Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D00E3F04066D7B94F536480B8040FCA8545940B4.cer
File:                     D00E3F04066D7B94F536480B8040FCA8545940B4.cer (raw, json)
Hash identifier:          vrGZE84f+YuE4fK8RAXGO1mBmEkXSdVZkNgIyhRVljY=
Subject key identifier:   D0:0E:3F:04:06:6D:7B:94:F5:36:48:0B:80:40:FC:A8:54:59:40:B4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       56DBFC6B1E278430EDA17EE7B97903E71A17ED3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/D00E3F04066D7B94F536480B8040FCA8545940B4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 12 Mar 2023 21:59:06 +0000
Certificate not after:    Sun 10 Mar 2024 22:04:06 +0000
Subordinate resources:    AS: 271104
                          IP: 179.42.4.0/22
                          IP: 2804:7654::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:db:fc:6b:1e:27:84:30:ed:a1:7e:e7:b9:79:03:e7:1a:17:ed:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 21:59:06 2023 GMT
            Not After : Mar 10 22:04:06 2024 GMT
        Subject: CN=D00E3F04066D7B94F536480B8040FCA8545940B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b4:10:0d:8e:fa:a5:3e:fc:18:ad:a8:bb:30:
                    0f:9b:35:68:f7:54:95:f7:b5:57:34:5e:31:d1:67:
                    5d:99:d3:26:f3:9f:7a:4c:67:6c:19:52:a5:5c:80:
                    32:0e:fe:fe:a8:d7:30:3e:63:2c:5e:0e:99:3d:66:
                    32:d3:da:53:8f:56:17:a0:06:f6:9b:a9:ba:1d:6f:
                    6c:7d:74:c8:b4:ec:1d:ce:06:a7:46:3b:67:e4:e3:
                    1a:01:8c:ca:dd:48:84:cc:37:c8:66:ec:90:ee:c4:
                    07:23:93:43:71:08:8f:1d:c4:7e:b0:a5:6e:19:90:
                    e3:6f:49:7f:4c:2e:c6:bf:f7:b0:64:ba:c6:b4:38:
                    c0:fc:43:c2:23:4e:92:42:e1:4b:e9:a8:c8:97:b5:
                    2f:fd:82:6b:ba:88:ca:f0:fd:9a:9d:fa:75:25:fb:
                    76:da:ed:cd:be:18:4d:f3:0e:44:6e:7f:ac:5d:59:
                    cb:cf:cb:7d:04:38:4e:81:97:bc:f1:9f:31:1b:17:
                    7f:7e:23:5f:35:ba:a7:61:07:78:4b:80:9d:94:88:
                    0b:e1:f5:c6:5e:ab:ee:80:b0:da:e8:82:ad:26:03:
                    93:12:59:42:6c:67:fc:7c:09:c9:ab:2b:e8:80:87:
                    f7:6e:aa:18:2c:6c:09:19:3b:0c:53:ae:c3:98:3e:
                    11:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:0E:3F:04:06:6D:7B:94:F5:36:48:0B:80:40:FC:A8:54:59:40:B4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/D00E3F04066D7B94F536480B8040FCA8545940B4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.4.0/22
                IPv6:
                  2804:7654::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271104

    Signature Algorithm: sha256WithRSAEncryption
         01:22:78:af:0b:16:e6:e2:2f:71:e9:e2:d5:6d:d9:f4:fe:c7:
         1d:00:7c:c0:a5:8e:63:5f:39:cb:68:b3:32:7a:68:05:61:47:
         73:e3:56:3a:24:59:1c:ac:e6:10:cd:ce:61:8c:cf:90:54:de:
         50:64:12:f7:24:91:f4:1b:39:94:47:9c:90:37:27:e9:46:14:
         e9:0b:21:20:7f:92:89:41:ab:9e:40:f9:73:36:b8:b9:f1:67:
         90:da:17:a3:c9:a5:14:26:52:11:02:16:5d:f1:54:86:fb:b8:
         90:43:fd:bf:b4:87:35:02:bd:f8:78:39:28:80:fa:6e:0d:b0:
         fe:bf:05:2a:7f:58:b8:74:5c:72:14:9c:a0:d6:c3:57:c5:e4:
         e0:d2:17:32:fb:ca:9e:7e:0a:04:ce:8a:c9:d9:0d:ec:b0:a9:
         40:74:6f:75:ec:29:b0:13:f4:13:17:a2:f9:8f:e3:52:2c:52:
         e0:a2:6c:f9:82:72:5a:e0:0a:94:2b:16:2f:f7:50:1a:0b:cb:
         6e:1e:3d:ec:e1:99:1d:cb:0c:77:2a:6a:9f:17:f8:86:12:9d:
         83:8e:ef:c4:6d:98:08:d7:aa:4c:ae:d4:bf:77:8e:80:02:e1:
         16:8f:41:b8:ca:22:5d:e3:e0:67:80:5b:ae:68:20:de:60:2f:
         72:be:ff:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:44:52 2025 by rpki-client