Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.cer
File:                     EB2037C39904E1F64A8252CC14D3C08F8F7863B2.cer (raw, json)
Hash identifier:          Luzc6gbBYl6UynExO5+b89rJVbJgp8BIxAW7nQxHnGA=
Subject key identifier:   EB:20:37:C3:99:04:E1:F6:4A:82:52:CC:14:D3:C0:8F:8F:78:63:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       255E0415065CCD3B1B3E94ADB555256CEA26BCBA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Dec 2024 12:55:14 +0000
Certificate not after:    Tue 02 Dec 2025 13:00:14 +0000
Subordinate resources:    AS: 52556
                          IP: 177.85.248.0/21
                          IP: 2804:294c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5e:04:15:06:5c:cd:3b:1b:3e:94:ad:b5:55:25:6c:ea:26:bc:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  3 12:55:14 2024 GMT
            Not After : Dec  2 13:00:14 2025 GMT
        Subject: CN=EB2037C39904E1F64A8252CC14D3C08F8F7863B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5b:af:73:85:01:77:42:44:01:d7:ef:14:fa:
                    87:67:7e:04:1d:fc:a0:7d:a3:7a:b0:87:87:c6:c9:
                    ad:4c:04:b1:cd:4a:28:45:23:3e:63:3c:cc:69:81:
                    bf:48:4c:fe:d5:f1:99:8b:8c:98:a9:53:ca:51:c7:
                    2f:50:38:6d:8d:a0:09:8e:95:cd:40:b1:28:ca:0f:
                    b6:8a:e4:f8:b2:fb:af:9b:c8:d3:a4:50:3e:2b:20:
                    6b:02:f4:e4:80:00:72:ca:4a:a3:d5:93:78:eb:4e:
                    6a:7e:c8:88:35:1d:e5:c4:f8:0f:99:d4:af:07:78:
                    d4:99:49:d5:6e:e3:f2:b3:ac:3c:df:d0:e4:c2:4f:
                    b8:17:b3:d0:d7:87:51:81:0c:9b:5e:1a:d7:b0:99:
                    26:40:53:1b:3c:97:fc:16:6e:c5:c8:13:40:fb:b3:
                    dd:60:c9:75:b2:a2:63:88:98:ca:3a:a8:2d:75:d8:
                    29:45:46:1c:a4:1b:59:3b:6c:ad:d3:c1:95:52:f4:
                    2c:8f:08:27:24:1b:be:de:90:8e:3e:54:ca:b6:76:
                    3b:35:cb:89:b5:6b:41:5f:34:21:8a:b5:dd:3b:ee:
                    83:2d:a1:f9:26:cc:22:f7:aa:cb:1e:a0:fe:8e:13:
                    3e:fe:e8:3f:fe:fc:35:b8:26:ca:87:1f:d6:9f:72:
                    03:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:20:37:C3:99:04:E1:F6:4A:82:52:CC:14:D3:C0:8F:8F:78:63:B2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.248.0/21
                IPv6:
                  2804:294c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52556

    Signature Algorithm: sha256WithRSAEncryption
         b8:b4:e4:b0:7c:04:76:ce:70:c6:f3:8a:a8:8a:5b:5b:8d:58:
         b7:b7:6f:38:ab:ce:d9:1b:e9:36:07:c6:61:21:cd:9f:86:db:
         33:16:5c:e1:40:e0:0a:54:9e:38:21:9a:3d:35:17:97:19:19:
         49:4e:3c:54:3c:2f:ea:6d:ca:57:3a:ec:eb:89:81:eb:95:1f:
         eb:8c:c6:39:b0:62:cb:73:98:9a:87:75:d7:ce:7a:3f:17:aa:
         33:c5:5b:e1:4c:ff:fa:08:e3:05:46:1a:32:11:cd:ba:68:51:
         82:09:5f:11:48:53:a9:f9:88:fa:55:84:36:30:cd:bc:df:e7:
         6e:8b:31:60:56:d1:50:4c:55:1a:b8:eb:55:ec:81:e7:a5:b5:
         f4:05:bb:53:6c:1b:8c:e8:bf:46:b7:6a:b3:ab:e9:3a:7b:7c:
         b1:9d:63:89:8e:05:48:a0:14:8d:61:ea:ab:64:62:a0:60:51:
         a6:ac:33:fc:07:3c:b8:3b:c3:03:b5:46:57:97:bc:ff:a9:cd:
         f3:65:64:a9:ad:37:df:3e:95:5f:b4:9e:07:3b:98:01:c4:fb:
         98:0c:6f:aa:f7:e8:e9:93:41:6a:42:78:79:a1:7b:06:a1:0f:
         d7:a6:2c:2f:f1:7a:50:7f:30:73:8a:a3:a8:b6:16:03:be:57:
         8a:d1:13:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:03 2025 by rpki-client