Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EB80367D414604AC04F374F20B30199673DE9B4D.cer
File:                     EB80367D414604AC04F374F20B30199673DE9B4D.cer (raw, json)
Hash identifier:          LMhkpMjKrCActk2bC9aeBjAavKlt7h1xhVVD27F9v+U=
Subject key identifier:   EB:80:36:7D:41:46:04:AC:04:F3:74:F2:0B:30:19:96:73:DE:9B:4D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5BD749AFD15A95F00FDF13E0FCEA9D58A232A0CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/EB80367D414604AC04F374F20B30199673DE9B4D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 18 Oct 2023 12:42:56 +0000
Certificate not after:    Wed 16 Oct 2024 12:47:56 +0000
Subordinate resources:    AS: 264329
                          IP: 138.122.136.0/22
                          IP: 2804:265c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d7:49:af:d1:5a:95:f0:0f:df:13:e0:fc:ea:9d:58:a2:32:a0:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 18 12:42:56 2023 GMT
            Not After : Oct 16 12:47:56 2024 GMT
        Subject: CN=EB80367D414604AC04F374F20B30199673DE9B4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:df:b6:12:c1:ba:f7:19:98:00:52:fb:98:a4:
                    2d:9b:a9:45:93:a7:7f:c5:33:fc:48:37:64:c3:88:
                    cd:69:eb:8f:8e:36:a4:cd:35:91:10:a0:58:23:3f:
                    fa:58:73:0e:2c:9a:2c:fa:e0:1b:65:1f:b1:ff:81:
                    06:ad:2a:16:69:41:00:98:1d:0a:cf:b4:63:86:77:
                    2c:fa:a5:0a:4e:02:e7:28:8e:2c:21:25:4b:50:92:
                    76:d2:ee:d7:68:30:d0:1e:a1:d4:68:1f:8a:86:b8:
                    dc:3f:32:c1:d3:17:28:df:c4:9c:53:90:6b:17:c5:
                    0a:c9:8d:28:3c:6c:65:bf:ac:28:2e:cb:5a:81:61:
                    6f:c6:a1:f6:51:11:04:b7:75:e8:35:bf:3d:3d:d4:
                    8f:50:48:fb:d1:c5:90:9e:b9:26:35:2d:9e:23:29:
                    80:ac:c1:d3:d3:4b:93:78:d5:e5:04:64:6e:cb:6a:
                    2e:62:11:14:94:0b:e7:59:76:65:cc:38:db:4a:1d:
                    d3:51:a5:db:e5:38:0b:3b:fe:22:e7:8e:e7:a0:60:
                    62:21:0d:ee:af:02:01:9c:6a:01:28:5b:3a:6e:56:
                    65:58:0e:69:91:a6:6f:33:4c:26:16:6c:1a:b6:fc:
                    74:d8:c7:e8:c8:8b:44:0e:3f:cb:70:1b:1a:5b:ff:
                    2d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:80:36:7D:41:46:04:AC:04:F3:74:F2:0B:30:19:96:73:DE:9B:4D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/EB80367D414604AC04F374F20B30199673DE9B4D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.136.0/22
                IPv6:
                  2804:265c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264329

    Signature Algorithm: sha256WithRSAEncryption
         0f:9d:6c:4f:56:74:72:8e:a6:8f:3b:8e:cc:28:df:4a:75:88:
         48:81:23:c2:7a:75:3c:42:7f:b4:cb:29:01:5f:b9:94:74:16:
         64:34:6e:02:92:0d:88:01:13:9d:3c:f6:65:46:cc:5d:cf:5c:
         66:00:7b:d2:5a:74:8b:d7:09:76:ab:18:77:0d:a4:fe:4e:73:
         c2:13:1a:37:7e:63:e4:d4:b7:9d:ff:65:cc:14:5a:4c:1d:10:
         18:0e:cf:f6:91:9e:2c:90:59:13:d8:f3:0c:4c:48:9a:eb:95:
         5d:be:6c:c9:a2:9e:f4:e9:00:4b:00:29:51:fc:8d:4e:26:d1:
         e3:45:5c:61:94:d5:3b:48:9a:4e:89:fb:37:0f:2d:94:fc:82:
         a5:c1:ba:61:68:c4:f0:28:5c:49:17:cf:a1:10:b9:2b:b0:da:
         d4:25:5b:6e:78:2d:56:22:6c:62:0d:a1:e3:d0:b6:5b:7d:7b:
         48:1e:a7:48:af:43:c2:29:d5:ac:a9:b3:b1:e2:77:92:52:4d:
         42:36:0d:a2:00:b3:8a:bb:da:f0:79:e2:c5:bc:b9:57:73:14:
         21:84:c8:73:e8:6b:32:62:ba:a6:19:83:dd:75:e2:a4:6e:e6:
         5e:d1:d8:eb:99:4a:79:14:19:66:1b:1f:d7:ad:57:48:02:b0:
         b2:b3:94:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:52:16 2025 by rpki-client