Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1ACFE63CD725C006C345B53446ADCD4F8783EE35.cer
File:                     1ACFE63CD725C006C345B53446ADCD4F8783EE35.cer (raw, json)
Hash identifier:          OW4L5nPsdFjJatSs/fNmqxzy6Ebwe3VTQm5skiRw+U0=
Subject key identifier:   1A:CF:E6:3C:D7:25:C0:06:C3:45:B5:34:46:AD:CD:4F:87:83:EE:35
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       26D2404116B1B990285F9A18BDEDE8816201000A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/1ACFE63CD725C006C345B53446ADCD4F8783EE35.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Apr 2023 16:20:27 +0000
Certificate not after:    Tue 16 Apr 2024 16:25:27 +0000
Subordinate resources:    AS: 266114
                          IP: 45.5.156.0/22
                          IP: 2804:3adc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d2:40:41:16:b1:b9:90:28:5f:9a:18:bd:ed:e8:81:62:01:00:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 18 16:20:27 2023 GMT
            Not After : Apr 16 16:25:27 2024 GMT
        Subject: CN=1ACFE63CD725C006C345B53446ADCD4F8783EE35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:72:79:50:22:0b:a8:e2:f6:bf:ec:5a:44:f7:
                    16:48:12:f9:a1:ff:6b:c0:6d:00:3c:12:22:b5:f7:
                    37:50:70:7a:9b:48:8c:28:16:a5:c6:3c:8d:3f:59:
                    37:7f:f1:56:d8:d5:ed:c4:1e:8f:7e:c1:22:41:7a:
                    5b:e4:d2:30:72:5c:b0:14:f5:a4:ff:c6:a7:ee:56:
                    2d:0d:10:f0:41:1d:61:c1:78:e2:01:5f:43:c8:0f:
                    4c:57:39:73:84:4a:e9:31:95:c7:17:22:10:df:f5:
                    d1:a2:a3:b7:ba:5e:dc:a7:6b:d1:a0:f6:87:05:82:
                    08:22:b3:11:35:82:93:b9:2c:3e:e5:0f:24:9a:9a:
                    d6:8a:3d:a5:10:65:37:46:ef:af:32:74:e3:61:70:
                    39:5c:75:a4:38:9d:13:28:57:d1:53:e7:c9:a3:2d:
                    01:9c:44:40:ee:5e:8a:f7:15:33:70:6d:28:07:9e:
                    9d:55:b9:8b:07:b2:00:b2:2c:fa:89:7a:ee:c2:d7:
                    f1:84:b1:41:cc:eb:3f:57:35:3c:4e:c1:80:a8:58:
                    64:d8:33:5c:fb:00:28:96:b9:c7:e8:8f:e9:85:a9:
                    bb:83:45:25:aa:59:37:5e:a9:e5:c1:a4:13:07:84:
                    17:55:20:05:ad:a7:69:c0:1c:47:a0:42:5c:53:39:
                    ea:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1A:CF:E6:3C:D7:25:C0:06:C3:45:B5:34:46:AD:CD:4F:87:83:EE:35
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/1ACFE63CD725C006C345B53446ADCD4F8783EE35.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.156.0/22
                IPv6:
                  2804:3adc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266114

    Signature Algorithm: sha256WithRSAEncryption
         93:4f:58:db:af:83:d7:8b:94:54:4a:37:df:b7:20:91:92:71:
         99:a4:3d:e3:60:70:ac:c4:4e:b9:a1:c0:73:69:b0:ba:99:37:
         ec:e5:43:d6:54:27:f3:f4:03:90:f4:7f:a4:31:4d:d9:70:36:
         cb:e1:7f:dc:b6:b2:78:45:3c:b9:c0:61:80:9b:bc:7f:ab:d5:
         05:c0:a0:46:db:8f:cf:7c:f5:bf:48:d7:7b:0a:80:1a:4d:3a:
         f9:60:7e:07:c7:a4:3e:6c:e3:e8:8e:f0:14:2c:17:69:e9:fc:
         25:f7:1e:98:42:ba:db:08:bd:c9:8e:e7:0e:cf:5c:1c:a4:61:
         e4:ba:f6:f1:18:26:53:d2:19:f3:92:f4:fc:92:d1:9d:71:4b:
         53:26:88:e2:33:9c:bf:72:30:2c:e1:ad:43:d8:43:6c:4b:4d:
         7e:d6:72:f5:b7:55:70:db:8a:7b:48:3c:0b:c2:54:69:8e:8a:
         2f:1d:9f:66:cf:cd:61:91:4c:01:17:2d:9d:70:d5:7c:43:2c:
         19:43:38:32:fb:c8:24:e7:b7:22:f9:e0:f1:50:60:a3:9b:ac:
         34:47:16:f7:fb:84:bb:9a:17:6e:d9:15:2e:da:74:17:1d:e4:
         8e:06:6d:75:39:7b:76:c6:20:68:f8:d2:b9:48:fe:2b:f3:2a:
         88:5e:be:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:31:41 2025 by rpki-client