Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DDF05B9E6D023218FFA149930FC0EB8E62772690.cer
File:                     DDF05B9E6D023218FFA149930FC0EB8E62772690.cer (raw, json)
Hash identifier:          A2x2YXzboiUaE7iqCOKWOOiHGjWPnT4TrM1esKn/7ek=
Subject key identifier:   DD:F0:5B:9E:6D:02:32:18:FF:A1:49:93:0F:C0:EB:8E:62:77:26:90
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3563D44C9249ED2FF670890E6E5745451FA01611
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/DDF05B9E6D023218FFA149930FC0EB8E62772690.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 16 Dec 2023 19:46:19 +0000
Certificate not after:    Sat 14 Dec 2024 19:51:19 +0000
Subordinate resources:    AS: 270355
                          IP: 190.89.48.0/22
                          IP: 2804:6ab8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:63:d4:4c:92:49:ed:2f:f6:70:89:0e:6e:57:45:45:1f:a0:16:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 16 19:46:19 2023 GMT
            Not After : Dec 14 19:51:19 2024 GMT
        Subject: CN=DDF05B9E6D023218FFA149930FC0EB8E62772690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:e4:4d:15:c6:00:83:e9:9e:fd:7f:01:24:
                    ca:c3:08:77:5d:97:c0:9a:37:b1:2c:3e:13:85:fd:
                    bf:83:a3:e8:c0:56:7a:ce:c3:f6:7d:5b:73:c8:6b:
                    bb:6b:5d:03:9d:5b:06:37:32:99:02:09:2f:83:78:
                    ce:f4:9e:35:c6:07:ff:16:61:c9:dd:e7:ac:41:e0:
                    d9:b0:20:11:f4:e8:4f:a4:9d:c3:b3:41:06:6f:b6:
                    50:7e:01:b7:1b:5f:31:0d:c4:9e:24:f7:48:7f:50:
                    7f:88:45:47:08:9a:d6:20:0b:67:3f:c6:50:7e:f8:
                    4d:b5:3d:f0:3f:05:47:47:a6:98:dc:8c:a1:4a:a5:
                    92:c0:6e:1b:07:1a:1d:09:81:c7:d1:3d:fb:c9:56:
                    fd:5e:9d:22:d8:a7:98:97:47:8b:7d:58:9d:9e:98:
                    bd:6d:cb:4a:ad:c5:f4:5e:72:7f:eb:26:bd:8f:af:
                    ef:3d:98:76:b5:5f:8b:af:f9:70:f6:6f:7b:d0:c8:
                    3a:9b:5e:d5:e5:96:98:b8:a1:36:7f:38:fb:55:74:
                    77:61:02:83:40:a4:94:9c:c2:82:00:d3:7c:d9:10:
                    9d:f2:42:c1:fa:72:35:80:41:49:f4:73:2c:c0:c1:
                    b0:8a:fa:5c:6b:0a:73:65:bd:38:1f:a3:17:2e:59:
                    04:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DD:F0:5B:9E:6D:02:32:18:FF:A1:49:93:0F:C0:EB:8E:62:77:26:90
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/0/DDF05B9E6D023218FFA149930FC0EB8E62772690.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.48.0/22
                IPv6:
                  2804:6ab8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270355

    Signature Algorithm: sha256WithRSAEncryption
         4b:14:ac:8e:0e:49:77:63:70:8b:00:df:e9:9e:60:07:46:e9:
         11:fd:05:ad:18:bd:04:53:e2:05:ce:25:e1:b7:90:75:02:c7:
         c2:ac:58:b6:41:ca:8c:d9:d0:db:9c:0a:f9:26:f6:aa:fa:ac:
         85:10:96:02:bb:43:46:fd:99:68:bb:d0:0d:bb:7c:c2:c2:01:
         04:f9:27:aa:ce:1a:88:05:36:df:a8:b8:b2:14:46:76:55:02:
         a7:44:ed:d7:c8:63:b9:5a:04:6d:0d:5e:db:af:09:70:e6:cf:
         a8:a1:95:92:86:05:88:cb:8c:05:57:6e:3c:26:5a:d0:0a:a4:
         ba:66:77:9f:27:63:4f:ba:41:78:61:d0:96:ba:b2:74:80:8d:
         55:36:86:0e:8d:19:08:0a:05:c7:38:6c:97:f8:fe:a4:42:fe:
         19:c6:ee:fd:c2:c1:84:12:62:ba:3e:7e:44:b3:81:01:f8:de:
         62:c3:65:b3:c9:99:2d:85:f9:5d:97:e7:09:eb:ef:9e:3a:5b:
         1e:59:ef:57:7e:a7:eb:e5:f3:51:ac:57:92:43:4d:1b:cd:3f:
         56:6a:ca:fd:a0:a4:75:84:f8:ac:3f:56:b6:9c:65:7a:e3:24:
         6d:1d:f5:a8:e3:3c:13:88:b9:a4:b3:0b:c6:89:5d:d1:0b:59:
         3d:42:06:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org