Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0D1BD2CBDC3E26A73F3DAFC013456613BEDB418A.cer
File:                     0D1BD2CBDC3E26A73F3DAFC013456613BEDB418A.cer (raw, json)
Hash identifier:          FAsrgy4kjAYT2xdQQC8JVMgGhmEJN3HSZhOBbk6i4xE=
Subject key identifier:   0D:1B:D2:CB:DC:3E:26:A7:3F:3D:AF:C0:13:45:66:13:BE:DB:41:8A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3F37079D7F00B435BE09072F9660E629DF30773D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4T2yCi37MTwUGLh1g6waAJw7E8NVHwB5aLME2BUJCHzz/0/0D1BD2CBDC3E26A73F3DAFC013456613BEDB418A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4T2yCi37MTwUGLh1g6waAJw7E8NVHwB5aLME2BUJCHzz/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Aug 2022 12:47:14 +0000
Certificate not after:    Wed 09 Aug 2023 12:52:14 +0000
Subordinate resources:    AS: 266922
                          IP: 45.224.136.0/22
                          IP: 2804:4560::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:37:07:9d:7f:00:b4:35:be:09:07:2f:96:60:e6:29:df:30:77:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 10 12:47:14 2022 GMT
            Not After : Aug  9 12:52:14 2023 GMT
        Subject: CN=0D1BD2CBDC3E26A73F3DAFC013456613BEDB418A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:84:a2:98:02:f3:22:fb:12:0c:4c:e1:14:33:
                    a0:3e:97:49:36:8d:57:f5:c5:87:9c:d5:1f:3b:ee:
                    51:9b:09:69:b9:a1:f3:c3:ec:c3:b4:7d:4b:8a:92:
                    60:8c:66:ff:97:fa:e6:30:f9:e8:1e:35:22:72:66:
                    84:25:39:13:3d:c6:56:a5:83:22:5c:a6:34:41:15:
                    d5:cd:fb:aa:89:47:9e:7c:b8:66:c4:ce:0d:5a:7f:
                    a2:bf:98:f7:8a:02:08:c7:c9:69:ce:bd:41:e0:7b:
                    3e:de:41:a0:ae:7b:d0:ec:ab:56:46:c8:ee:72:1f:
                    72:27:07:9e:0b:09:ce:83:4f:fc:90:46:09:c3:74:
                    c8:42:6f:d1:79:46:86:f0:99:a9:f4:57:79:d6:d5:
                    38:96:43:54:a4:14:38:cd:01:45:a3:38:fc:9d:bb:
                    e1:05:4e:e3:16:2e:bc:2d:59:59:6d:0e:93:ed:fb:
                    1f:89:32:6d:f4:ee:c8:81:ef:c1:c7:4a:e2:9c:05:
                    99:cf:c5:9d:3e:00:5b:e7:e0:8b:7d:4a:b7:55:77:
                    47:8d:86:2f:ff:5c:ae:33:7d:71:63:b5:02:ee:07:
                    3d:58:9f:e1:df:84:aa:e4:06:6d:90:3f:78:b7:e3:
                    a4:67:57:37:04:1c:ad:5f:47:b5:e0:0b:30:e6:9d:
                    ef:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:1B:D2:CB:DC:3E:26:A7:3F:3D:AF:C0:13:45:66:13:BE:DB:41:8A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4T2yCi37MTwUGLh1g6waAJw7E8NVHwB5aLME2BUJCHzz/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4T2yCi37MTwUGLh1g6waAJw7E8NVHwB5aLME2BUJCHzz/0/0D1BD2CBDC3E26A73F3DAFC013456613BEDB418A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.136.0/22
                IPv6:
                  2804:4560::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266922

    Signature Algorithm: sha256WithRSAEncryption
         30:f1:8e:70:8e:2e:89:f7:98:0b:32:00:41:fb:3c:f2:47:6d:
         b5:b5:87:a3:50:e7:d1:1e:fa:29:37:8d:b2:cd:e6:29:e0:6d:
         b4:54:b9:80:c3:12:70:8a:3a:4e:65:bc:cc:05:fa:93:e8:c2:
         4e:83:fd:af:6b:d6:c3:88:7b:ad:6a:c4:54:14:60:e4:05:78:
         31:15:39:68:d7:81:8d:94:8a:50:55:ca:45:93:b6:24:c8:77:
         7e:59:ee:67:94:9f:dd:65:9f:91:7b:b0:b6:5e:aa:b9:99:a2:
         4f:c0:a7:d7:8d:2c:2e:28:e7:d3:79:54:96:15:bd:d7:4f:b5:
         6e:ff:a1:e8:a4:dc:95:fd:2d:7a:13:4d:23:3e:7a:1b:91:e8:
         25:4d:b1:aa:f1:cf:0e:3d:73:e6:30:c9:60:14:21:e8:35:4a:
         a5:2c:ce:6a:4e:b7:93:b3:c4:9c:f6:2b:fb:74:0f:a2:7d:55:
         8e:e1:85:31:c9:ac:20:3a:95:8c:c2:ef:34:0a:23:f9:a2:ab:
         b7:70:6f:a9:6b:07:64:d5:30:ed:88:43:15:32:08:a4:a9:6d:
         40:39:64:b7:a2:01:41:77:fb:5e:2a:46:9c:d1:26:ef:1f:c2:
         34:c7:02:e8:ce:4e:51:78:ca:48:35:1a:48:fe:02:e7:d3:84:
         c6:cc:e3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org