Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0CDD5188965FFFE43C008A41D0033C4E7DB447F1.cer
File:                     0CDD5188965FFFE43C008A41D0033C4E7DB447F1.cer (raw, json)
Hash identifier:          ijzwi41q+lQera0jsPR2SHe0MVulrQhEy3+DOhhCoSY=
Subject key identifier:   0C:DD:51:88:96:5F:FF:E4:3C:00:8A:41:D0:03:3C:4E:7D:B4:47:F1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       502FEB1C131AE04C9E636289C70248DB0B2362F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0/0CDD5188965FFFE43C008A41D0033C4E7DB447F1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Mar 2023 01:32:04 +0000
Certificate not after:    Fri 22 Mar 2024 01:37:04 +0000
Subordinate resources:    AS: 263271
                          IP: 179.108.184.0/21
                          IP: 2804:1628::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2f:eb:1c:13:1a:e0:4c:9e:63:62:89:c7:02:48:db:0b:23:62:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 24 01:32:04 2023 GMT
            Not After : Mar 22 01:37:04 2024 GMT
        Subject: CN=0CDD5188965FFFE43C008A41D0033C4E7DB447F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1f:e7:87:6a:b7:77:a7:03:4f:86:75:3e:29:
                    41:cd:28:21:c5:99:ca:19:08:31:54:ea:6e:93:35:
                    b2:e5:2e:05:91:ff:bd:c1:c9:0e:fa:76:81:cc:ce:
                    24:0d:c1:a9:8b:d2:a3:73:64:0a:b1:9a:06:ee:3e:
                    d3:5a:49:ab:ae:d8:50:b3:3a:c3:5b:1d:d6:ee:09:
                    6b:0a:83:15:f8:28:2a:88:d3:26:ac:70:37:39:c1:
                    16:52:4f:b9:70:10:8f:c0:79:b9:e1:c9:fd:27:a9:
                    f4:31:23:c1:ee:e5:ad:a1:c3:4d:6f:70:5f:27:f5:
                    02:f5:ce:d2:ac:e9:00:fc:d1:a3:99:9b:c3:6f:d1:
                    b5:ca:6f:82:05:e4:2b:5c:a4:25:fd:47:cf:98:8e:
                    6c:ff:73:6c:c1:87:31:7b:dc:b8:70:dc:7e:dd:ab:
                    db:65:b9:9d:e0:45:06:23:5e:c8:ed:a9:89:38:c8:
                    28:2b:fb:0c:c3:60:b4:c4:26:bb:45:f4:a3:00:50:
                    0d:36:b8:fe:63:88:c3:83:46:3b:23:8b:01:61:9b:
                    1b:1e:f3:31:bc:72:9c:68:61:c8:42:39:62:12:ff:
                    74:bc:f9:ea:3e:86:60:c3:25:8e:d4:e8:cc:2e:0c:
                    15:25:c9:35:38:04:69:0b:d3:79:d6:82:5f:9c:7d:
                    5c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:DD:51:88:96:5F:FF:E4:3C:00:8A:41:D0:03:3C:4E:7D:B4:47:F1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CU9wAiVouiMVuWoaDp5fEvdLPTrKtVbNwAg2rKpwaQAA/0/0CDD5188965FFFE43C008A41D0033C4E7DB447F1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.184.0/21
                IPv6:
                  2804:1628::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263271

    Signature Algorithm: sha256WithRSAEncryption
         43:0e:ef:75:31:7a:72:68:9b:80:2e:1d:c4:61:26:51:6c:bb:
         eb:7e:66:b5:be:28:e6:7e:8f:ff:13:fd:3d:ef:91:b8:b5:22:
         bb:80:5f:34:d4:78:97:8a:05:7f:ff:ff:05:10:19:16:97:81:
         29:63:1f:f2:9b:e3:3e:24:66:f1:c7:af:63:06:53:42:29:15:
         c1:69:83:1f:8f:1f:77:ed:40:54:da:58:3c:78:d7:c3:5d:66:
         fd:e5:d1:8a:98:b4:02:d5:62:3b:ce:6c:ff:b8:4b:bc:fc:81:
         06:ed:3b:2e:ea:c8:fe:ed:9e:62:fb:ac:e9:f9:5c:1c:7c:6e:
         e3:00:1f:f8:f0:30:ef:03:23:eb:d5:85:1f:21:eb:4a:b6:09:
         36:70:22:4d:07:ae:23:cc:03:44:e5:b1:65:09:16:56:14:7c:
         fa:86:bc:5a:bb:de:a9:9f:1a:5d:28:ed:db:c1:3a:af:9c:6e:
         95:b7:65:3b:f4:97:cc:d7:c5:fd:dd:d4:00:d3:f9:ea:1c:5d:
         f2:83:10:d2:46:93:ca:e0:0f:07:58:49:cc:74:1b:c2:11:e5:
         11:ab:09:35:a1:ca:f1:e5:36:df:28:ac:91:3f:26:bd:a7:8f:
         ba:5f:bf:5d:10:5b:84:1c:c6:58:71:ad:ab:4c:7f:f7:2b:35:
         f6:48:ea:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org