Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4197720AA0D4B39C062BD0A93359871DAE358152.cer
File:                     4197720AA0D4B39C062BD0A93359871DAE358152.cer (raw, json)
Hash identifier:          XwuqXjHlXvrQb5RhgLJCZVE/LNXf47pFpmDJhb7XafE=
Subject key identifier:   41:97:72:0A:A0:D4:B3:9C:06:2B:D0:A9:33:59:87:1D:AE:35:81:52
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       303A9476C78A271CD731F5F0499841CF1E8CF278
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/0/4197720AA0D4B39C062BD0A93359871DAE358152.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Oct 2022 20:28:45 +0000
Certificate not after:    Wed 04 Oct 2023 20:33:45 +0000
Subordinate resources:    AS: 268681
                          IP: 45.165.92.0/22
                          IP: 2804:54f8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3a:94:76:c7:8a:27:1c:d7:31:f5:f0:49:98:41:cf:1e:8c:f2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  5 20:28:45 2022 GMT
            Not After : Oct  4 20:33:45 2023 GMT
        Subject: CN=4197720AA0D4B39C062BD0A93359871DAE358152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:43:9b:b4:76:11:8c:bb:d3:09:4d:49:50:db:
                    d5:92:f5:04:26:33:17:22:16:be:6a:0a:84:a6:59:
                    46:fb:8f:c7:71:45:b0:72:0e:cd:76:83:23:66:d9:
                    9e:df:0d:86:2a:cc:39:11:6b:4f:c0:98:3a:74:dc:
                    39:44:99:f5:ba:81:44:1f:74:55:f8:9f:f8:b4:e0:
                    00:70:ec:5f:df:a3:c8:38:b3:d9:11:f9:1a:d9:fe:
                    de:dc:dc:6a:5d:42:5a:99:f7:97:c3:73:f2:bf:f6:
                    a0:d6:06:7c:70:cd:12:8c:53:d5:80:c2:e0:55:70:
                    56:56:71:6d:06:82:7d:85:ca:20:ac:d0:51:28:ab:
                    14:90:9e:49:4b:a5:1f:c1:da:b4:c1:12:34:88:58:
                    dd:92:ff:05:6a:9b:ac:99:e0:9d:e6:f8:67:0b:e8:
                    a6:e0:ed:62:c4:da:56:43:4e:a0:c8:11:65:6a:de:
                    8b:53:c6:5c:4b:71:e5:cd:8b:58:b0:9f:62:7b:d8:
                    f7:5f:38:67:9a:a7:46:9d:b6:1f:bd:5a:5c:fc:36:
                    6a:09:0b:a1:9c:cb:c4:18:31:39:78:31:57:d0:4c:
                    d1:f6:90:ce:48:78:2f:dd:1e:e4:b3:0c:ed:7a:8b:
                    85:54:d1:ae:cd:35:88:0f:62:4b:86:4c:54:67:c0:
                    70:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:97:72:0A:A0:D4:B3:9C:06:2B:D0:A9:33:59:87:1D:AE:35:81:52
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/0/4197720AA0D4B39C062BD0A93359871DAE358152.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.92.0/22
                IPv6:
                  2804:54f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268681

    Signature Algorithm: sha256WithRSAEncryption
         35:e4:60:0a:05:66:20:f4:ae:8c:09:c3:82:30:6e:a9:5d:45:
         3f:ca:d7:54:9c:a5:2a:5a:12:a9:aa:83:5d:d7:32:9a:b9:40:
         ac:f9:e3:4c:c3:fa:88:dc:94:a7:14:7e:a2:66:3a:f4:b2:fc:
         3a:53:16:0b:ef:f1:27:91:70:d9:f7:6a:70:31:62:0b:07:96:
         bb:17:e5:13:50:d4:fb:00:2d:94:19:88:e4:a0:1a:e6:46:b0:
         bd:09:45:b6:61:aa:e2:fd:17:52:42:c1:cf:84:82:3c:04:c2:
         31:e4:b9:62:c8:42:f3:00:0e:b7:a4:55:6b:a7:65:e7:1d:a2:
         81:3a:89:23:cf:48:56:09:0f:9f:a7:27:35:2e:dc:43:89:04:
         bd:41:d3:81:c4:98:10:76:f8:72:fb:de:17:14:ff:06:fb:f7:
         8e:cd:34:cb:35:ac:79:58:55:8a:3d:a0:05:2f:24:53:a4:8e:
         8f:e4:d7:a1:04:b5:0c:b5:8f:a2:1b:ad:5d:56:eb:91:85:d6:
         1c:57:2a:2c:e1:23:88:82:37:b2:db:de:3a:f8:55:d4:03:a4:
         a6:80:e3:0e:69:b6:aa:94:8a:d6:d2:fd:e1:9f:f5:4f:b5:86:
         2d:25:43:45:22:f9:c8:1f:ca:06:d4:62:7c:9a:a3:46:42:0b:
         56:ae:11:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:47:10 2025 by rpki-client