Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8DDE37E39DCD1FDDB748C0965051518D6FDE2945.cer
File:                     8DDE37E39DCD1FDDB748C0965051518D6FDE2945.cer (raw, json)
Hash identifier:          9LliggqlVAJqSkm7cbakUfB/Yz9GAiDgmf5gCfXgD54=
Subject key identifier:   8D:DE:37:E3:9D:CD:1F:DD:B7:48:C0:96:50:51:51:8D:6F:DE:29:45
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       20AABDBBDC61059ECCE8CBEFA0875E649A9CC8AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/8DDE37E39DCD1FDDB748C0965051518D6FDE2945.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Jan 2022 19:28:28 +0000
Certificate not after:    Mon 09 Jan 2023 19:33:28 +0000
Subordinate resources:    AS: 264595
                          IP: 138.59.44.0/22
                          IP: 2804:2228::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:aa:bd:bb:dc:61:05:9e:cc:e8:cb:ef:a0:87:5e:64:9a:9c:c8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 10 19:28:28 2022 GMT
            Not After : Jan  9 19:33:28 2023 GMT
        Subject: CN=8DDE37E39DCD1FDDB748C0965051518D6FDE2945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:e5:48:82:67:42:c9:94:7d:04:b3:92:80:
                    12:81:e5:ea:bd:d8:88:ed:b9:b2:e2:b8:3d:5a:26:
                    6c:cc:42:e4:a3:b8:58:ef:0b:b8:b4:f8:45:be:03:
                    81:dd:b0:04:df:81:5a:de:3d:ac:8d:50:bc:1e:80:
                    09:bf:0a:11:7c:67:df:1e:c3:1c:86:e6:e9:dd:61:
                    54:fc:dd:73:8e:46:64:84:e2:c7:80:27:6d:b6:89:
                    72:d1:01:fb:89:21:04:aa:23:9a:bc:2d:26:dd:86:
                    71:61:2f:7e:fd:52:ef:8a:fa:a6:83:0b:ab:a3:df:
                    84:66:68:21:87:b4:a6:29:ac:6b:76:19:ea:a8:c9:
                    22:19:fb:1c:d4:ed:a5:14:3d:df:22:8f:d9:ee:e4:
                    40:69:90:a0:2a:c0:74:7b:29:f1:73:bd:dd:5d:24:
                    02:03:e2:2b:28:fb:c2:66:c4:0b:27:c6:ec:0e:ad:
                    61:cf:a8:c6:d1:42:fd:81:3f:59:e5:d7:d0:49:8e:
                    80:d4:c8:c9:72:ea:c7:e5:aa:07:2b:b7:f6:c4:5d:
                    6d:4b:d0:a2:71:1b:18:fe:ef:db:59:ad:c5:b0:98:
                    4d:8e:ac:5d:34:bc:4f:08:4c:27:e6:15:4a:65:62:
                    60:51:00:6e:8f:4e:ca:44:c7:f9:92:dc:e0:f0:98:
                    05:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:DE:37:E3:9D:CD:1F:DD:B7:48:C0:96:50:51:51:8D:6F:DE:29:45
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/8DDE37E39DCD1FDDB748C0965051518D6FDE2945.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.44.0/22
                IPv6:
                  2804:2228::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264595

    Signature Algorithm: sha256WithRSAEncryption
         94:61:76:7b:9f:96:dd:93:f7:c5:d6:9a:3a:58:3f:59:3c:a1:
         38:84:e6:eb:53:80:49:7f:82:bf:a8:df:a9:e7:b3:39:b6:87:
         c1:5c:aa:c9:d7:be:88:b6:41:e7:80:fe:27:6d:c2:44:b9:9a:
         0b:9c:cd:4d:db:ea:98:3d:08:f6:9b:96:f7:e9:dc:f2:fc:6b:
         49:10:4c:1d:02:81:72:08:3c:0d:77:7e:27:91:88:e7:d0:14:
         12:30:6c:1b:fa:ae:cc:38:17:d3:31:b0:67:0f:21:a5:87:22:
         fa:ac:92:99:dc:5b:b8:2b:8f:9e:d2:6e:07:76:eb:e9:7b:ca:
         2f:8b:42:b4:2b:61:bb:78:6c:48:12:5a:47:b1:56:e7:c7:93:
         66:42:53:88:d5:6b:56:55:f6:92:d5:68:74:cb:fe:bd:27:1c:
         6c:21:4c:8a:b6:33:85:bf:a2:65:d8:9a:94:5f:2a:4b:d1:71:
         6f:61:89:36:64:36:e4:78:9e:21:25:db:48:45:68:2f:60:46:
         c0:de:68:0f:df:7d:5f:db:fc:a7:73:06:71:b2:8f:30:e9:ba:
         ae:77:5a:09:30:8f:2b:d3:0d:ca:9e:87:fc:b0:c1:10:4a:af:
         81:35:11:3e:bc:3b:d7:34:74:2d:05:75:e0:dd:f3:d0:70:27:
         5c:c0:5a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org