Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/450E5A28615A9BB70416D7874B8117F89DBF7D55.cer
File:                     450E5A28615A9BB70416D7874B8117F89DBF7D55.cer (raw, json)
Hash identifier:          iRQQVG8U17c1GC1L5cGAVLaZ+5F6avjL/xks4R0NM5w=
Subject key identifier:   45:0E:5A:28:61:5A:9B:B7:04:16:D7:87:4B:81:17:F8:9D:BF:7D:55
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       298962AB68C8C00FE034D24A63C4699B92820555
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/450E5A28615A9BB70416D7874B8117F89DBF7D55.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jul 2023 14:51:15 +0000
Certificate not after:    Thu 18 Jul 2024 14:56:15 +0000
Subordinate resources:    AS: 265300
                          IP: 168.121.68.0/22
                          IP: 200.106.132.0/22
                          IP: 200.125.176.0/22
                          IP: 2804:2dbc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:89:62:ab:68:c8:c0:0f:e0:34:d2:4a:63:c4:69:9b:92:82:05:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 20 14:51:15 2023 GMT
            Not After : Jul 18 14:56:15 2024 GMT
        Subject: CN=450E5A28615A9BB70416D7874B8117F89DBF7D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e9:b6:83:b3:fd:74:d5:98:4d:ff:3e:66:1b:
                    e4:d0:3f:41:b3:71:d3:2f:37:3a:31:f0:c3:72:e1:
                    c1:5f:b1:d7:18:e7:fb:4c:b0:f7:67:a8:33:6d:6a:
                    2c:42:88:90:73:a9:f8:5d:3a:f6:97:e1:b6:c4:be:
                    50:9d:dd:59:60:1e:3d:d5:e0:79:e5:55:14:bd:ec:
                    ca:16:96:4a:5e:11:d7:8c:40:bb:96:62:6d:83:13:
                    b5:10:f4:ab:6b:6c:47:93:7c:6e:0f:98:e9:11:7a:
                    91:21:82:3a:e9:65:7b:f0:e9:69:69:22:76:2f:62:
                    96:47:d5:fc:85:1f:c3:53:6c:5d:c8:f3:e3:41:63:
                    f5:d8:58:f7:9a:9d:42:94:4e:e5:57:0f:c4:e1:ea:
                    87:52:2f:b7:8c:3d:95:7c:a2:66:f6:25:a8:de:ca:
                    23:23:a9:34:cc:e7:c0:ae:f8:3b:a6:5a:eb:7b:c1:
                    f7:10:7f:e9:29:38:93:62:4d:15:62:08:6a:2d:fc:
                    51:45:66:38:17:da:ce:e1:9f:61:6d:ec:e2:22:96:
                    e3:db:4a:16:2e:72:67:56:2c:72:de:44:91:7d:e2:
                    e0:50:b4:88:66:26:0c:c5:ef:d1:6e:11:72:a3:22:
                    09:e6:62:c6:16:36:97:ce:27:60:7c:73:c5:8f:65:
                    f2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:0E:5A:28:61:5A:9B:B7:04:16:D7:87:4B:81:17:F8:9D:BF:7D:55
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/450E5A28615A9BB70416D7874B8117F89DBF7D55.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.68.0/22
                  200.106.132.0/22
                  200.125.176.0/22
                IPv6:
                  2804:2dbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265300

    Signature Algorithm: sha256WithRSAEncryption
         53:80:a5:bf:6c:a0:a5:21:f6:8f:8a:69:6a:e2:17:48:3c:f0:
         42:03:45:f6:92:ba:32:eb:83:91:b8:52:36:65:a2:ac:dd:a3:
         80:c1:96:e2:a4:9e:92:74:ee:87:e7:b7:a9:16:43:2f:91:6e:
         bd:21:5d:51:2e:cb:5e:82:2c:ae:e6:da:fa:bc:ed:a2:69:76:
         99:62:bb:54:60:27:27:3a:f5:b2:c4:57:3f:62:a6:64:c8:6b:
         6a:83:5a:f6:09:ef:76:0b:b1:91:cc:0c:e0:92:fa:f7:ce:27:
         ab:e0:46:5b:12:15:2f:77:0a:19:f4:a4:03:62:f5:ad:db:bc:
         6f:ec:cf:ea:bf:6b:1d:2e:5e:32:26:f8:17:c4:7b:63:0c:0e:
         2d:da:11:8a:f5:f7:6d:5f:17:c1:98:9f:b2:0a:39:9f:60:97:
         b8:9b:11:aa:bc:fc:82:50:ae:70:73:e8:9b:e8:e5:be:64:36:
         09:85:bc:85:03:61:c7:0f:49:92:9f:53:35:02:aa:3f:9a:19:
         85:ed:62:8c:bc:f9:8a:27:33:f3:ef:ba:45:90:53:5d:ad:3b:
         9f:70:da:b9:67:1d:f4:cd:86:3a:ee:d1:10:cc:ad:53:d2:0b:
         05:a8:43:6c:36:2b:06:6d:7a:ca:05:ea:02:7b:46:2d:36:21:
         0b:9d:d7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:14:36 2025 by rpki-client