Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DEDFF72E79D2179993F3FD06AAC75DC6D04A628B.cer
File:                     DEDFF72E79D2179993F3FD06AAC75DC6D04A628B.cer (raw, json)
Hash identifier:          z6UkXmkU/Nya8imaF6q1e+LSoT7p9LOAMTFY83DOMxs=
Subject key identifier:   DE:DF:F7:2E:79:D2:17:99:93:F3:FD:06:AA:C7:5D:C6:D0:4A:62:8B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       38BD869AB4D031423BD32887926005CCBB682967
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/DEDFF72E79D2179993F3FD06AAC75DC6D04A628B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Apr 2023 06:56:57 +0000
Certificate not after:    Mon 08 Apr 2024 07:01:57 +0000
Subordinate resources:    AS: 270717
                          IP: 200.6.84.0/22
                          IP: 2804:7048::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:bd:86:9a:b4:d0:31:42:3b:d3:28:87:92:60:05:cc:bb:68:29:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 10 06:56:57 2023 GMT
            Not After : Apr  8 07:01:57 2024 GMT
        Subject: CN=DEDFF72E79D2179993F3FD06AAC75DC6D04A628B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9c:18:25:50:31:94:7c:b8:00:55:c4:4d:62:
                    0f:bd:85:a7:be:33:0b:73:26:0f:ff:e3:68:eb:5e:
                    cc:4e:9d:f8:83:d5:5d:93:26:be:10:0e:cd:21:4a:
                    68:94:4c:b5:46:82:00:54:d3:9f:cd:bf:20:df:af:
                    dd:4a:cb:4f:12:0f:ee:26:0a:c9:31:fa:e7:37:d5:
                    64:61:75:87:e7:c0:8b:c1:6c:28:17:32:07:85:2d:
                    22:64:60:b9:a0:4e:13:14:60:d9:25:44:a2:7c:b7:
                    ed:f5:c5:f3:fb:1d:53:98:2c:19:53:78:f0:0e:3c:
                    15:a6:9c:99:62:c8:89:f2:8b:94:62:be:cf:5f:ca:
                    08:d4:98:70:82:36:8a:50:f4:a8:a9:48:db:6e:f7:
                    5b:a6:f8:86:84:06:42:fe:6f:ff:dc:0f:d6:60:91:
                    07:d7:d4:0d:e2:53:fc:d5:6e:11:5d:1c:5d:4d:03:
                    6e:32:69:d1:1b:61:e6:f8:5d:58:1a:81:2a:54:ff:
                    5e:16:9f:06:d1:8d:2c:4a:c5:60:fe:d1:aa:60:bb:
                    42:20:7a:53:4a:c0:ba:7c:a4:c8:34:f2:84:aa:c0:
                    bc:89:f2:4d:dd:27:23:32:0e:f9:be:f5:23:17:21:
                    b0:75:45:ee:bf:66:c5:d3:fb:dd:4c:1c:f3:af:fc:
                    03:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:DF:F7:2E:79:D2:17:99:93:F3:FD:06:AA:C7:5D:C6:D0:4A:62:8B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/DEDFF72E79D2179993F3FD06AAC75DC6D04A628B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.84.0/22
                IPv6:
                  2804:7048::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270717

    Signature Algorithm: sha256WithRSAEncryption
         4d:82:96:f1:62:6c:0e:4c:6a:0b:03:d9:2d:bb:82:2d:a5:46:
         a2:ea:12:91:19:c6:4b:99:b6:0a:fe:83:3e:74:1a:db:b7:a1:
         67:83:6a:a5:b2:9b:e6:a6:8d:e7:c2:b0:e7:4d:38:af:2a:08:
         9d:a8:4b:e3:88:26:2c:ee:d3:81:41:e5:67:47:3c:8c:d8:35:
         1d:25:3c:6e:5e:1f:ed:c0:94:4a:3a:cb:df:6a:0b:bc:e2:92:
         4e:7f:f1:db:e5:2c:d1:e9:4f:98:8a:10:5f:fc:89:35:0b:40:
         69:28:74:ab:bf:75:c0:28:42:f9:32:c2:04:58:14:ef:06:28:
         25:dc:fb:bf:67:41:b5:34:59:9c:16:b5:82:fd:be:91:dc:44:
         44:a8:10:ee:e7:70:26:99:00:db:2f:9e:61:8e:7b:44:d5:12:
         a9:e1:58:c4:9d:de:f2:82:5e:57:26:29:4c:8f:de:7f:87:e4:
         20:92:aa:e9:a9:32:3a:52:5a:37:8e:47:34:3f:59:49:c3:5b:
         43:71:0d:ba:07:44:c2:18:56:51:a2:24:34:b9:cc:76:74:c8:
         2c:5b:a7:11:6d:11:06:a1:d3:0f:70:b4:af:92:02:32:ca:c7:
         dd:ad:f0:ac:c9:9e:e1:f7:d5:55:f1:c4:e3:fc:de:70:e6:12:
         ac:cd:ac:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:02:10 2025 by rpki-client