Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/00DB56825404ABC47D0B868AF4C0C886C672ADE9.cer
File:                     00DB56825404ABC47D0B868AF4C0C886C672ADE9.cer (raw, json)
Hash identifier:          lcuNpsDL6VwEqNp7hYnrwb/A0HBj8CVboxjZPPumzkw=
Subject key identifier:   00:DB:56:82:54:04:AB:C4:7D:0B:86:8A:F4:C0:C8:86:C6:72:AD:E9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5339B6DA6061C6ACC30F5CC1BF4E749CCA33805B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/00DB56825404ABC47D0B868AF4C0C886C672ADE9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 01:20:41 +0000
Certificate not after:    Thu 11 Jul 2024 01:25:41 +0000
Subordinate resources:    AS: 61722
                          IP: 131.72.36.0/22
                          IP: 2804:1b54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:39:b6:da:60:61:c6:ac:c3:0f:5c:c1:bf:4e:74:9c:ca:33:80:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 01:20:41 2023 GMT
            Not After : Jul 11 01:25:41 2024 GMT
        Subject: CN=00DB56825404ABC47D0B868AF4C0C886C672ADE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:47:4a:e0:10:cc:54:df:69:f0:99:24:be:2a:
                    3a:a7:35:ad:f1:46:c6:43:3a:ab:f5:0a:c5:0e:8e:
                    87:db:fa:9a:bb:90:15:40:c5:bd:b1:d4:05:58:e8:
                    58:28:99:50:f6:05:59:6c:6e:e9:c4:d2:d4:c6:1c:
                    8e:33:57:f9:0c:4b:3a:80:58:c0:3a:83:b0:bd:5d:
                    35:91:59:e5:40:e4:0f:21:c6:43:47:ff:09:35:95:
                    d7:3c:d4:0d:02:1d:dc:1f:60:85:f9:d8:71:35:1b:
                    ae:77:a3:d9:6d:08:de:09:02:04:05:26:11:99:04:
                    45:e0:2a:c4:5e:eb:fd:2c:a0:41:f6:a4:d3:60:d9:
                    e1:54:f3:eb:76:db:98:67:34:ac:0c:99:d7:e0:26:
                    79:9f:fe:ab:59:7a:10:04:8d:97:d3:13:b3:13:0f:
                    71:76:76:b4:83:0a:6b:aa:01:ce:f1:fc:0d:28:0b:
                    13:53:76:7b:0f:95:87:0e:99:07:cd:09:32:03:56:
                    af:e0:5d:01:33:91:a8:bf:bd:7e:d1:94:74:11:a7:
                    7c:fc:03:e4:ba:7c:0f:01:b0:f5:e2:93:e8:6d:21:
                    6e:6c:1b:0b:32:47:81:d1:a6:f8:10:cb:06:bc:70:
                    ba:74:72:99:4b:c3:19:1c:95:a3:2a:e1:e5:26:b3:
                    b7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:DB:56:82:54:04:AB:C4:7D:0B:86:8A:F4:C0:C8:86:C6:72:AD:E9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/00DB56825404ABC47D0B868AF4C0C886C672ADE9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.36.0/22
                IPv6:
                  2804:1b54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61722

    Signature Algorithm: sha256WithRSAEncryption
         a1:91:ea:9b:21:27:8e:b9:f0:3b:21:de:29:c7:f7:d6:1c:f0:
         a6:b3:5a:3e:b1:9d:a8:de:23:00:45:98:c7:e1:33:55:4b:db:
         cb:ef:0d:39:ab:ee:b8:c2:7c:39:28:1e:99:5a:2d:2c:34:bb:
         00:81:d7:89:9e:fc:76:fc:45:cb:58:8f:80:0d:27:13:2b:6b:
         30:00:e3:ce:e6:f9:61:aa:ef:f8:ed:bd:44:9d:eb:97:bd:94:
         9e:e4:b9:9c:3b:fb:8d:f8:52:71:75:ca:50:a8:8c:52:a0:2f:
         52:33:50:45:f1:56:b3:ba:c6:c4:ff:fa:0a:32:02:a3:7c:f6:
         47:54:0f:47:b9:05:f2:c4:66:06:0e:8d:3d:29:5c:ef:9e:dd:
         78:b7:1e:8b:39:fe:7d:8d:59:5c:89:66:1d:dc:37:a2:eb:46:
         2f:98:d1:0f:15:34:ea:e3:67:73:0d:cc:bd:2a:10:2d:e1:16:
         5c:86:5b:30:44:37:9c:39:a0:7c:eb:e7:01:fa:e7:72:96:96:
         38:31:3f:90:5d:e8:1d:de:fb:0f:ff:e7:ad:be:cc:72:14:8e:
         b7:d0:f7:76:61:f5:77:2e:a7:fd:05:b1:ff:6c:2a:2c:fb:66:
         d2:21:24:a5:75:8f:b4:6c:5e:4b:5e:99:f3:18:f2:5a:5a:b2:
         8c:21:54:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org