Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/409CED9FE5C8C7F6A36BA67DE713AEE11E91FC95.cer
File:                     409CED9FE5C8C7F6A36BA67DE713AEE11E91FC95.cer (raw, json)
Hash identifier:          Mhb/PAJ7GK2zBSu13PQ0Whww6VX/4EKE14goqGvC/po=
Subject key identifier:   40:9C:ED:9F:E5:C8:C7:F6:A3:6B:A6:7D:E7:13:AE:E1:1E:91:FC:95
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4144324F45714BD31E9558A0201D4293ED0362E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/409CED9FE5C8C7F6A36BA67DE713AEE11E91FC95.mft
caRepository:             rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Mar 2023 12:53:30 +0000
Certificate not after:    Tue 05 Mar 2024 12:58:30 +0000
Subordinate resources:    AS: 270305
                          IP: 201.216.120.0/22
                          IP: 2804:6a00::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:44:32:4f:45:71:4b:d3:1e:95:58:a0:20:1d:42:93:ed:03:62:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  7 12:53:30 2023 GMT
            Not After : Mar  5 12:58:30 2024 GMT
        Subject: CN=409CED9FE5C8C7F6A36BA67DE713AEE11E91FC95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:16:69:ce:7b:9a:4b:4f:27:ef:25:34:80:1a:
                    b4:1d:70:49:94:21:27:4c:3d:05:65:0c:a9:b9:77:
                    d2:eb:f5:14:f4:c1:5d:13:2f:99:81:40:40:fe:7d:
                    88:a1:34:4e:08:f3:7c:24:bd:ce:27:a8:49:a2:dd:
                    14:42:5d:b3:8a:70:ef:36:dd:f6:d1:84:c2:59:2b:
                    9a:f0:87:d4:0b:be:2a:f2:1f:e3:9f:38:f3:95:63:
                    de:3c:ec:a9:b6:0d:09:64:49:f4:dd:50:33:91:5c:
                    21:c4:99:75:64:df:4b:9c:a4:fc:dd:28:95:e6:6f:
                    41:9e:8f:68:e4:92:c8:ed:8e:34:92:6a:34:06:b0:
                    a9:2d:fc:0a:a9:4c:bd:32:d4:6b:59:9b:80:b3:35:
                    2a:44:82:60:e4:e2:a2:04:6e:1f:4f:7e:5b:0a:0a:
                    d1:04:75:c7:36:1e:17:ad:83:19:c8:d1:b4:a8:6e:
                    48:8f:8f:36:93:4b:42:5e:df:ba:c0:c3:31:16:39:
                    c3:6f:a0:e9:04:8c:26:a0:50:c0:7a:fc:e4:80:b1:
                    34:1c:bc:d2:73:e7:4a:e8:20:ab:a5:23:3c:ad:ff:
                    0f:c7:3f:76:a0:80:73:d7:e5:86:c2:e8:b7:c8:56:
                    36:6a:90:17:87:8c:a0:70:db:10:49:31:ed:b5:27:
                    d3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:9C:ED:9F:E5:C8:C7:F6:A3:6B:A6:7D:E7:13:AE:E1:1E:91:FC:95
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/409CED9FE5C8C7F6A36BA67DE713AEE11E91FC95.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.120.0/22
                IPv6:
                  2804:6a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270305

    Signature Algorithm: sha256WithRSAEncryption
         2b:a9:ef:59:a0:6f:a4:26:59:be:8b:4d:61:fa:75:4d:92:ba:
         5f:eb:69:e3:d6:cf:15:34:46:91:58:4b:38:9c:d9:fc:1f:c7:
         11:fb:fc:18:7f:90:6b:3f:12:47:1c:86:6f:96:94:d4:a1:87:
         45:57:a6:e7:c0:60:0a:f0:73:87:6c:e6:b8:32:89:69:20:0b:
         d0:75:37:5b:6d:bf:bb:7d:16:48:d5:0a:e5:48:44:6f:eb:8f:
         a6:b8:4d:d2:9c:69:3e:99:e3:47:20:62:76:91:99:a2:3f:ac:
         9f:09:54:4b:bd:f7:d9:01:e4:82:73:ea:11:66:bb:84:3a:55:
         db:8d:bb:d8:38:6a:6b:fb:61:40:19:2c:6b:29:ec:c5:59:1e:
         61:1a:6f:5c:9c:32:75:7e:c9:9b:db:11:3e:3e:99:4f:59:9f:
         c2:ec:f2:d2:c2:28:7f:05:ca:51:48:bd:c0:4c:79:6b:a1:d6:
         bc:c6:b0:22:13:73:9b:6a:80:02:09:5b:73:9e:90:85:e3:a5:
         1f:83:37:90:6e:9d:1b:78:a9:c9:8d:fa:a4:02:a5:14:83:a5:
         fe:e9:75:61:30:a0:06:29:59:8b:63:20:3f:6c:97:f4:58:95:
         82:84:12:b8:7d:2b:90:57:eb:ed:bb:bf:da:f7:12:01:89:fa:
         d8:f0:98:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:36:16 2025 by rpki-client