Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0D9B089D54449B828A03CD60C6B4CD46823B573C.cer
File:                     0D9B089D54449B828A03CD60C6B4CD46823B573C.cer (raw, json)
Hash identifier:          DUQ6e4wz1h3C/TAvNP3SFjOeZ4Etk46VT4EMKrtRaCM=
Subject key identifier:   0D:9B:08:9D:54:44:9B:82:8A:03:CD:60:C6:B4:CD:46:82:3B:57:3C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6CB2F8CEED807283B3F77C07C606FF235E64F438
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FhRziqXYCwmz7n1dcbrpGU7VwNeR9VUDroqDsMBcYkzT/0/0D9B089D54449B828A03CD60C6B4CD46823B573C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FhRziqXYCwmz7n1dcbrpGU7VwNeR9VUDroqDsMBcYkzT/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 30 Apr 2022 16:44:51 +0000
Certificate not after:    Sat 29 Apr 2023 16:49:51 +0000
Subordinate resources:    AS: 270505
                          IP: 177.37.44.0/22
                          IP: 2804:6cfc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b2:f8:ce:ed:80:72:83:b3:f7:7c:07:c6:06:ff:23:5e:64:f4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 30 16:44:51 2022 GMT
            Not After : Apr 29 16:49:51 2023 GMT
        Subject: CN=0D9B089D54449B828A03CD60C6B4CD46823B573C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d8:30:45:e6:28:cc:8b:c0:4c:ff:1e:d4:f3:
                    79:57:d1:81:0d:ae:9a:e4:41:a5:d4:c2:8b:d3:87:
                    5d:92:c5:7d:12:dc:a3:9c:46:0c:68:04:30:63:2e:
                    f4:23:de:c0:eb:f7:56:ae:8d:09:7e:96:9f:99:b3:
                    b2:dc:df:a2:7d:57:51:5c:2f:67:19:10:c4:ea:bc:
                    8f:5e:c9:ac:49:61:42:01:ac:f6:33:86:7b:93:2f:
                    cd:d5:83:2e:bc:62:06:b5:c1:55:eb:5d:37:3e:a2:
                    90:05:f1:c1:d5:79:23:48:30:c3:ad:28:50:d8:8e:
                    72:d0:55:8c:3b:e0:d8:c7:33:9e:7c:d3:13:7d:0e:
                    72:a3:bb:c9:26:b8:a9:de:7c:c3:7c:32:83:92:1a:
                    78:ec:0e:23:d8:ec:31:49:5d:e8:bd:3c:9a:b9:26:
                    43:7a:d7:e0:86:e1:9d:b4:6f:d5:eb:f2:94:0c:9f:
                    8b:0e:7b:97:87:33:9a:c1:ae:96:cd:10:18:87:79:
                    61:4f:de:11:bb:14:7e:96:87:10:07:2d:87:8d:65:
                    58:c1:39:df:11:c1:c3:27:bf:4b:ed:0d:66:a5:d6:
                    76:47:c6:76:41:31:1d:53:8e:2b:4b:ce:00:08:cd:
                    88:a8:97:6d:87:95:de:3d:c1:6d:c8:86:ec:5d:e7:
                    41:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:9B:08:9D:54:44:9B:82:8A:03:CD:60:C6:B4:CD:46:82:3B:57:3C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FhRziqXYCwmz7n1dcbrpGU7VwNeR9VUDroqDsMBcYkzT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FhRziqXYCwmz7n1dcbrpGU7VwNeR9VUDroqDsMBcYkzT/0/0D9B089D54449B828A03CD60C6B4CD46823B573C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.44.0/22
                IPv6:
                  2804:6cfc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270505

    Signature Algorithm: sha256WithRSAEncryption
         79:c5:3f:9e:1c:5b:da:8c:79:28:e1:ef:fd:cb:9b:b9:9c:b2:
         2d:72:bb:33:27:de:22:73:34:02:8a:9e:46:62:3d:74:0d:e8:
         72:d0:83:ac:4a:11:a8:8f:0a:35:f3:f4:b8:0c:ea:07:65:da:
         3b:be:b6:fa:ac:dd:a0:49:1f:f0:31:43:5a:83:12:dd:27:d5:
         13:19:b8:c2:30:3e:a0:9d:55:38:64:b7:7e:c1:cc:99:d8:31:
         6a:da:96:37:96:4b:79:20:9c:3a:a4:2b:38:32:9f:06:1f:67:
         e5:93:f7:91:ed:02:6c:31:79:f2:26:c4:66:68:05:69:98:3b:
         be:65:f2:45:5b:29:cb:09:4f:ea:a6:18:b3:c7:e4:ea:7d:dc:
         1c:74:03:25:5c:b5:5a:9a:ad:d9:5d:3a:61:c2:f8:a6:f7:ba:
         53:34:9f:59:88:42:8f:1f:3f:d8:27:8f:b8:eb:6d:e0:19:21:
         10:28:10:63:01:eb:9c:60:c6:21:24:ce:96:6e:55:06:42:b3:
         3c:12:78:b3:5a:6e:5c:04:19:db:88:70:d5:8c:4d:0a:82:b4:
         ed:2a:9b:13:af:21:dd:d2:e5:01:9e:74:dd:17:68:e3:cd:03:
         a8:58:e8:24:90:67:25:9f:77:7f:22:4d:b6:cf:24:9d:0e:50:
         87:85:a7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org