Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CD343034DC2C83579D5C18F4F6F2E2C8A700B126.cer
File:                     CD343034DC2C83579D5C18F4F6F2E2C8A700B126.cer (raw, json)
Hash identifier:          OgqYoC2onQe0rm00l+A6a3aEAC2ym7sCr/rOo6EI5q4=
Subject key identifier:   CD:34:30:34:DC:2C:83:57:9D:5C:18:F4:F6:F2:E2:C8:A7:00:B1:26
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0FC5FCDF0C6DEC98E5B71E15E53113EB50635ADB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/0/CD343034DC2C83579D5C18F4F6F2E2C8A700B126.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 28 Jan 2024 19:43:08 +0000
Certificate not after:    Sun 26 Jan 2025 19:48:08 +0000
Subordinate resources:    AS: 266615
                          IP: 45.7.224.0/22
                          IP: 2804:3eb0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c5:fc:df:0c:6d:ec:98:e5:b7:1e:15:e5:31:13:eb:50:63:5a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 28 19:43:08 2024 GMT
            Not After : Jan 26 19:48:08 2025 GMT
        Subject: CN=CD343034DC2C83579D5C18F4F6F2E2C8A700B126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:13:e4:08:43:84:4b:95:b4:19:31:36:3f:ef:
                    49:2e:76:f3:01:3f:e8:0f:64:2c:7f:34:70:b2:3e:
                    76:64:50:1f:50:81:83:c8:c2:b7:1b:82:d3:a0:db:
                    86:bb:6b:45:96:93:2e:fd:3d:9d:c7:bf:37:9b:62:
                    5c:40:7d:e1:ad:ff:1e:12:b0:69:91:97:a7:41:94:
                    ea:27:38:ce:18:8d:1c:22:b4:0e:ff:74:5d:7d:1e:
                    d0:75:c1:05:46:dd:60:5b:17:db:9c:bb:92:0b:f9:
                    b7:40:43:1a:68:32:1c:28:d0:06:44:d1:63:de:31:
                    61:15:df:53:17:00:f1:3c:ba:4c:b3:39:2e:52:b3:
                    e9:ab:fd:6c:78:97:09:0f:48:bf:d3:b8:de:6c:43:
                    7b:5d:5c:b7:ca:4b:c1:ca:74:34:b9:c0:2a:74:3c:
                    77:46:39:37:40:75:08:19:12:6f:57:2b:1f:ad:ac:
                    11:a3:f6:27:8c:89:ae:12:70:89:a8:e6:42:c9:1d:
                    3f:2e:66:e2:9d:45:76:96:bc:01:ff:c7:62:30:06:
                    fe:13:a2:9a:69:12:fc:4e:c5:e8:a7:ad:ad:20:30:
                    01:8d:00:fb:cf:8d:6c:0a:f7:14:d1:20:ab:50:62:
                    87:c0:a4:43:25:c8:26:9d:a2:e2:8d:1f:ec:9e:4b:
                    08:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:34:30:34:DC:2C:83:57:9D:5C:18:F4:F6:F2:E2:C8:A7:00:B1:26
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9gkDVVjMQhdjkcsyCC9UZ2YC4gMvhXkuhgoxfBfVQ4qx/0/CD343034DC2C83579D5C18F4F6F2E2C8A700B126.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.224.0/22
                IPv6:
                  2804:3eb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266615

    Signature Algorithm: sha256WithRSAEncryption
         92:9c:1f:90:6a:de:de:66:ac:bc:8d:a9:be:b5:71:5e:8a:78:
         93:74:d1:2c:95:00:56:f0:39:88:47:cc:50:42:3c:05:c6:af:
         6e:88:55:be:40:3c:91:c6:d2:e6:d7:ab:33:ab:be:b2:b8:a1:
         8a:96:78:40:2e:a0:66:c3:c2:ad:67:99:35:4e:60:6a:be:7e:
         da:fc:0f:29:87:76:b5:fc:73:cd:db:1e:eb:40:34:b9:a5:fc:
         f2:6d:25:1f:d9:af:a8:c3:04:ae:f6:dc:ef:9b:ff:3f:e3:ea:
         08:b4:97:1e:f1:21:26:3f:12:c5:32:31:81:62:cc:01:ae:8e:
         f3:fe:1d:38:24:3c:21:36:d1:8b:da:24:03:4b:a4:df:ba:04:
         1e:ca:00:eb:72:22:cd:a0:60:ff:d7:b9:41:3c:42:2b:65:68:
         97:9f:c8:a1:ca:ee:c0:b9:09:05:d8:51:73:a6:02:6f:51:5d:
         49:5f:70:97:82:71:33:fa:ac:9a:9e:4f:02:d6:05:70:f6:4a:
         94:c5:74:13:a9:a0:cb:35:44:e2:b5:3f:0b:32:52:28:7c:3f:
         5c:0b:80:88:bb:c9:fd:de:fc:a5:c3:09:14:c1:f7:f2:c9:2b:
         17:eb:9b:0c:15:13:2b:50:e6:6e:28:1e:be:96:90:a5:23:e7:
         93:04:77:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org