Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.cer
File:                     2A38124DA4255FE32B70B911C7C0AD42921CFCAB.cer (raw, json)
Hash identifier:          VuGAdIAbJXpWbaNcsMBaLj/0th4k7MpYExDHQxH/H0o=
Subject key identifier:   2A:38:12:4D:A4:25:5F:E3:2B:70:B9:11:C7:C0:AD:42:92:1C:FC:AB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       70A0DC7105E959B635D4702C2D79363FEB89518C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Feb 2023 19:25:07 +0000
Certificate not after:    Thu 08 Feb 2024 19:30:07 +0000
Subordinate resources:    AS: 28634
                          IP: 177.105.128.0/20
                          IP: 179.96.128.0/19
                          IP: 189.90.96.0/20
                          IP: 201.62.64.0/19
                          IP: 2804:128::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a0:dc:71:05:e9:59:b6:35:d4:70:2c:2d:79:36:3f:eb:89:51:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  9 19:25:07 2023 GMT
            Not After : Feb  8 19:30:07 2024 GMT
        Subject: CN=2A38124DA4255FE32B70B911C7C0AD42921CFCAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:99:69:c7:9d:b4:8d:67:3f:16:fd:34:cd:
                    27:8e:20:3b:e3:79:75:b2:55:10:be:84:10:6f:19:
                    c1:76:22:67:1d:8b:01:5f:88:b1:a6:68:4f:7b:dd:
                    3e:ac:99:7c:fe:4e:b7:b9:38:61:9e:1f:59:a6:70:
                    a4:b0:c5:84:0c:02:44:eb:49:cc:8c:f4:55:f8:8f:
                    7f:e6:2b:4d:16:77:62:ba:86:71:de:37:2c:bb:3f:
                    ef:b9:6c:69:21:27:3c:b9:35:45:2b:4e:49:88:d0:
                    75:0a:d9:81:c7:f9:f6:8b:ca:cb:53:83:0b:d2:76:
                    a0:76:b3:eb:b7:4e:8d:30:ac:66:46:90:94:db:25:
                    e7:dd:1f:67:03:8f:2d:8a:a7:40:2d:fd:8f:f1:64:
                    0c:14:7e:ca:c9:ba:12:a8:f4:82:ab:47:09:63:a5:
                    29:cf:bb:80:50:2c:36:42:dc:a2:32:ed:0c:80:e2:
                    b8:9f:0d:28:d7:99:9e:34:4c:27:55:ac:82:75:cf:
                    ee:4b:ee:5f:e5:15:e9:b6:6b:c6:41:73:84:8f:61:
                    6c:2e:e0:af:1d:b7:45:f1:54:d2:7e:92:fd:e7:86:
                    4b:7a:6a:41:d7:58:e4:2d:f8:3e:f6:ff:4d:1c:2a:
                    4a:8d:fc:c4:16:b8:a2:46:87:48:5b:d1:20:03:96:
                    f5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:38:12:4D:A4:25:5F:E3:2B:70:B9:11:C7:C0:AD:42:92:1C:FC:AB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.128.0/20
                  179.96.128.0/19
                  189.90.96.0/20
                  201.62.64.0/19
                IPv6:
                  2804:128::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28634

    Signature Algorithm: sha256WithRSAEncryption
         26:be:51:c5:82:f9:72:28:b6:a4:8b:b6:e5:35:1d:16:37:da:
         e9:3a:c3:96:18:3d:33:b1:dd:39:f1:7f:20:88:7c:8d:9c:33:
         a0:04:67:7a:0c:ec:02:97:c2:8a:ec:8d:4d:85:fd:e1:24:b3:
         78:f6:a8:3c:ac:ac:06:69:4f:8d:ea:a3:c0:60:66:56:ff:2b:
         7a:c0:4c:f6:b7:3e:73:db:48:a6:06:4b:9f:40:cb:99:9b:f1:
         20:d2:0b:9a:53:cc:bf:36:8c:f9:68:34:7a:e7:1b:a1:9d:6e:
         32:3b:0c:62:4f:b7:9f:bf:72:d7:90:d5:93:34:f9:0d:ee:06:
         70:be:a2:52:7e:11:c4:6e:7e:b7:21:21:af:99:ac:6a:8d:17:
         78:f2:d8:f9:e7:62:7e:de:ee:db:00:2f:c3:5b:2d:2f:be:dc:
         90:13:8e:a2:9a:3e:a0:ba:6f:99:3c:a7:44:de:12:b9:74:21:
         35:92:3d:b1:f2:f4:3e:c7:8f:b2:1b:01:c5:9a:e1:0c:f4:25:
         a3:c0:22:9d:db:6a:16:b6:47:72:b6:05:47:f0:4e:ac:4e:c0:
         ec:b2:42:79:cd:c9:c0:24:47:14:6d:7d:4e:83:ab:51:48:47:
         be:d4:81:45:ec:06:1f:a5:16:4e:9d:6b:17:f3:48:17:66:a1:
         da:2c:58:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:07:03 2025 by rpki-client