Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AE055C4FC9B22471BB0C5F5968630BFE867715D2.cer
File:                     AE055C4FC9B22471BB0C5F5968630BFE867715D2.cer (raw, json)
Hash identifier:          qh2Kw1naJ4RKxx/gGbpAYdbeMfL4RDBZ1iFZDNqJykc=
Subject key identifier:   AE:05:5C:4F:C9:B2:24:71:BB:0C:5F:59:68:63:0B:FE:86:77:15:D2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4E49D06B28BD19CDF2D62E143817615E727AB903
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/AE055C4FC9B22471BB0C5F5968630BFE867715D2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 16:48:33 +0000
Certificate not after:    Wed 10 Apr 2024 16:53:33 +0000
Subordinate resources:    AS: 269204
                          IP: 45.181.216.0/22
                          IP: 2804:60fc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:49:d0:6b:28:bd:19:cd:f2:d6:2e:14:38:17:61:5e:72:7a:b9:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 12 16:48:33 2023 GMT
            Not After : Apr 10 16:53:33 2024 GMT
        Subject: CN=AE055C4FC9B22471BB0C5F5968630BFE867715D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5f:ff:0f:d1:7e:23:1f:c9:b8:e5:0a:69:ed:
                    58:19:8e:81:fd:8a:24:42:7b:80:21:00:c6:93:51:
                    2a:bc:d4:60:86:60:75:ca:9a:a7:cc:af:35:e4:d4:
                    b9:e2:33:95:57:1e:c7:a7:4c:6b:c9:4a:b9:74:d8:
                    82:d0:3c:e9:52:46:ff:6e:f7:60:a5:6d:a8:d7:b5:
                    cb:56:f4:5a:c7:c5:4d:80:5c:06:92:7a:99:51:bf:
                    60:49:8b:e0:9e:c3:34:5a:7e:b1:0d:b2:72:4b:ad:
                    54:c9:af:a5:b1:24:6f:18:cd:c4:dd:b2:e8:ad:7e:
                    7b:4a:85:51:ec:f1:b2:f6:14:b5:40:d9:01:7e:03:
                    5b:91:9d:6e:d8:d7:c9:5f:bc:a3:66:1d:82:9b:2d:
                    77:b9:ad:36:bc:db:1b:52:cf:ce:dc:fe:be:dd:4d:
                    37:ef:ec:c4:5b:9e:fb:be:41:f7:11:0f:9d:5a:b3:
                    0e:06:de:dd:b9:82:60:57:c4:02:94:a9:d6:73:8c:
                    1c:81:00:99:32:a8:79:e9:98:8e:db:29:e2:34:0d:
                    fa:82:a1:6d:ad:58:1b:e2:1c:22:cb:cf:7b:0f:4d:
                    bd:39:ea:7a:84:cd:01:7c:24:89:c1:63:bc:25:1c:
                    d1:b3:26:33:2c:d4:fa:43:a4:67:f5:52:95:60:93:
                    aa:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:05:5C:4F:C9:B2:24:71:BB:0C:5F:59:68:63:0B:FE:86:77:15:D2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/AE055C4FC9B22471BB0C5F5968630BFE867715D2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.216.0/22
                IPv6:
                  2804:60fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269204

    Signature Algorithm: sha256WithRSAEncryption
         10:fd:09:28:32:0d:94:be:30:6e:bb:59:dc:bc:09:de:68:9a:
         f4:e4:20:32:a8:46:e7:fc:27:17:2a:5b:ae:67:fc:30:fc:08:
         4a:69:e9:c6:de:21:7f:42:e0:4a:d5:cb:c3:44:38:d7:e6:35:
         17:89:5f:8b:c6:a6:85:e0:75:af:7b:44:6d:2d:e6:2b:9f:67:
         38:75:40:0a:80:26:de:74:84:52:f7:e8:10:fa:21:00:92:2c:
         56:ff:16:1d:b4:de:a6:cd:0a:f2:bc:3c:f3:7f:0a:73:f8:b6:
         d4:b7:4f:c8:79:03:e9:3e:11:89:92:2f:58:62:46:23:6f:2c:
         84:bc:b1:9c:af:94:c9:a6:2b:35:c2:8d:d0:f9:12:3b:95:e1:
         45:02:2c:e6:8b:ff:92:13:b8:db:a8:6b:9b:ce:5a:f6:ca:39:
         5c:6c:32:a2:68:01:89:a8:ec:2e:22:90:ee:95:56:0a:7a:6e:
         5c:6b:41:bd:33:3f:eb:27:ab:22:cb:48:36:3d:a3:67:a6:aa:
         78:fc:76:04:a8:8c:61:e1:c4:e3:3a:96:58:3b:83:41:80:ea:
         13:44:fe:ed:c3:b9:58:45:dd:ff:7d:ce:09:92:6b:41:f8:0c:
         15:7f:36:e5:da:ac:42:d0:e5:2b:9f:bf:a5:05:c7:b8:17:28:
         4f:a7:9e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:19:22 2025 by rpki-client