Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/411959612D97496AE53DFFBB75CC08F792B75014.cer
File:                     411959612D97496AE53DFFBB75CC08F792B75014.cer (raw, json)
Hash identifier:          FYIKBhjutTy7okzfC24jEp3np5PWU9eNhEuNaKt3Qc8=
Subject key identifier:   41:19:59:61:2D:97:49:6A:E5:3D:FF:BB:75:CC:08:F7:92:B7:50:14
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5BA0D32846B38B502EB331532EE0618BC909033B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/411959612D97496AE53DFFBB75CC08F792B75014.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 04 Mar 2023 00:54:14 +0000
Certificate not after:    Sat 02 Mar 2024 00:59:14 +0000
Subordinate resources:    AS: 52674
                          IP: 131.161.40.0/22
                          IP: 168.227.236.0/22
                          IP: 177.67.88.0/22
                          IP: 2804:1d40::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a0:d3:28:46:b3:8b:50:2e:b3:31:53:2e:e0:61:8b:c9:09:03:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 00:54:14 2023 GMT
            Not After : Mar  2 00:59:14 2024 GMT
        Subject: CN=411959612D97496AE53DFFBB75CC08F792B75014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:df:ea:31:34:a7:2a:56:95:9b:e0:34:0a:cc:
                    b1:1c:f7:dc:db:9e:95:ec:94:71:5a:2f:0d:3b:8b:
                    8e:b2:b0:cf:f3:3e:8a:27:ea:31:e3:dc:9e:4e:44:
                    b9:49:99:58:51:19:08:45:d4:9f:fc:d8:0e:ed:aa:
                    65:76:21:91:08:ad:f1:78:54:20:e9:e2:db:1e:1d:
                    4a:82:36:2c:bc:a3:7e:55:7a:5a:37:d5:b7:10:69:
                    c6:41:d4:39:7e:35:a9:60:dd:a9:88:29:01:41:fb:
                    66:8e:44:20:b5:8c:dd:51:a2:b3:d1:cc:85:9b:d9:
                    d7:b4:3e:4f:c6:c2:94:74:27:14:d7:06:b7:40:3d:
                    dd:c5:9e:84:55:eb:3d:63:04:26:5d:f6:2a:5b:b7:
                    1c:f5:4f:a0:d6:7b:bd:cd:a0:40:92:98:14:31:a2:
                    bf:28:6f:d4:eb:d7:cb:fc:51:99:97:7a:19:f4:f9:
                    54:30:07:8a:9e:b9:ca:de:09:e7:33:32:97:01:b5:
                    35:20:db:7e:7e:14:df:cd:dd:68:9f:7e:c5:bc:f2:
                    96:8e:0e:9e:9d:8e:37:09:a2:31:b8:f3:ee:80:ce:
                    53:9c:a4:09:2b:8c:1b:15:6c:5d:27:4f:cd:3c:6c:
                    27:5c:2f:93:0b:50:53:16:05:a3:28:a5:75:a8:72:
                    b0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:19:59:61:2D:97:49:6A:E5:3D:FF:BB:75:CC:08:F7:92:B7:50:14
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/411959612D97496AE53DFFBB75CC08F792B75014.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.40.0/22
                  168.227.236.0/22
                  177.67.88.0/22
                IPv6:
                  2804:1d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52674

    Signature Algorithm: sha256WithRSAEncryption
         49:fe:6d:b7:82:29:13:0b:28:ee:cc:cd:ee:8a:2b:e3:e9:6a:
         7e:59:96:0a:c3:ad:c3:db:b3:60:57:63:5a:40:ee:1a:96:ac:
         96:82:80:8b:b4:d5:40:f8:4a:0d:51:84:9e:c4:92:02:09:48:
         91:64:31:c0:d7:da:91:f1:e3:62:72:9a:4c:f0:13:e1:0d:12:
         89:0c:d8:23:3b:7a:86:86:ce:0f:68:ae:ca:49:69:4e:47:7c:
         2c:6a:d0:15:42:86:a4:48:ae:b3:95:bb:30:3a:13:50:0e:c6:
         f6:99:be:bf:5d:93:77:49:c4:21:75:4d:2d:fc:97:e4:64:57:
         aa:4b:e0:aa:da:eb:4e:df:29:f3:40:07:76:9d:c5:27:ad:4b:
         8a:86:cb:24:85:97:ec:22:88:bf:cc:f2:82:79:36:5e:0d:4e:
         00:96:70:14:49:b0:e9:21:b9:cd:89:ce:b6:8a:59:be:c6:4d:
         99:a6:ce:e7:cc:7c:81:79:2c:d0:cf:69:bd:6b:54:22:91:58:
         43:ee:3b:4a:69:11:3c:90:ae:59:58:19:09:96:6a:5c:8d:05:
         c8:d4:a3:49:31:c5:77:ca:87:20:bb:df:c7:51:92:f3:a9:29:
         92:8b:24:35:a8:28:27:c2:f4:5e:55:0b:76:e1:f4:f8:db:40:
         ca:7b:90:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 00:34:23 2025 by rpki-client