Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5442E9D6C9D76276B5CBF7E825BA8C55DC3D3BBD.cer
File:                     5442E9D6C9D76276B5CBF7E825BA8C55DC3D3BBD.cer (raw, json)
Hash identifier:          k8304kDnNqU46nDTZon40UNuEASzL5cMo4AThJUcEcU=
Subject key identifier:   54:42:E9:D6:C9:D7:62:76:B5:CB:F7:E8:25:BA:8C:55:DC:3D:3B:BD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F5C9A16779CCE577443AEF8415D05CB88FA9275
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/2/5442E9D6C9D76276B5CBF7E825BA8C55DC3D3BBD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jul 2023 17:33:51 +0000
Certificate not after:    Thu 25 Jul 2024 17:38:51 +0000
Subordinate resources:    AS: 52699
                          IP: 170.244.0.0/22
                          IP: 177.23.136.0/21
                          IP: 177.223.0.0/20
                          IP: 2804:c64::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5c:9a:16:77:9c:ce:57:74:43:ae:f8:41:5d:05:cb:88:fa:92:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 27 17:33:51 2023 GMT
            Not After : Jul 25 17:38:51 2024 GMT
        Subject: CN=5442E9D6C9D76276B5CBF7E825BA8C55DC3D3BBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ed:fa:8d:b2:40:a9:4e:d3:e0:28:c7:dc:4e:
                    66:36:06:04:e5:ff:6d:81:a4:ce:33:9a:75:69:77:
                    78:e8:e0:0f:16:5e:62:8d:05:4f:4d:71:ea:04:87:
                    f6:83:37:cc:5a:36:05:35:68:0b:ef:8b:69:3a:d3:
                    33:5d:a2:91:70:ff:3d:ae:c5:27:27:18:dc:14:85:
                    f1:63:a8:0a:c6:c8:f1:73:6d:c7:75:23:ed:58:ff:
                    7b:c2:9a:5a:e7:2b:ba:10:71:22:e0:9b:da:5b:31:
                    f2:46:c3:09:95:6d:ec:fa:42:23:f0:0c:8a:b5:e9:
                    65:bc:13:1c:6c:d3:c6:79:18:cd:42:08:d3:a8:57:
                    27:50:87:42:1e:d3:18:c3:bf:57:e7:5f:b4:e2:f0:
                    51:fd:d2:4b:d7:42:da:4d:53:9d:3f:21:a3:27:f4:
                    ab:e2:3a:d3:14:4b:e6:15:6d:18:97:3d:19:7a:15:
                    ca:4c:0b:73:3b:ff:a3:54:62:98:df:f1:65:73:f5:
                    80:f4:e7:fb:b6:61:1b:90:a1:5a:20:c1:8d:c0:ec:
                    38:46:f9:22:44:a7:04:f6:44:36:bb:d3:4c:89:b1:
                    af:cd:17:ed:43:02:ec:6d:d8:56:ed:90:e8:21:c1:
                    d9:d1:e7:0d:56:5d:81:f6:4b:8c:2c:40:98:71:bb:
                    10:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:42:E9:D6:C9:D7:62:76:B5:CB:F7:E8:25:BA:8C:55:DC:3D:3B:BD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/2/5442E9D6C9D76276B5CBF7E825BA8C55DC3D3BBD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.0.0/22
                  177.23.136.0/21
                  177.223.0.0/20
                IPv6:
                  2804:c64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52699

    Signature Algorithm: sha256WithRSAEncryption
         10:a2:b0:4b:50:5a:14:c8:30:6b:c4:d7:0d:c3:8c:db:0a:52:
         e1:11:66:47:be:8e:6f:bc:d2:d6:f3:d1:be:53:7b:1a:83:53:
         8b:cd:bd:cb:98:15:09:e5:d5:b9:98:72:a2:a7:49:6a:c4:f0:
         86:8c:b3:ea:bf:be:e8:ca:77:8f:81:5b:e4:de:eb:2a:6f:18:
         46:a2:3c:15:5f:61:fa:34:4b:a5:10:bd:0d:9a:86:28:fc:fd:
         49:07:e8:04:41:f0:27:ed:3c:ee:b7:b8:9d:ba:c8:1f:de:b4:
         ce:f2:a1:ec:9e:ec:45:92:17:31:47:01:d4:9f:ff:2d:df:fe:
         42:78:61:ee:46:98:3a:e4:1a:93:9c:b7:cb:cc:bb:69:03:98:
         12:04:1c:7d:b8:3c:3f:01:4e:0e:55:37:e8:73:9e:24:01:2c:
         7f:1d:cd:f0:21:12:89:4a:d8:69:79:74:52:fa:43:f8:bd:71:
         8a:4b:8a:eb:d0:fb:04:20:54:40:8d:02:6b:ca:e6:fc:58:16:
         68:69:63:96:59:2a:7c:62:f6:64:4a:c2:05:27:93:21:bd:05:
         3a:c8:4d:c2:36:23:65:7f:87:61:e9:80:d1:4f:6c:bc:5f:fa:
         45:bf:03:a6:8e:87:ca:30:3a:b0:3a:0c:d7:31:4f:82:0a:3c:
         91:d3:6c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:47:02 2025 by rpki-client