Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EC682C741A777F706745E6705BE4FAC8CE53C496.cer
File:                     EC682C741A777F706745E6705BE4FAC8CE53C496.cer (raw, json)
Hash identifier:          D6gDHyxtu8wmIc5IeDHEz0twmeeKT4HmPVCqN/gYjSY=
Subject key identifier:   EC:68:2C:74:1A:77:7F:70:67:45:E6:70:5B:E4:FA:C8:CE:53:C4:96
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1B53CA9704EF4BF9055541856F4312C590F15BDC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/EC682C741A777F706745E6705BE4FAC8CE53C496.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Jan 2024 22:03:06 +0000
Certificate not after:    Mon 27 Jan 2025 22:08:06 +0000
Subordinate resources:    AS: 265393
                          IP: 168.194.164.0/22
                          IP: 2804:3364::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:53:ca:97:04:ef:4b:f9:05:55:41:85:6f:43:12:c5:90:f1:5b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 29 22:03:06 2024 GMT
            Not After : Jan 27 22:08:06 2025 GMT
        Subject: CN=EC682C741A777F706745E6705BE4FAC8CE53C496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:71:c2:d6:57:6f:bc:d4:54:85:5f:9d:16:04:
                    39:96:ab:88:ad:d4:5f:b7:e9:32:aa:23:06:ee:f7:
                    fc:1e:19:89:3c:8a:31:c7:e7:31:1a:cd:48:a3:81:
                    05:1f:80:5c:ec:de:2c:e4:c5:90:33:1d:9a:2d:f0:
                    f5:36:2e:60:25:81:b0:de:ca:68:a2:6b:0d:0e:e2:
                    56:6f:0c:f0:b3:e9:67:55:b7:ad:ab:e5:45:0b:c9:
                    b3:06:63:54:51:64:ae:68:37:7c:1f:41:95:79:99:
                    d9:7b:83:d7:dc:9e:90:4b:d4:ac:c8:1b:79:ca:ff:
                    72:68:4a:de:e4:7e:5e:41:77:fe:84:3d:91:9b:39:
                    21:23:f5:a2:09:6d:6e:21:d3:eb:e8:96:09:ba:4c:
                    0e:31:09:b5:04:1e:15:59:91:fa:90:84:3e:23:cd:
                    b4:a3:d9:17:c6:c6:1a:f3:ca:7c:59:2d:48:4a:e5:
                    21:48:c5:2d:6d:f8:3d:7c:c0:11:4e:4f:60:80:be:
                    ad:47:cb:9d:63:2d:e1:33:44:ed:5b:45:f0:52:d0:
                    90:48:f8:f5:32:b2:fb:25:b3:f7:05:b9:86:62:b8:
                    93:da:55:4f:ad:6e:8f:d7:e9:4d:27:d5:d3:25:9a:
                    2f:2a:ce:85:db:74:39:52:a7:06:45:ca:3f:36:3e:
                    7a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:68:2C:74:1A:77:7F:70:67:45:E6:70:5B:E4:FA:C8:CE:53:C4:96
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/3/EC682C741A777F706745E6705BE4FAC8CE53C496.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.164.0/22
                IPv6:
                  2804:3364::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265393

    Signature Algorithm: sha256WithRSAEncryption
         8d:bb:50:3c:2d:3b:99:0c:11:b7:42:8d:5e:3f:04:ce:75:e3:
         23:84:fc:fe:c5:62:15:cd:17:2a:18:12:e7:99:81:07:aa:81:
         70:03:e0:99:62:13:21:59:1f:35:15:0e:9f:6f:0e:eb:e9:1d:
         b7:99:5e:2a:90:79:ef:47:80:b5:9f:89:94:ca:0a:15:18:51:
         96:00:55:e0:d6:dd:a8:27:ae:6a:a1:23:f1:78:eb:b6:24:ce:
         75:5f:82:74:02:ed:23:93:2a:6b:56:e0:45:7c:81:99:3c:45:
         8a:7a:ae:a6:c8:73:17:ec:b9:55:00:12:ed:68:ab:fb:b1:09:
         1a:fa:03:50:df:d6:f6:70:0e:86:ae:cb:28:4c:8a:af:91:43:
         0c:da:79:74:df:71:e2:0c:c3:2b:fe:2c:97:40:21:ca:85:f9:
         dc:09:52:ca:0a:a4:1a:71:e0:b0:0a:4d:c5:6e:16:e5:43:3a:
         03:fa:04:ba:8d:b8:22:45:0b:b4:91:ac:a2:a7:0a:24:fb:5f:
         90:aa:ff:4d:eb:4c:dd:f6:e9:bf:8b:8e:a7:c8:74:43:64:fb:
         82:1c:68:fe:05:2a:1e:61:b8:1e:81:d7:c7:96:39:85:2c:93:
         20:5c:39:9b:b5:f5:c2:31:7a:31:23:5e:77:cd:a0:72:02:70:
         f4:ca:6e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:15:20 2025 by rpki-client