Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BC5506CBB2E1807305823B9E9C6B419D4FFB65C9.cer
File:                     BC5506CBB2E1807305823B9E9C6B419D4FFB65C9.cer (raw, json)
Hash identifier:          Gl34JgDrliOy71WjFA0eLaDxdwn8X+sAlEe1/XyzOsk=
Subject key identifier:   BC:55:06:CB:B2:E1:80:73:05:82:3B:9E:9C:6B:41:9D:4F:FB:65:C9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2ADC4C4D27136C6C4986BB24EA9084FA53A05A26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/BC5506CBB2E1807305823B9E9C6B419D4FFB65C9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Apr 2023 18:55:46 +0000
Certificate not after:    Wed 24 Apr 2024 19:00:46 +0000
Subordinate resources:    AS: 269372
                          IP: 45.185.96.0/22
                          IP: 2804:639c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:dc:4c:4d:27:13:6c:6c:49:86:bb:24:ea:90:84:fa:53:a0:5a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 26 18:55:46 2023 GMT
            Not After : Apr 24 19:00:46 2024 GMT
        Subject: CN=BC5506CBB2E1807305823B9E9C6B419D4FFB65C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b4:4d:ff:cf:3d:3d:57:48:db:25:68:a6:be:
                    72:1e:4c:15:62:ad:14:79:39:93:48:82:f2:f5:ca:
                    89:35:ad:37:16:5b:d6:a5:ae:98:11:d5:d2:40:83:
                    0e:b1:61:cb:f2:58:4f:c9:64:56:79:9b:29:39:af:
                    17:64:13:9b:39:70:9c:a6:d6:1b:7d:b1:0f:2a:e9:
                    7e:28:83:b2:0f:61:a9:5e:97:50:76:f3:14:e9:1b:
                    c5:39:d6:dd:42:ab:8f:ae:98:62:8b:0f:74:b8:cb:
                    d4:d2:32:86:d6:af:d9:2d:95:0f:43:42:15:92:16:
                    f6:a7:aa:bd:8d:f2:c4:4e:df:40:35:e1:e2:83:e4:
                    91:66:0c:f0:b3:4f:08:e5:19:ab:ec:38:6d:74:ac:
                    a9:e2:a1:db:49:f7:a4:cc:79:4a:fb:94:1f:6d:e8:
                    33:40:af:78:85:33:a8:71:b5:75:de:45:79:1d:75:
                    b0:d4:88:53:42:b9:ed:f9:50:17:c7:c7:3f:37:15:
                    6f:a3:fd:fe:67:ac:02:0e:b2:ab:e1:d6:4c:19:a5:
                    1b:c0:2d:29:1b:c8:fc:cc:c9:00:9e:57:84:eb:af:
                    df:06:67:d4:39:85:3e:b2:47:34:98:60:ef:3f:c1:
                    f2:32:5b:fc:4e:8b:81:b0:bc:b9:18:8c:a0:92:e6:
                    f7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:55:06:CB:B2:E1:80:73:05:82:3B:9E:9C:6B:41:9D:4F:FB:65:C9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/BC5506CBB2E1807305823B9E9C6B419D4FFB65C9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.96.0/22
                IPv6:
                  2804:639c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269372

    Signature Algorithm: sha256WithRSAEncryption
         8d:db:2f:56:8d:e4:50:ec:5d:25:5d:46:cc:a7:ef:61:e9:32:
         41:25:97:8a:1a:9d:c0:d6:83:3b:6d:40:9f:58:80:08:88:ac:
         39:ea:f2:b9:6e:7c:96:43:4f:6a:96:0e:ac:a1:a2:c2:f1:e4:
         3c:bd:87:49:98:9a:85:38:fe:6e:bc:06:fe:07:ce:79:41:13:
         0d:7e:64:a8:1d:b6:f8:e0:f3:bc:b6:b1:1d:78:ff:ad:27:db:
         ef:f7:ea:a9:a9:27:b7:20:05:89:4a:d6:dc:dd:ae:95:34:83:
         cc:85:79:77:65:f7:79:ec:65:1a:50:fb:06:d5:13:87:9c:46:
         f9:8a:c8:1c:be:33:83:39:09:64:cc:76:40:64:3f:aa:f9:62:
         1b:2b:af:33:8a:97:90:13:78:b5:dd:94:07:6b:78:35:e2:9e:
         52:4a:5d:e6:bb:f1:58:eb:6a:da:17:39:c9:12:08:4e:7c:a2:
         a5:5b:db:c4:b0:8d:99:60:55:bb:b3:1d:0c:7b:31:21:1c:11:
         fe:71:ee:39:6f:af:48:56:34:fd:75:fb:d1:4e:cf:cc:b8:91:
         34:6e:c7:1e:f1:7c:7c:91:83:01:92:81:67:62:37:06:af:64:
         99:46:77:e8:c5:71:55:54:5d:6e:58:73:21:4b:78:ba:ea:98:
         13:aa:39:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:35:35 2025 by rpki-client