Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/405CE81A8B5F58A8C86EF096E093C3F57FF19BEF.cer
File:                     405CE81A8B5F58A8C86EF096E093C3F57FF19BEF.cer (raw, json)
Hash identifier:          RqIR6UBJ8Q3Dcql8MxSY5/uJ2/H4nbjhWZ+e3ZM82ZY=
Subject key identifier:   40:5C:E8:1A:8B:5F:58:A8:C8:6E:F0:96:E0:93:C3:F5:7F:F1:9B:EF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       60802B9F6C9CC33DC6A90F54CA39F5E48D23CB16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/405CE81A8B5F58A8C86EF096E093C3F57FF19BEF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Oct 2023 21:53:54 +0000
Certificate not after:    Wed 02 Oct 2024 21:58:54 +0000
Subordinate resources:    AS: 263143
                          IP: 191.242.196.0/22
                          IP: 2804:1764::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:80:2b:9f:6c:9c:c3:3d:c6:a9:0f:54:ca:39:f5:e4:8d:23:cb:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  4 21:53:54 2023 GMT
            Not After : Oct  2 21:58:54 2024 GMT
        Subject: CN=405CE81A8B5F58A8C86EF096E093C3F57FF19BEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:99:37:69:03:69:1f:f4:a3:28:44:83:b1:4d:
                    e4:32:fd:50:0c:0a:6a:0e:3b:5d:9a:eb:68:49:50:
                    2c:fa:4f:36:4e:26:e8:db:c4:3a:2e:71:ff:b0:09:
                    dc:f7:19:47:0e:9b:26:ea:7d:80:6e:7d:2d:c5:57:
                    45:f1:e0:a2:1b:40:a9:0d:b0:2e:c1:62:bd:1e:df:
                    54:c8:74:1f:01:34:0b:8f:26:46:d7:51:70:31:4e:
                    2d:7c:f8:e2:33:d5:3c:24:56:8f:b5:4b:1c:29:61:
                    a1:67:e5:6c:ec:68:9b:ae:68:4e:36:0d:a6:1c:58:
                    52:66:11:e1:44:db:a5:ca:80:85:09:eb:fe:c1:e8:
                    9a:83:c9:76:01:9c:4c:11:3d:ce:8a:b0:02:cb:78:
                    66:06:b8:bb:3a:4d:d2:12:93:9b:c1:83:ef:b0:c4:
                    1d:95:ca:9d:25:b7:ce:cf:c3:2f:25:54:0f:c3:fc:
                    1b:85:73:1a:a8:c8:3c:34:14:fb:e2:c1:c6:3d:7b:
                    a5:9a:2a:af:cd:38:9b:90:e1:7f:ff:92:aa:9a:7a:
                    cf:28:86:44:bb:fa:6f:5b:2a:6b:b9:26:9f:3b:03:
                    77:22:04:c1:f6:e1:a7:68:a2:90:db:62:8b:79:17:
                    0a:2d:98:71:f3:96:10:5b:db:59:7b:3b:21:60:74:
                    53:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:5C:E8:1A:8B:5F:58:A8:C8:6E:F0:96:E0:93:C3:F5:7F:F1:9B:EF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/405CE81A8B5F58A8C86EF096E093C3F57FF19BEF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.196.0/22
                IPv6:
                  2804:1764::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263143

    Signature Algorithm: sha256WithRSAEncryption
         2a:a5:ef:3e:d5:81:0d:af:63:b0:fd:0f:78:52:5d:80:8f:c4:
         fc:0c:48:d4:b7:dd:a3:56:d7:e5:4e:3b:ee:f4:b1:53:d6:62:
         5c:0c:23:48:57:11:c4:16:d7:d4:aa:fd:a5:e6:1c:af:b5:e5:
         37:b3:63:85:71:4f:2e:89:c6:c5:e8:95:5c:7b:ba:42:ed:c6:
         ae:cf:e3:cd:12:05:fe:18:62:38:41:5f:8c:d6:bf:7f:88:8b:
         94:a5:6d:2c:04:02:32:d7:2e:91:d5:fc:86:4f:d3:8b:d1:5d:
         af:6e:60:d7:a6:41:b6:d9:98:7d:b4:a2:b3:f7:16:0c:9a:f6:
         06:8f:00:af:21:5b:60:df:c1:54:3f:dd:35:ae:d1:a2:c5:bb:
         86:2d:4b:91:1c:7b:18:09:3a:68:39:ae:d8:43:4b:46:24:dc:
         db:f9:08:2c:a8:51:20:fa:f5:4b:a4:39:3d:54:65:71:9d:9f:
         31:42:01:99:f3:fb:35:ae:fa:34:60:25:1c:90:dc:6d:b6:6b:
         95:7e:d8:82:c1:a3:d3:aa:00:7d:26:28:12:f1:fc:0e:73:fc:
         25:c7:2d:35:45:84:65:ad:87:26:1d:21:e1:e3:fb:fc:18:1f:
         0e:a3:d9:5b:d7:3a:d4:af:47:7c:b5:10:f3:81:d7:5e:fb:7f:
         23:5c:1a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:34:13 2025 by rpki-client