Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/39DFC647ED0880A96AFD340EB6BBEA3317DC0DA1.cer
File:                     39DFC647ED0880A96AFD340EB6BBEA3317DC0DA1.cer (raw, json)
Hash identifier:          faNANQMaOwugT6K4IZFIZkjv+UpfRHvHHkcUWjB3Cdo=
Subject key identifier:   39:DF:C6:47:ED:08:80:A9:6A:FD:34:0E:B6:BB:EA:33:17:DC:0D:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       64B16ABACCCF9F2417E989D37C589853477F86B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/0/39DFC647ED0880A96AFD340EB6BBEA3317DC0DA1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Sep 2023 19:45:46 +0000
Certificate not after:    Fri 20 Sep 2024 19:50:46 +0000
Subordinate resources:    AS: 272626
                          IP: 2804:862c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b1:6a:ba:cc:cf:9f:24:17:e9:89:d3:7c:58:98:53:47:7f:86:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 22 19:45:46 2023 GMT
            Not After : Sep 20 19:50:46 2024 GMT
        Subject: CN=39DFC647ED0880A96AFD340EB6BBEA3317DC0DA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e5:a3:75:84:32:8b:11:74:9c:f8:ed:58:f1:
                    b2:0b:6b:06:10:33:af:4c:f1:d6:7e:6e:61:db:70:
                    9f:2c:4e:a9:c5:ee:55:7e:04:30:b0:2a:4e:70:4e:
                    7a:24:f3:8f:2b:78:e2:8e:16:fd:90:dc:4a:3c:e7:
                    86:7d:43:43:e0:0f:8e:a3:c5:a8:89:bc:70:d5:f9:
                    bb:eb:f2:d2:ab:7b:fe:5d:b8:8f:9e:3b:d4:0c:03:
                    d1:e3:31:98:56:cb:6c:78:68:57:dc:3f:27:d1:c2:
                    9c:7e:48:3e:fe:5e:76:0b:a0:84:c3:9f:6a:e0:19:
                    e6:64:76:cc:c4:e7:09:fc:87:03:ec:04:bc:70:c1:
                    8f:14:59:97:ce:f3:48:60:3c:15:08:e4:b5:0d:75:
                    1e:fd:13:0e:57:ff:12:fa:3c:d5:70:db:40:4a:1f:
                    41:59:50:37:e4:49:18:f8:8b:30:82:9f:88:f1:8b:
                    7c:88:bf:29:e1:08:a6:e3:46:45:d0:ce:4d:a5:7a:
                    6e:39:a8:30:0c:c8:f3:ec:29:54:56:3b:6a:ee:72:
                    e0:3b:9f:94:2b:7f:dc:69:a3:07:e2:7d:f4:1a:0d:
                    f6:12:6a:37:ab:12:d3:20:0c:63:23:6c:7c:2c:ac:
                    14:2d:e9:de:7c:cb:7a:c6:62:bd:42:a5:b2:11:fa:
                    69:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:DF:C6:47:ED:08:80:A9:6A:FD:34:0E:B6:BB:EA:33:17:DC:0D:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/0/39DFC647ED0880A96AFD340EB6BBEA3317DC0DA1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:862c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272626

    Signature Algorithm: sha256WithRSAEncryption
         64:dc:01:22:a1:01:94:d1:7f:0d:6d:e7:58:b6:90:b6:73:54:
         f0:5e:48:28:76:fb:68:ad:4f:30:5a:c0:79:8b:e7:d9:ee:da:
         ca:ae:3e:fb:f9:0b:61:49:54:e5:d7:79:e0:e2:ae:f2:d2:33:
         32:b3:f6:90:ab:4e:1f:0b:dc:14:f1:6a:24:5b:e0:52:03:be:
         d2:89:96:d2:d7:31:6c:9c:e2:2d:14:49:1d:c6:f4:25:73:be:
         9c:97:64:cf:1f:2f:c0:2b:a2:e0:f5:7b:ee:36:dd:31:3c:a4:
         79:85:aa:5b:da:58:78:fb:60:67:2e:15:fb:c5:00:0a:70:49:
         69:c0:73:b8:ea:5e:0d:6e:2a:93:63:54:f2:bd:74:12:07:87:
         47:fa:e8:ef:74:e0:0a:ed:b7:cf:c5:f0:ae:c6:6f:43:56:01:
         21:c1:60:86:f1:47:ad:e0:67:ad:50:8d:1e:0e:7d:73:12:5f:
         17:d5:5e:e8:9a:78:c8:44:4a:e3:75:f6:90:95:87:0b:c2:4c:
         55:c1:7f:ea:3d:98:94:b1:88:fe:21:fc:3d:e5:56:10:83:6d:
         9f:49:76:45:2d:8a:18:83:a0:a5:ea:f1:c1:50:dd:cf:1d:dd:
         be:32:6e:15:d7:47:0a:f5:1f:d4:de:8b:e4:10:c3:62:0a:53:
         c8:69:51:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:37:27 2025 by rpki-client