Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E569A5CEFBF6CD5EE6022A7B727AC8D90605C2AD.cer
File:                     E569A5CEFBF6CD5EE6022A7B727AC8D90605C2AD.cer (raw, json)
Hash identifier:          fpxXxhFBnq+LmoJ6AFy7QWCbWoKTAprFWhUK/kWqqSI=
Subject key identifier:   E5:69:A5:CE:FB:F6:CD:5E:E6:02:2A:7B:72:7A:C8:D9:06:05:C2:AD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6735D2DD07B35E0359DBFAAFA1BB00ABD36A8AD6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E569A5CEFBF6CD5EE6022A7B727AC8D90605C2AD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Jun 2022 17:59:06 +0000
Certificate not after:    Fri 16 Jun 2023 18:04:06 +0000
Subordinate resources:    AS: 52901
                          IP: 138.94.4.0/22
                          IP: 177.11.152.0/21
                          IP: 191.7.80.0/20
                          IP: 2804:1420::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:35:d2:dd:07:b3:5e:03:59:db:fa:af:a1:bb:00:ab:d3:6a:8a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 17 17:59:06 2022 GMT
            Not After : Jun 16 18:04:06 2023 GMT
        Subject: CN=E569A5CEFBF6CD5EE6022A7B727AC8D90605C2AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:95:ed:a5:4a:f9:69:8f:2b:d1:e1:13:38:
                    52:a6:58:54:d7:6d:5a:72:f6:1e:06:7a:65:76:da:
                    d9:49:50:be:38:f2:1b:34:af:cc:50:7a:07:63:e8:
                    51:22:94:d9:33:bf:40:fc:5e:e6:d9:2e:eb:76:fa:
                    61:38:a9:a1:54:f5:31:d1:74:f6:fd:2a:b9:e0:ec:
                    05:2f:00:36:e8:98:17:4e:ba:07:1c:44:c3:01:f8:
                    2c:31:cd:72:cf:2c:7d:6e:a4:ab:d3:04:dc:96:fe:
                    22:af:26:ba:a8:90:12:3a:1e:62:23:b4:c3:98:e6:
                    e3:32:b5:52:80:33:e7:13:14:cd:1a:a1:b0:4f:97:
                    1b:bd:0c:88:2c:ca:e9:88:58:c0:52:25:da:82:ba:
                    76:9b:8e:8c:77:47:4e:d5:11:5b:ee:e9:9f:bc:2b:
                    1d:ce:b3:75:7a:bf:4a:f2:c2:82:84:63:52:3a:8d:
                    7b:e6:52:f1:c8:b9:31:71:85:65:06:31:7e:00:a5:
                    78:81:2d:f4:b1:75:13:86:8d:76:fc:9d:f9:9b:21:
                    0d:52:99:26:6d:61:b4:d5:e6:79:8f:55:96:fe:18:
                    d0:d9:19:e0:43:5f:cb:12:9e:72:c2:2c:44:96:e0:
                    1b:ab:cf:d4:14:20:91:30:7b:1b:84:32:d0:7d:95:
                    12:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:69:A5:CE:FB:F6:CD:5E:E6:02:2A:7B:72:7A:C8:D9:06:05:C2:AD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E569A5CEFBF6CD5EE6022A7B727AC8D90605C2AD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.4.0/22
                  177.11.152.0/21
                  191.7.80.0/20
                IPv6:
                  2804:1420::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52901

    Signature Algorithm: sha256WithRSAEncryption
         73:d8:35:18:22:14:63:56:c9:3d:58:6a:b5:1c:f7:0a:62:30:
         46:69:25:f4:17:77:61:f9:c8:32:75:18:84:70:0e:23:14:33:
         b3:d1:18:77:1b:82:c1:d4:de:4f:40:bb:8d:00:cc:0d:32:f1:
         26:55:50:db:67:8b:87:1c:93:0a:14:fe:e4:3d:38:ef:34:73:
         36:4f:6c:24:ad:61:48:2f:c6:5d:46:13:bb:d7:54:f9:50:fb:
         47:78:0c:c8:18:de:ce:14:fd:ee:2f:38:5b:5d:53:a5:d6:72:
         2b:03:e3:d1:f6:44:9f:ef:4e:3b:82:15:e4:18:1a:5f:9a:27:
         89:c2:84:30:cf:5e:66:e8:47:68:3f:c2:bb:0d:ff:42:fc:a5:
         0c:ba:3c:5e:23:02:b5:5f:c3:41:da:87:3c:8b:aa:12:80:00:
         72:d0:c7:60:20:2b:46:85:6f:9d:88:8f:26:cf:d7:3e:2d:eb:
         53:7e:d4:9a:08:d6:0d:06:88:21:7e:b9:89:38:ee:c6:cb:bb:
         39:e6:a0:0c:d0:36:e3:01:f6:a1:c7:8a:60:12:f2:22:a1:6d:
         bd:00:3d:c8:df:bb:f6:1d:39:34:28:e4:93:c1:6d:29:82:1f:
         41:7c:51:40:36:28:ff:c5:97:e9:5f:c0:64:fc:0e:a4:84:7d:
         e9:ac:c1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:57:23 2025 by rpki-client