Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B4184F0DBB4DD3D5A8BE1A1B34581D0F0ECF0DEB.cer
File:                     B4184F0DBB4DD3D5A8BE1A1B34581D0F0ECF0DEB.cer (raw, json)
Hash identifier:          qTIk9ltdrlTnNa3ZigsfsY9J05iZdO334Hg7NhuT/Gk=
Subject key identifier:   B4:18:4F:0D:BB:4D:D3:D5:A8:BE:1A:1B:34:58:1D:0F:0E:CF:0D:EB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4533ADBEB74771FBF9710DF203804543EDA5CA42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/0/B4184F0DBB4DD3D5A8BE1A1B34581D0F0ECF0DEB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 May 2023 17:41:29 +0000
Certificate not after:    Thu 16 May 2024 17:46:29 +0000
Subordinate resources:    AS: 269148
                          IP: 45.180.200.0/22
                          IP: 2804:6024::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:33:ad:be:b7:47:71:fb:f9:71:0d:f2:03:80:45:43:ed:a5:ca:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 18 17:41:29 2023 GMT
            Not After : May 16 17:46:29 2024 GMT
        Subject: CN=B4184F0DBB4DD3D5A8BE1A1B34581D0F0ECF0DEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:84:01:18:5e:e2:1e:94:f6:11:c3:1e:e5:23:
                    da:69:6d:4e:f1:2d:a8:42:1a:36:3d:2d:24:e0:81:
                    82:07:a4:c0:cd:82:63:68:04:aa:63:9e:e3:cc:cf:
                    44:f2:12:63:96:75:c1:d0:02:40:8a:d2:9f:e0:81:
                    60:b9:85:b6:8a:1a:25:56:f2:d2:18:85:38:26:5d:
                    84:ae:c0:a1:47:38:c4:33:e1:41:fe:a4:12:ae:52:
                    45:86:f1:27:b1:ea:e4:fb:cc:e4:0c:5f:29:b0:32:
                    f0:bf:eb:a5:ae:4a:ea:9e:22:43:02:9e:49:49:ac:
                    df:6e:5d:7f:d3:3c:f1:1f:5c:55:91:e5:23:6b:69:
                    15:71:6a:d0:83:13:85:07:09:33:fe:a9:39:a0:85:
                    ee:2b:18:6a:46:8b:bb:dc:fa:0e:43:f9:97:80:c9:
                    42:f7:6c:93:d6:2c:c7:51:d8:6a:b2:20:0e:db:7a:
                    c3:98:30:2c:20:86:24:21:89:80:48:84:8a:b2:0a:
                    c5:a1:d1:33:86:d2:d1:6f:29:92:12:df:be:e4:7b:
                    5c:d3:5c:28:e2:c9:bc:48:0e:e5:f4:7e:ab:74:32:
                    aa:3e:54:7a:25:c9:44:a8:d6:dd:ec:cf:37:51:c7:
                    6e:0d:ea:e7:7b:bd:6b:b5:af:f5:1b:cd:08:92:af:
                    c1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:18:4F:0D:BB:4D:D3:D5:A8:BE:1A:1B:34:58:1D:0F:0E:CF:0D:EB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/0/B4184F0DBB4DD3D5A8BE1A1B34581D0F0ECF0DEB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.200.0/22
                IPv6:
                  2804:6024::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269148

    Signature Algorithm: sha256WithRSAEncryption
         05:30:ec:79:65:f8:5a:27:a2:0a:e9:ee:cb:e8:f0:36:d8:b0:
         ba:c0:c8:d2:0c:da:7d:36:db:65:2b:a7:09:2a:ac:e3:11:0e:
         6d:6f:18:9d:2c:65:55:45:67:64:f7:0d:bb:78:bb:18:b0:6c:
         d2:90:b1:6d:36:ab:e3:e1:6e:27:b8:70:d4:ea:28:81:03:06:
         d1:34:69:56:cc:20:3d:29:bc:ed:25:b7:e9:18:28:b1:41:00:
         40:fd:0f:f1:0a:bc:59:3b:12:86:07:cd:ae:1f:64:e0:0f:92:
         00:b1:9e:03:ba:6f:89:cc:b1:66:8c:53:7c:3a:07:00:a9:ff:
         06:9a:43:51:5b:43:bc:5f:3c:40:0b:4d:7f:3c:46:a4:e3:0f:
         3a:f4:a5:e2:6f:ac:f6:86:5a:d2:cf:9c:ed:6d:8b:ec:d1:5f:
         c5:51:c0:38:94:ea:ec:db:67:0a:81:f6:53:0f:90:59:ae:c7:
         ef:4c:99:d3:6d:8b:3d:9a:25:2c:e2:b6:9a:9c:00:a9:67:e8:
         fa:d2:7d:e8:39:0b:41:6c:7c:f2:c4:ca:27:f8:11:fc:73:51:
         02:cd:63:21:29:59:83:e9:f6:16:e7:48:bc:3e:c4:f1:6b:a5:
         4f:b6:b0:0e:ae:69:8a:aa:a3:d3:fb:3a:90:8b:ec:4e:4f:d2:
         8f:ed:09:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:11:47 2025 by rpki-client