Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0CDDD4A57AEA2DAEE84C7E4641B7D9557C15282F.cer
File:                     0CDDD4A57AEA2DAEE84C7E4641B7D9557C15282F.cer (raw, json)
Hash identifier:          VWrmUOV65eMYfNImsRpMvRUGM54KSc16kOj8o/U81D8=
Subject key identifier:   0C:DD:D4:A5:7A:EA:2D:AE:E8:4C:7E:46:41:B7:D9:55:7C:15:28:2F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       24E11789A092B433CF81E0DC253038D7AB8F78C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/0/0CDDD4A57AEA2DAEE84C7E4641B7D9557C15282F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 17 Aug 2023 12:41:20 +0000
Certificate not after:    Thu 15 Aug 2024 12:46:20 +0000
Subordinate resources:    AS: 267170
                          IP: 45.230.52.0/22
                          IP: 2804:4934::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e1:17:89:a0:92:b4:33:cf:81:e0:dc:25:30:38:d7:ab:8f:78:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 17 12:41:20 2023 GMT
            Not After : Aug 15 12:46:20 2024 GMT
        Subject: CN=0CDDD4A57AEA2DAEE84C7E4641B7D9557C15282F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:25:45:b1:30:8b:28:23:84:fa:ad:a3:be:39:
                    10:0a:d6:43:75:5b:ad:71:1c:c5:63:30:f7:bf:ff:
                    fd:36:9f:1b:0c:71:03:4b:ff:1c:9e:21:12:85:6c:
                    83:c7:2a:24:84:75:f9:7f:e7:b6:62:0b:54:dc:26:
                    00:7b:bc:f4:5b:d6:c0:e5:0a:0b:d5:2f:9f:53:18:
                    c1:59:b8:71:30:63:c5:2a:26:40:aa:a5:c6:02:2f:
                    67:3c:1d:09:18:9f:42:be:28:ac:55:53:71:9a:23:
                    e9:1d:d5:06:39:ac:32:43:03:2a:e6:5d:31:a6:db:
                    a1:8b:03:b5:01:b6:4b:cb:a1:98:11:33:93:cf:a6:
                    56:79:3c:e5:36:bb:eb:c4:52:29:32:53:c1:db:d9:
                    36:87:eb:fb:1c:dd:ed:bf:41:48:9e:f3:54:68:2d:
                    e8:12:08:e0:ae:d9:4d:1d:cc:a0:83:28:65:bf:32:
                    5f:5b:35:8d:7b:4a:e2:a6:cf:65:3f:0d:c7:2c:f2:
                    27:fb:4b:53:c7:3c:1f:c9:d2:c5:05:fe:a2:9f:ee:
                    6c:f3:56:03:b0:18:b8:7a:38:8c:d6:95:f2:56:31:
                    35:87:45:a6:66:fc:d7:d4:a8:e6:15:e4:a2:b9:f3:
                    2f:3f:f7:c6:68:cb:9e:c9:95:1b:57:36:7f:58:77:
                    e2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:DD:D4:A5:7A:EA:2D:AE:E8:4C:7E:46:41:B7:D9:55:7C:15:28:2F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/0/0CDDD4A57AEA2DAEE84C7E4641B7D9557C15282F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.52.0/22
                IPv6:
                  2804:4934::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267170

    Signature Algorithm: sha256WithRSAEncryption
         5e:1e:eb:5e:ca:ca:fb:07:26:69:c5:17:64:ec:b2:39:5d:94:
         ca:08:8d:bd:91:56:b4:6f:a1:65:6b:5a:73:2a:00:7d:cd:ba:
         77:79:d0:4c:17:f3:3e:e9:9d:4a:af:9a:d9:dc:f3:59:73:97:
         7b:46:a0:02:45:37:55:71:e8:36:7c:f8:67:12:67:e4:46:9b:
         a1:f0:69:f4:14:de:27:d4:19:23:78:2a:45:9c:f4:a5:3d:16:
         6d:e3:62:f4:62:2c:d2:1b:bb:4a:a9:b5:48:9e:e9:69:89:02:
         05:5e:db:a3:1e:48:dd:de:3f:d6:6d:66:b1:26:9d:65:2e:b0:
         f8:49:69:93:27:4e:78:2e:a8:66:3b:42:6e:c9:2e:55:da:39:
         55:16:18:d3:5d:1e:54:24:e4:26:7a:81:fe:36:60:5a:ce:cf:
         5e:a7:7e:ea:af:21:af:e5:6d:4b:06:66:c5:54:e6:09:f8:6c:
         ad:a6:4a:74:a7:de:9b:7e:70:4e:ad:de:92:63:2f:be:27:1d:
         28:45:a2:af:cb:e1:0f:04:86:53:2f:c0:47:d5:8b:bc:1d:e8:
         82:d2:4d:c8:13:c2:c6:dc:64:25:ac:11:d3:9e:03:38:ac:44:
         3a:34:0e:85:72:5c:49:d6:a5:b4:cf:6e:22:5d:48:c7:6c:09:
         97:bf:f6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org