Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7CDD4E6BD16523FDAB1EB724CDC2EACCA8759C1D.cer
File:                     7CDD4E6BD16523FDAB1EB724CDC2EACCA8759C1D.cer (raw, json)
Hash identifier:          Otf9gHxMuYiKZHZpzpmTX7Crr2dEqYi2isAmUAKlDQ8=
Subject key identifier:   7C:DD:4E:6B:D1:65:23:FD:AB:1E:B7:24:CD:C2:EA:CC:A8:75:9C:1D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       118EBECC7BB68C647B22276E5E4C01C642A5969D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/7CDD4E6BD16523FDAB1EB724CDC2EACCA8759C1D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Feb 2024 12:23:27 +0000
Certificate not after:    Thu 06 Feb 2025 12:28:27 +0000
Subordinate resources:    AS: 270838
                          IP: 189.39.180.0/22
                          IP: 2804:7230::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8e:be:cc:7b:b6:8c:64:7b:22:27:6e:5e:4c:01:c6:42:a5:96:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  8 12:23:27 2024 GMT
            Not After : Feb  6 12:28:27 2025 GMT
        Subject: CN=7CDD4E6BD16523FDAB1EB724CDC2EACCA8759C1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:57:eb:d1:6a:2d:c1:ae:6c:fa:bf:ae:84:
                    5d:f1:26:c0:13:96:69:e3:96:d6:2b:57:c1:6b:3c:
                    4b:2c:7e:65:84:86:d0:ef:b9:49:c0:8f:45:9f:f5:
                    ff:04:60:90:3f:5d:40:d0:7d:ab:7a:15:6b:f7:8e:
                    06:58:17:7a:00:eb:12:8a:cd:cd:1d:7c:f3:2f:1a:
                    1c:61:7b:46:7a:4b:21:6a:c2:39:75:c1:78:e9:a2:
                    cd:1a:ab:ff:eb:29:df:22:f3:52:8e:92:e6:e6:25:
                    a0:13:40:1a:e8:45:d1:33:55:1b:9b:65:4b:b8:90:
                    4b:4c:d3:cb:2e:ad:35:b4:70:54:cb:79:2d:e6:1d:
                    89:5e:f3:79:4b:c7:d7:bf:eb:a9:c7:d6:3c:9a:87:
                    4c:26:73:c9:cd:1d:53:ac:7f:5d:70:c7:56:a9:dc:
                    9b:f9:0f:cd:a4:6a:ad:b5:81:82:02:d5:7c:01:23:
                    45:d5:39:1d:3a:80:7e:a9:dd:9c:ce:1d:83:9a:61:
                    20:0a:fe:be:07:75:e3:bb:1a:e4:0f:d0:f5:10:ec:
                    55:a3:76:dd:0a:96:ae:77:84:8b:03:cc:73:f1:76:
                    d0:9e:aa:52:34:5c:6b:a2:11:30:5e:bd:d5:75:3e:
                    d9:8b:a7:9c:6b:ec:1c:79:cb:9d:21:69:e1:5f:58:
                    67:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:DD:4E:6B:D1:65:23:FD:AB:1E:B7:24:CD:C2:EA:CC:A8:75:9C:1D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/7CDD4E6BD16523FDAB1EB724CDC2EACCA8759C1D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.180.0/22
                IPv6:
                  2804:7230::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270838

    Signature Algorithm: sha256WithRSAEncryption
         93:a6:eb:35:cd:d9:5c:0a:09:78:93:da:e0:41:3a:2b:13:e4:
         86:5d:50:c2:1b:d4:df:e9:8b:a2:81:e3:42:c7:6c:a2:3b:44:
         44:ed:1e:c9:0d:9b:9b:bf:65:80:fd:e0:a0:7f:b1:62:99:4a:
         a6:40:c7:58:2e:47:0a:9c:73:20:03:c3:3e:b5:79:67:ab:ac:
         37:eb:01:ca:37:ef:85:fd:c2:57:35:c5:d2:72:91:b7:97:f8:
         c1:b6:a9:5f:98:e0:5c:04:14:08:c4:f0:66:d9:41:3d:95:9e:
         de:1a:72:6b:23:e1:14:a2:f3:5e:9d:55:98:3d:2e:92:c6:ec:
         b2:0a:16:8f:45:96:a6:a0:ef:9e:e5:fe:3d:f0:34:fa:3c:da:
         b7:57:b1:99:20:08:26:00:1a:db:fc:20:04:bc:ba:82:65:d1:
         e0:61:62:89:3f:46:f6:a7:7a:91:7d:f5:a4:e9:76:b5:6b:ae:
         01:d1:e2:ee:e1:2f:6b:f5:12:4b:cc:ec:d3:8a:cb:31:4a:3f:
         9d:28:e5:dc:ec:77:ea:1b:23:34:e4:73:1b:dc:c0:c8:e9:2f:
         e0:2a:15:27:8d:81:57:d1:42:f0:ed:44:ae:ee:9d:84:7d:8c:
         10:a3:7c:a3:7c:c3:16:61:e4:d9:3b:41:db:91:4e:0c:7a:2a:
         e6:f4:82:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org