Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4C545DAD66D9A9F679455FC435345F2BF5472E88.cer
File:                     4C545DAD66D9A9F679455FC435345F2BF5472E88.cer (raw, json)
Hash identifier:          R+I8IAJ19wYJS1SvLNA0Ik3P/B7oB30hyx16Mxtr7vI=
Subject key identifier:   4C:54:5D:AD:66:D9:A9:F6:79:45:5F:C4:35:34:5F:2B:F5:47:2E:88
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5E2B6A29EB12BFF9C75F24C6033883CE6832EBB3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/4C545DAD66D9A9F679455FC435345F2BF5472E88.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Nov 2023 15:19:11 +0000
Certificate not after:    Thu 14 Nov 2024 15:24:11 +0000
Subordinate resources:    AS: 266160
                          IP: 177.85.80.0/21
                          IP: 192.140.12.0/22
                          IP: 2804:3b9c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2b:6a:29:eb:12:bf:f9:c7:5f:24:c6:03:38:83:ce:68:32:eb:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 16 15:19:11 2023 GMT
            Not After : Nov 14 15:24:11 2024 GMT
        Subject: CN=4C545DAD66D9A9F679455FC435345F2BF5472E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3d:85:1f:80:46:fc:13:45:2f:a0:de:f0:74:
                    88:8a:99:f2:e8:5f:47:51:9f:0a:64:6f:95:da:14:
                    83:8e:aa:48:ec:f4:17:ff:c7:61:bc:72:a8:95:1d:
                    7b:a3:33:3c:98:5b:3c:e3:e6:58:2f:28:25:aa:10:
                    5e:6e:9f:ae:c1:97:a4:ed:49:0d:40:19:3e:db:a5:
                    67:ea:c2:cd:92:36:46:65:16:66:3b:68:a1:75:91:
                    16:8d:0d:56:20:3f:0f:fc:a3:53:44:13:fd:5e:99:
                    eb:50:d7:b8:4e:3d:f0:73:93:cb:ef:00:56:0c:a7:
                    c5:8a:e1:6d:cd:d2:fa:e5:11:47:b7:36:21:27:36:
                    58:68:c4:d6:05:35:17:96:a1:9e:e4:98:d5:7f:81:
                    a5:e5:7a:c0:0c:41:09:7e:e2:1b:7b:6d:c7:ba:df:
                    69:80:1e:23:03:63:6e:78:18:7d:e5:8d:8a:a8:60:
                    78:fa:ac:97:12:d8:6b:65:16:4e:11:68:0e:75:9c:
                    1c:c0:7b:6c:70:46:a7:e9:7f:77:a6:cc:33:81:13:
                    d8:9e:79:ee:98:bd:22:d7:01:0b:ff:5e:41:18:97:
                    e3:46:ca:55:b2:e6:22:2f:7c:40:53:f7:71:02:28:
                    66:4c:04:1e:a1:7f:69:bf:58:56:eb:e0:7a:de:53:
                    d5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:54:5D:AD:66:D9:A9:F6:79:45:5F:C4:35:34:5F:2B:F5:47:2E:88
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/4C545DAD66D9A9F679455FC435345F2BF5472E88.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.80.0/21
                  192.140.12.0/22
                IPv6:
                  2804:3b9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266160

    Signature Algorithm: sha256WithRSAEncryption
         8d:28:b4:18:dd:2f:8f:44:01:1b:97:3f:c4:c0:96:7c:aa:02:
         74:5b:fe:87:9c:16:8f:2e:21:ed:49:b8:31:87:d3:30:65:62:
         9e:f7:82:b1:f2:4f:b3:61:bc:84:63:bd:cd:da:37:6e:da:25:
         ef:62:1c:91:81:12:ce:96:a2:1c:91:93:cc:58:27:0c:43:b9:
         1b:ae:bc:fe:c4:41:43:73:fe:bf:dd:26:f9:cb:49:c3:8b:82:
         6e:e9:62:b2:ae:29:96:3d:4c:b8:f5:07:c2:76:7b:bf:11:17:
         24:24:20:65:6d:17:09:c9:79:9f:97:c1:ed:3c:5a:9b:7a:25:
         28:45:3c:32:27:4b:91:60:d8:49:1f:33:ac:76:3c:30:9b:12:
         a6:ab:00:c2:ef:b8:7d:28:25:45:40:59:f1:15:06:d8:d4:76:
         e7:3e:58:8d:c5:9d:11:2c:71:4e:a0:41:f8:d4:e1:89:09:37:
         4d:2d:57:63:49:5f:3f:53:11:c1:4e:9a:1d:d6:a8:9d:2e:4c:
         d7:fb:0c:3b:6a:ca:a4:7e:42:48:1b:08:9e:ec:c0:5d:d9:c8:
         63:d5:f9:24:70:4b:8a:b4:54:0f:ff:5d:bc:b5:11:7e:4e:b2:
         6c:6f:46:a8:5c:b3:84:cd:32:cc:2d:20:a0:82:34:28:f9:ed:
         cc:c2:b2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:24:43 2025 by rpki-client