1:D5:89:EF:F1:77:4F:FC:90:9D:B7:B9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/1/E106FEFC240ABBEBD1D589EFF1774FFC909DB7B9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.96.0/22
                IPv6:
                  2804:32e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265102

    Signature Algorithm: sha256WithRSAEncryption
         93:d9:4d:3b:d9:88:ea:73:d1:d5:f8:f5:c0:f1:73:b1:d4:3f:
         3e:ca:c6:01:12:42:fb:70:25:9a:de:b8:6f:c1:99:10:64:f4:
         f6:85:b5:31:c8:d9:16:5e:6a:68:1f:95:4f:73:0d:3d:c7:24:
         82:cf:5f:cd:99:66:26:09:a0:a2:26:a8:33:8e:71:11:39:d4:
         4d:7f:9b:d9:bd:3d:8b:93:96:a2:73:db:f8:a7:7e:8b:c5:8f:
         06:f1:bb:f1:e4:55:57:1a:36:5a:e2:6b:c0:02:04:e1:21:8f:
         f7:e1:fc:f1:ef:b7:ee:27:82:b4:f0:47:51:fe:99:f8:80:90:
         ed:0b:1e:00:44:5a:b7:55:7e:af:cd:de:9e:1c:64:86:20:98:
         d2:02:a8:ca:f8:bb:22:f8:44:a4:e6:da:21:c9:0c:7e:54:bc:
         ad:01:a2:c6:a2:55:11:cd:0d:e2:31:bf:a7:cb:53:23:34:11:
         1a:ca:96:5c:f6:a2:6f:3e:9d:b0:0f:70:d2:cf:54:e1:01:7b:
         5e:82:0e:df:d8:0a:a2:f4:15:dc:2b:b7:0d:06:c2:6f:9c:ed:
         6c:bb:af:dc:ae:fc:b2:bf:7e:a1:6e:ca:53:f3:e6:bf:81:a4:
         88:c6:52:5a:be:74:f3:52:10:d0:81:73:56:57:74:11:2e:06:
         e9:65:13:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 09:47:58 2025 by rpki-client