Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EEA487DF64C1FB6EB6394BD3B5A6C64D9E924358.cer
File:                     EEA487DF64C1FB6EB6394BD3B5A6C64D9E924358.cer (raw, json)
Hash identifier:          G8FahkGy6Zl1I2aLyzzgxe/qHdu6y3BBsZZa0UoRFaQ=
Subject key identifier:   EE:A4:87:DF:64:C1:FB:6E:B6:39:4B:D3:B5:A6:C6:4D:9E:92:43:58
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5835AE05EC8C100D1528FD025DD19B54D69081A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/EEA487DF64C1FB6EB6394BD3B5A6C64D9E924358.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Jun 2023 15:27:39 +0000
Certificate not after:    Tue 04 Jun 2024 15:32:39 +0000
Subordinate resources:    AS: 270774
                          IP: 187.63.120.0/22
                          IP: 2804:7134::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:35:ae:05:ec:8c:10:0d:15:28:fd:02:5d:d1:9b:54:d6:90:81:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  6 15:27:39 2023 GMT
            Not After : Jun  4 15:32:39 2024 GMT
        Subject: CN=EEA487DF64C1FB6EB6394BD3B5A6C64D9E924358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:20:fd:03:ed:e2:a1:26:fd:cb:68:de:82:3f:
                    ac:d2:a7:61:fb:76:73:e6:81:15:b3:85:3c:be:93:
                    a8:ff:13:ca:c2:c3:c1:1b:fb:20:d2:b9:14:d0:42:
                    0f:14:d0:a9:57:75:80:84:c9:0b:bb:af:3e:4c:97:
                    76:65:39:c0:03:72:96:7d:76:25:36:c2:02:a2:f6:
                    02:cc:1c:6f:3d:39:e7:2f:4b:c6:79:2e:98:ca:4b:
                    da:45:f8:40:38:54:e8:df:66:6e:15:50:09:00:53:
                    fb:81:d4:67:ae:9e:fa:bd:eb:80:fb:4b:ba:9d:36:
                    59:f2:29:7b:51:79:81:79:b9:4e:bd:fe:5a:71:46:
                    f2:b8:97:e4:fb:dc:bc:5b:e6:97:9c:21:15:44:14:
                    07:c3:8d:76:a2:2a:95:fa:53:01:ab:17:ba:45:7d:
                    77:83:69:f7:49:66:76:fb:6e:bf:e9:33:c9:3d:58:
                    fd:d3:40:45:02:29:de:bc:92:7b:35:70:c2:5c:0d:
                    cc:f8:f7:29:33:dc:02:73:4a:32:69:15:a4:b6:e5:
                    13:83:ac:13:ed:e6:2f:b1:45:63:8f:3d:c7:3f:09:
                    61:55:98:46:ca:cf:93:c8:dd:31:d2:00:f1:a3:7d:
                    31:fb:5e:75:50:33:20:46:47:68:b3:b8:b5:a3:64:
                    d9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:A4:87:DF:64:C1:FB:6E:B6:39:4B:D3:B5:A6:C6:4D:9E:92:43:58
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/EEA487DF64C1FB6EB6394BD3B5A6C64D9E924358.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.120.0/22
                IPv6:
                  2804:7134::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270774

    Signature Algorithm: sha256WithRSAEncryption
         79:c9:8e:a1:f3:84:c2:5c:68:8f:a3:9e:53:0a:a0:12:5d:1c:
         3d:af:6a:da:5d:2f:16:29:54:7a:1e:c8:ab:e7:fd:72:95:3f:
         61:e9:b9:b8:0e:ea:ad:e1:39:c2:bf:51:bf:f0:58:82:05:f1:
         ea:bf:b4:8b:d4:dd:5c:88:87:4d:e8:7b:e9:d5:8f:3c:e7:28:
         aa:5b:bb:de:b5:76:d2:68:1f:8f:3b:2b:ab:a3:cb:fa:0c:be:
         ab:6c:df:85:4e:64:ab:3e:a3:39:73:f3:5f:60:4d:54:8d:13:
         07:15:e0:6e:db:02:d0:73:3c:c1:d0:61:be:6a:4a:6c:4d:14:
         e9:11:76:67:59:56:b3:56:84:84:c3:6d:06:bf:89:a2:b1:31:
         fd:7e:4a:8b:ac:5e:28:45:05:f6:aa:12:22:93:e8:9e:27:eb:
         fb:77:23:b8:77:6b:96:58:b3:ea:c5:28:a5:a4:82:f4:02:04:
         11:aa:f7:3d:36:fe:05:f4:4a:88:a1:db:98:14:f7:05:70:54:
         75:d0:06:de:de:83:03:e3:b2:f2:7f:1d:b1:a8:b9:d0:0e:d9:
         71:7d:b2:8d:43:ea:76:da:c3:de:b4:a1:0b:0d:63:d2:c2:b5:
         33:2d:27:ed:67:c5:9f:82:f1:cf:1b:cf:22:18:cf:f4:ec:a2:
         05:df:e7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:12:20 2025 by rpki-client