Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0D9DF703105BE5C115891358CC9BA0A6E1039C72.cer
File:                     0D9DF703105BE5C115891358CC9BA0A6E1039C72.cer (raw, json)
Hash identifier:          yM6y9T36opBlVmrKhIZ4htQBce62ITDJ74bKzhUx0pg=
Subject key identifier:   0D:9D:F7:03:10:5B:E5:C1:15:89:13:58:CC:9B:A0:A6:E1:03:9C:72
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       51729E36E70085AB291DBF2E4894A23966F2EC93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2VZJTYP65YizWaGfsCaVHHuqCWg1SGxpfQtGref9PtmG/0/0D9DF703105BE5C115891358CC9BA0A6E1039C72.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2VZJTYP65YizWaGfsCaVHHuqCWg1SGxpfQtGref9PtmG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 May 2023 14:55:09 +0000
Certificate not after:    Wed 22 May 2024 15:00:09 +0000
Subordinate resources:    AS: 268268
                          IP: 45.237.96.0/22
                          IP: 2804:4e8c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:72:9e:36:e7:00:85:ab:29:1d:bf:2e:48:94:a2:39:66:f2:ec:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 24 14:55:09 2023 GMT
            Not After : May 22 15:00:09 2024 GMT
        Subject: CN=0D9DF703105BE5C115891358CC9BA0A6E1039C72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4b:17:28:0f:c9:e0:d2:77:28:19:36:3a:03:
                    2b:ba:f5:3d:2c:a0:70:21:95:17:22:5f:4f:c9:8e:
                    53:11:1c:17:9f:29:1b:da:bd:a0:51:e2:8a:48:53:
                    ad:a8:09:a3:70:52:de:b6:39:75:65:6f:f5:6b:b0:
                    fd:40:24:2c:65:74:10:0b:ca:30:92:e8:7c:33:e2:
                    7b:85:df:9c:70:9e:68:34:94:76:6a:85:a4:1a:c1:
                    79:b6:48:a3:c4:7e:cb:49:47:20:87:54:60:74:5d:
                    6d:1f:bb:ac:f8:0d:cc:c0:c0:fb:3b:3e:37:96:0a:
                    6c:41:97:f5:72:14:7b:99:f4:8d:fc:23:85:78:ed:
                    e4:7e:22:93:e4:f3:1d:b4:9f:68:08:40:11:00:b5:
                    72:c8:31:37:3e:a7:cc:5d:fb:b5:94:fa:c8:84:30:
                    ab:a0:54:66:59:5d:12:e0:f8:b2:4b:db:ee:3b:9c:
                    8b:d5:96:1d:8f:2c:35:0e:6b:42:39:41:46:0d:5b:
                    c3:d6:68:65:65:60:dc:3a:a0:d1:60:ed:47:df:be:
                    33:8b:f7:00:6c:17:b6:f6:61:37:56:4d:d8:73:bf:
                    44:31:9c:e1:63:86:07:85:4c:78:07:da:b9:61:f8:
                    bf:8c:bd:05:8d:93:98:8f:5e:8f:8d:4d:61:10:78:
                    c4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:9D:F7:03:10:5B:E5:C1:15:89:13:58:CC:9B:A0:A6:E1:03:9C:72
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2VZJTYP65YizWaGfsCaVHHuqCWg1SGxpfQtGref9PtmG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2VZJTYP65YizWaGfsCaVHHuqCWg1SGxpfQtGref9PtmG/0/0D9DF703105BE5C115891358CC9BA0A6E1039C72.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.96.0/22
                IPv6:
                  2804:4e8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268268

    Signature Algorithm: sha256WithRSAEncryption
         32:e2:95:49:df:b2:a6:3d:76:65:6c:43:af:c1:5d:3a:67:99:
         ef:da:16:14:6a:cc:02:51:6d:12:52:05:43:01:ab:a8:a7:2d:
         4a:b7:d3:a8:ad:d0:9c:0e:0d:ac:19:bc:bb:b0:69:7c:92:0f:
         d3:5d:9f:40:c1:ef:e4:54:a5:d9:1d:f8:f0:a0:b2:af:e4:8b:
         e8:5e:db:6f:c8:38:72:09:1a:70:ee:67:cc:02:a9:1f:46:bd:
         25:e2:b8:b6:ac:23:bb:48:9b:16:94:15:fd:c4:c7:c4:4b:f4:
         f4:b4:71:b8:49:32:e3:53:29:60:01:27:a6:a1:e6:5c:31:c1:
         b7:9a:b1:71:35:a5:01:c4:bc:d7:f8:bd:46:9c:3a:a0:d7:4b:
         1b:18:94:8e:3c:6f:79:88:15:33:3c:43:e4:0d:ee:39:83:bb:
         df:cf:ac:23:bb:73:f4:9e:54:d4:6a:66:91:2f:90:94:06:3c:
         ff:d6:f9:94:1c:ad:21:e7:9c:74:55:06:14:01:0c:67:48:a3:
         44:65:7b:2b:b0:a4:1f:d6:2c:7d:ef:90:41:01:97:9c:e5:07:
         94:7d:7d:84:80:4c:88:38:5f:2d:fb:bb:7e:13:7a:bf:59:57:
         1c:f9:47:98:a2:4d:77:c3:ab:66:aa:d4:95:40:33:2d:d2:1a:
         c0:04:eb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org