Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/48474F51B75C0BDD8EB65C0CE7CF202FBFB75D6F.cer
File:                     48474F51B75C0BDD8EB65C0CE7CF202FBFB75D6F.cer (raw, json)
Hash identifier:          lbDuYytnkzl4DpQXcNI6O7E91F4cdGzMCdEqnhQaB0E=
Subject key identifier:   48:47:4F:51:B7:5C:0B:DD:8E:B6:5C:0C:E7:CF:20:2F:BF:B7:5D:6F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       181C76FB9ADC3CD7114E2CABB34F78A38962B9E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/48474F51B75C0BDD8EB65C0CE7CF202FBFB75D6F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Jul 2023 00:12:27 +0000
Certificate not after:    Tue 09 Jul 2024 00:17:27 +0000
Subordinate resources:    AS: 61868
                          IP: 45.226.192.0/22
                          IP: 131.0.32.0/22
                          IP: 2804:1a90::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1c:76:fb:9a:dc:3c:d7:11:4e:2c:ab:b3:4f:78:a3:89:62:b9:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 11 00:12:27 2023 GMT
            Not After : Jul  9 00:17:27 2024 GMT
        Subject: CN=48474F51B75C0BDD8EB65C0CE7CF202FBFB75D6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1c:1e:40:f9:66:fb:21:5b:43:c4:6a:30:62:
                    93:4e:31:e4:cb:87:a5:07:29:d9:1d:41:0e:18:63:
                    be:59:04:48:60:e2:f3:bc:e5:47:02:6a:1d:98:80:
                    71:ac:07:cc:c6:11:9e:14:06:db:26:4f:f8:55:87:
                    b3:9e:65:9d:0f:e1:d5:02:ab:e3:0c:f8:00:03:a9:
                    cf:c5:31:9a:f1:db:f7:93:0b:6f:78:7d:b2:28:cf:
                    46:56:f8:64:5b:97:e4:7f:92:c3:da:8d:3e:90:71:
                    28:f0:72:ce:e8:f2:e9:af:21:15:be:0f:7e:50:19:
                    eb:00:1d:ff:bb:65:0b:e7:13:6b:25:63:47:6f:f7:
                    9c:d8:04:cd:4e:3d:51:a5:7d:81:3e:0f:c8:0b:fe:
                    46:a8:cd:22:ea:11:f1:f7:0c:04:f8:a5:91:f0:e7:
                    36:cf:3f:0c:88:d2:2f:98:88:b3:f7:9c:62:e4:11:
                    ee:1e:9c:ed:da:87:15:54:4f:ea:89:9d:46:e5:a1:
                    87:08:be:b2:e7:36:e8:b7:ed:31:f0:25:e2:06:73:
                    a1:bf:9e:19:7f:1e:ed:eb:73:ca:7d:d9:17:07:f1:
                    21:80:98:8f:d3:f5:7c:12:31:48:36:54:1e:93:86:
                    60:5c:1c:c3:99:03:7b:fb:bf:c8:38:24:55:a3:85:
                    12:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:47:4F:51:B7:5C:0B:DD:8E:B6:5C:0C:E7:CF:20:2F:BF:B7:5D:6F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/48474F51B75C0BDD8EB65C0CE7CF202FBFB75D6F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.192.0/22
                  131.0.32.0/22
                IPv6:
                  2804:1a90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61868

    Signature Algorithm: sha256WithRSAEncryption
         3b:f8:5e:31:f5:79:47:32:92:0a:3c:1c:87:57:e1:a3:26:72:
         27:06:2f:e2:04:f7:f8:01:dd:6f:2a:9b:6c:75:b4:00:cf:15:
         38:22:a3:b3:e9:d7:2c:1b:c8:bb:17:50:90:58:e4:f7:9f:f6:
         1e:93:95:27:d6:7b:68:95:61:42:93:dc:ad:e7:e5:0b:31:2c:
         2f:08:74:e8:26:1a:9c:94:d9:72:3d:62:5b:b0:44:31:40:6c:
         3c:a1:8f:61:a2:e4:7a:d6:87:7e:7c:4b:42:81:3a:95:98:ce:
         8c:20:6b:a0:90:0b:ec:df:e1:4a:49:ac:6c:94:29:6c:e3:e4:
         8a:7d:11:e7:3c:fb:51:c3:14:50:73:d9:9a:dc:bb:01:4b:52:
         54:7e:f8:e2:62:14:0c:74:7c:04:86:a3:5f:0f:f0:2b:96:62:
         27:35:07:84:93:ae:2e:1e:30:04:52:bf:a7:a7:9f:d6:90:72:
         4a:be:06:25:79:46:cf:25:16:c3:8c:35:7b:fb:28:3b:6c:d7:
         de:8d:cc:cf:2f:6c:cd:db:91:d7:34:9c:c2:68:0d:6b:73:05:
         23:05:66:36:9e:12:b9:b0:dc:22:bb:d2:e2:db:11:fb:92:6c:
         5f:61:a0:9e:52:68:be:80:86:a7:a4:95:c1:9d:7b:06:22:d1:
         74:32:c6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:10:45 2025 by rpki-client