Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2DD79814894469B25F238E6DE3A66C520D4B68C1.cer
File:                     2DD79814894469B25F238E6DE3A66C520D4B68C1.cer (raw, json)
Hash identifier:          uhDD7uzFJGMr+CzVAV36mWWSw+Bu16UXGqw/rsc5Zx8=
Subject key identifier:   2D:D7:98:14:89:44:69:B2:5F:23:8E:6D:E3:A6:6C:52:0D:4B:68:C1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       72A6428F22C569029A6DC724579CA602ABF6F3CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/2DD79814894469B25F238E6DE3A66C520D4B68C1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 14:55:14 +0000
Certificate not after:    Thu 13 Feb 2025 15:00:14 +0000
Subordinate resources:    AS: 52655
                          IP: 138.94.176.0/22
                          IP: 177.66.164.0/22
                          IP: 2804:c00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a6:42:8f:22:c5:69:02:9a:6d:c7:24:57:9c:a6:02:ab:f6:f3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 14:55:14 2024 GMT
            Not After : Feb 13 15:00:14 2025 GMT
        Subject: CN=2DD79814894469B25F238E6DE3A66C520D4B68C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c5:26:fa:39:a5:c7:7e:90:2f:5a:05:6f:3a:
                    23:39:7b:f4:de:3c:93:86:3b:6d:d3:18:9b:5f:bd:
                    31:2f:41:89:49:7a:1a:0e:c3:51:8b:f6:d9:de:ab:
                    68:c6:b5:ff:c9:87:5e:ff:54:0f:00:d4:b4:ae:dc:
                    a0:d5:a8:c4:9e:77:ba:87:7b:50:9a:c5:d3:ed:0c:
                    1e:e7:44:97:1b:e8:cf:e2:3e:a5:9e:24:ce:57:b0:
                    41:97:67:2a:bb:a2:0b:ee:82:b2:9f:f1:ea:1e:d2:
                    b0:61:93:89:a2:e0:30:03:8b:4f:b6:ac:49:3c:45:
                    4a:86:fe:37:e3:b6:b5:a1:88:9f:fd:8b:ef:40:1e:
                    6d:e3:a2:50:39:9c:f0:b2:80:7a:76:a5:06:52:8d:
                    cc:ea:9f:7a:3d:47:f7:09:6f:c3:f4:87:f8:2e:ac:
                    e1:2b:86:2f:66:8a:13:95:54:47:dc:a4:af:92:8d:
                    4d:20:68:98:0c:0b:27:1d:ec:0c:b6:e0:3c:b4:83:
                    3a:3b:c4:35:73:b6:43:b0:62:81:92:8d:92:24:ee:
                    f2:3f:b7:a4:ba:5e:02:b3:e1:52:32:4b:ae:e9:a4:
                    b6:88:61:1e:a5:f4:51:e9:22:38:e5:7c:a0:22:5a:
                    81:e9:78:cc:15:7c:5d:7c:c3:31:12:02:d9:36:b8:
                    2b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2D:D7:98:14:89:44:69:B2:5F:23:8E:6D:E3:A6:6C:52:0D:4B:68:C1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/2DD79814894469B25F238E6DE3A66C520D4B68C1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.176.0/22
                  177.66.164.0/22
                IPv6:
                  2804:c00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52655

    Signature Algorithm: sha256WithRSAEncryption
         55:d5:ba:9c:92:c1:fa:8a:81:a5:09:28:8f:58:af:b4:5b:45:
         63:4d:1f:21:62:58:6e:9b:1f:40:61:1d:1d:35:96:b6:5a:95:
         a8:a1:6f:d1:2e:f7:8e:6f:10:d2:0d:66:05:bb:e4:fd:45:61:
         12:41:3b:31:d9:89:19:3c:a0:52:98:7c:bd:fa:59:cf:62:b8:
         f3:a8:d7:59:a3:e0:16:88:ef:53:54:db:10:29:5c:48:7c:fe:
         d4:a2:2c:1f:01:bb:54:4a:41:b2:95:ea:68:28:f8:76:8e:03:
         e1:b5:ad:fd:52:ac:4c:9e:19:64:79:cd:94:76:17:a5:ca:9b:
         b1:6a:bd:ee:9f:f6:d1:2a:d1:8c:8d:a4:78:05:3f:1c:36:b1:
         81:74:e9:83:62:8b:b9:33:20:9d:49:66:da:bc:4c:6a:9a:29:
         c5:45:03:a4:de:37:a9:21:e0:a9:f1:f7:a9:84:69:f2:6d:76:
         9a:c5:aa:69:32:db:90:af:c1:68:b8:fc:2e:c2:01:66:4d:08:
         ee:3b:b9:c3:4e:dd:ec:f3:1c:c8:ca:31:f0:fb:09:7f:c4:e3:
         ed:40:24:64:ad:79:d1:5c:6c:c4:08:73:7a:bf:c0:0d:0c:45:
         13:2d:dd:bf:e1:48:4a:65:9a:69:1f:31:37:75:59:26:97:f2:
         b8:b2:a3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org