Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E.cer
File:                     93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E.cer (raw, json)
Hash identifier:          tt2isheEo7CFXvLVhGc9wy0FXYk6wq4OJXw7RP3fkPs=
Subject key identifier:   93:E9:F7:EA:4A:E4:44:9B:26:A7:5D:2A:43:E8:83:E4:6A:A5:AA:8E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       59D2189866D2AA7380E0E86C9A98F13819C619DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Dec 2023 17:19:05 +0000
Certificate not after:    Wed 18 Dec 2024 17:24:05 +0000
Subordinate resources:    AS: 269444
                          IP: 45.186.164.0/22
                          IP: 2804:64b8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d2:18:98:66:d2:aa:73:80:e0:e8:6c:9a:98:f1:38:19:c6:19:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 20 17:19:05 2023 GMT
            Not After : Dec 18 17:24:05 2024 GMT
        Subject: CN=93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f0:d5:32:1c:bd:7e:b4:ee:93:b7:35:9d:26:
                    7c:0b:9c:45:5b:36:48:0c:ac:60:72:b0:55:30:7a:
                    78:59:b9:7c:35:b6:03:f6:7e:22:6d:d9:77:38:29:
                    c1:e9:92:50:23:7e:43:60:20:bc:5c:0e:68:d4:c1:
                    ef:28:0c:45:fa:76:26:01:05:d8:5a:af:96:c2:79:
                    44:ae:d6:25:b6:3a:98:96:44:3f:53:7f:1a:41:f1:
                    87:e9:05:89:bd:c2:67:2a:ec:28:4f:61:33:2e:32:
                    45:82:8e:89:d7:ad:39:ff:a3:42:fb:d8:1d:68:25:
                    a9:74:4a:bb:88:18:28:f8:03:be:f8:aa:ee:18:fa:
                    45:32:be:68:8e:ab:90:61:a1:b4:76:55:3a:5b:49:
                    01:17:4b:8f:64:63:39:6f:41:e2:7a:cd:3f:40:72:
                    f0:f9:de:1f:84:08:fb:d1:2c:4f:54:72:66:c5:d0:
                    93:17:33:03:02:07:86:2f:19:75:b1:ed:ad:37:77:
                    9e:d0:15:66:c5:a7:11:13:15:78:1c:9d:a1:1a:37:
                    72:ef:3d:98:42:ba:22:92:ca:58:73:19:9d:a8:f7:
                    f9:2f:08:d1:20:ac:1a:6b:91:ea:79:43:cb:36:70:
                    68:ec:3f:46:3b:8b:01:ca:a3:e0:6a:43:df:c8:47:
                    8f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:E9:F7:EA:4A:E4:44:9B:26:A7:5D:2A:43:E8:83:E4:6A:A5:AA:8E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.164.0/22
                IPv6:
                  2804:64b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269444

    Signature Algorithm: sha256WithRSAEncryption
         95:4f:c1:d3:d0:4b:fe:7e:6c:03:21:63:c7:aa:4c:90:e8:75:
         cf:51:65:bd:76:bd:d8:c8:fc:60:9b:62:79:66:c3:95:12:67:
         5f:c0:75:26:45:fe:69:7d:d6:2e:c4:da:75:28:d6:f9:ad:09:
         f2:16:e2:47:41:40:cd:b7:7d:f0:1e:e3:7c:6c:29:d1:6b:b4:
         7d:ee:4c:cf:96:2d:1b:69:83:2a:00:7f:fc:60:17:38:15:41:
         21:b6:dd:37:2b:93:3f:2a:c3:37:5f:59:a0:9f:13:c3:65:7b:
         57:b9:15:7c:f2:a0:c2:6c:fd:21:dd:af:93:53:06:b5:23:44:
         ba:9a:68:5d:87:ac:8c:37:c3:f4:51:5e:66:ed:a1:66:2b:6a:
         e0:a6:de:35:43:8e:43:61:8a:15:23:2e:a9:7b:74:9a:df:84:
         64:36:e7:81:64:5d:75:88:80:f3:07:69:1a:eb:5d:4b:6c:85:
         3c:28:3a:a2:c9:9e:4d:05:69:bd:51:6c:4f:0c:76:27:7a:f3:
         0b:59:5d:0f:ec:70:42:c1:df:67:0e:3c:79:15:cd:77:2a:91:
         9e:01:9f:e9:9f:4f:b8:23:49:b8:6f:f0:38:b4:e1:53:4b:43:
         3e:bc:8c:82:4d:f6:40:bd:72:94:be:a5:46:7f:f4:77:07:59:
         17:5b:05:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 20:17:21 2025 by rpki-client