Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1DB397D6F32B338E21320660C9326D71559BC367.cer
File:                     1DB397D6F32B338E21320660C9326D71559BC367.cer (raw, json)
Hash identifier:          BbR7izFOJiVaIF4nuyTd92RMOzKCseuprz27T2oLG58=
Subject key identifier:   1D:B3:97:D6:F3:2B:33:8E:21:32:06:60:C9:32:6D:71:55:9B:C3:67
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A97ACBDDB8533722C22A654F0121B6A009D3D2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/1DB397D6F32B338E21320660C9326D71559BC367.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 15 Mar 2023 11:41:45 +0000
Certificate not after:    Wed 13 Mar 2024 11:46:45 +0000
Subordinate resources:    AS: 263569
                          IP: 45.5.220.0/22
                          IP: 45.172.252.0/22
                          IP: 45.225.236.0/22
                          IP: 131.161.60.0/22
                          IP: 138.118.168.0/22
                          IP: 143.202.244.0/22
                          IP: 168.232.216.0/22
                          IP: 170.80.208.0/22
                          IP: 186.249.216.0/22
                          IP: 2804:f30::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:97:ac:bd:db:85:33:72:2c:22:a6:54:f0:12:1b:6a:00:9d:3d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 15 11:41:45 2023 GMT
            Not After : Mar 13 11:46:45 2024 GMT
        Subject: CN=1DB397D6F32B338E21320660C9326D71559BC367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:a7:54:fe:74:45:19:2b:2a:dc:42:13:dd:
                    00:13:fc:ac:e5:a8:c3:a7:96:df:3d:57:4f:2f:dd:
                    1d:58:b0:87:75:79:4c:d7:d8:61:2d:6d:29:4f:0b:
                    29:4e:0f:ea:2c:66:1a:fc:c3:0f:e9:cb:56:d0:f1:
                    8d:1f:98:a9:c3:b3:ea:f6:ed:fd:d2:dc:b1:29:3d:
                    7a:35:30:43:d7:32:14:12:df:9b:fb:b6:84:3f:d3:
                    71:b2:26:ae:d8:5a:24:1b:9f:a9:d6:bc:2e:34:fd:
                    9c:b9:4e:71:ec:82:b4:65:e3:61:47:52:99:de:7e:
                    72:09:4c:17:3d:1d:19:12:dc:7d:91:ba:1c:54:11:
                    9d:96:4e:45:59:08:fd:6a:7a:87:1e:c5:d9:a1:79:
                    9c:23:60:14:1a:b0:4f:4e:a8:64:05:a3:0d:c4:96:
                    6d:72:57:ee:db:7b:4b:75:db:8b:86:f6:02:1e:74:
                    66:61:a4:fd:fe:a1:76:0d:6d:63:a5:6f:70:e9:95:
                    f8:3a:63:1a:65:60:df:d7:10:57:10:b5:ce:b8:97:
                    31:b4:93:bd:7b:1d:6b:73:41:65:82:76:5e:f8:4e:
                    b0:23:21:23:36:c5:3f:e1:3d:a7:76:6a:bd:ee:dc:
                    8e:cd:55:df:f3:53:07:6d:78:3a:9c:2e:65:fd:3e:
                    69:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:B3:97:D6:F3:2B:33:8E:21:32:06:60:C9:32:6D:71:55:9B:C3:67
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/1DB397D6F32B338E21320660C9326D71559BC367.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.220.0/22
                  45.172.252.0/22
                  45.225.236.0/22
                  131.161.60.0/22
                  138.118.168.0/22
                  143.202.244.0/22
                  168.232.216.0/22
                  170.80.208.0/22
                  186.249.216.0/22
                IPv6:
                  2804:f30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263569

    Signature Algorithm: sha256WithRSAEncryption
         0c:7e:14:fb:e6:a5:bf:f8:ef:f2:79:5c:8d:6c:61:86:80:66:
         4d:e3:05:ff:f7:ec:8c:86:46:af:70:06:d2:83:48:f4:6b:d1:
         8f:17:fc:0b:5e:80:0f:f7:1e:e9:b0:8d:52:37:99:47:7f:40:
         fb:86:a4:c3:cf:fb:6f:a8:05:62:02:3b:84:fb:40:3a:88:9f:
         78:88:68:e5:7a:a4:0b:11:ce:25:8c:69:93:c1:0c:fb:bc:99:
         18:ca:09:9a:55:32:2c:5f:21:e8:f3:e4:c1:b1:75:15:39:4b:
         51:2a:70:29:69:37:5f:fd:66:2c:89:8c:49:8e:c4:93:62:50:
         2a:19:5d:8c:28:25:7c:6b:6f:6e:27:b8:a2:7d:56:ea:4c:19:
         4b:5a:d7:48:ac:c7:75:1a:87:fb:b1:30:c2:06:dd:34:16:f7:
         cf:10:81:1f:46:37:d1:65:11:43:7c:ee:80:9b:22:12:bb:ae:
         cf:1d:35:f0:1d:f7:69:e4:9a:a0:7f:87:5e:48:b1:ac:f1:75:
         65:12:84:9b:a8:6a:22:d4:e8:c6:32:4a:99:22:81:66:f8:74:
         3e:9a:ba:e5:c3:d0:24:02:e7:6f:a1:34:a5:ae:a6:ac:52:7b:
         ce:1c:63:a1:ec:fb:a8:98:d1:37:e0:1b:cd:d0:15:f5:81:a9:
         b0:70:48:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org