Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CD6D6A5A94498EE19390A0057BB718874F742770.cer
File:                     CD6D6A5A94498EE19390A0057BB718874F742770.cer (raw, json)
Hash identifier:          vfrcTFzUjfsQq0UfzakW8AfpvsxiSDOJl0mgxZbwCxQ=
Subject key identifier:   CD:6D:6A:5A:94:49:8E:E1:93:90:A0:05:7B:B7:18:87:4F:74:27:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E25429B3ADDABF840EB9452D4B54E56B3CB36A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/CD6D6A5A94498EE19390A0057BB718874F742770.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Aug 2022 14:05:13 +0000
Certificate not after:    Mon 31 Jul 2023 14:10:13 +0000
Subordinate resources:    AS: 262530
                          IP: 45.174.164.0/22
                          IP: 170.231.196.0/22
                          IP: 177.67.72.0/21
                          IP: 200.33.88.0/21
                          IP: 2804:9f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:25:42:9b:3a:dd:ab:f8:40:eb:94:52:d4:b5:4e:56:b3:cb:36:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  1 14:05:13 2022 GMT
            Not After : Jul 31 14:10:13 2023 GMT
        Subject: CN=CD6D6A5A94498EE19390A0057BB718874F742770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dd:4d:b4:8f:6c:50:cd:a9:41:89:96:99:c0:
                    7b:d4:69:55:33:2a:0e:a8:c9:55:b9:6d:3a:f8:ec:
                    65:ff:93:c3:a2:91:92:34:35:d2:ef:a6:3c:f7:e8:
                    b2:c8:59:66:d9:a5:de:73:a9:e3:30:fd:34:5e:5d:
                    61:2a:55:d1:51:c6:92:d7:e9:e8:36:1b:af:3d:8b:
                    21:a0:73:dd:b3:cd:51:38:45:f5:e1:a5:61:2d:2b:
                    3c:d5:7d:e8:70:b3:20:a3:4f:10:23:05:00:28:9a:
                    68:50:c1:a7:35:72:65:29:3f:a6:94:f6:8d:7a:9d:
                    c3:23:f6:b6:9b:c1:e7:49:32:e1:bd:43:34:cb:d9:
                    42:99:98:37:a9:46:58:96:e7:ab:de:63:cc:ba:73:
                    e3:8b:98:22:40:34:9d:f7:27:f9:01:ac:c7:61:6a:
                    b8:c1:d8:03:0c:c2:1a:cd:86:3f:29:d1:78:51:e9:
                    66:f1:08:db:32:f2:70:08:4f:24:95:1f:03:7f:47:
                    91:93:46:48:0f:3e:24:48:0f:ef:14:8e:2d:61:c4:
                    4d:cb:9a:20:0b:49:66:60:84:b3:8c:c1:eb:35:65:
                    4a:10:48:9c:34:d2:c5:c2:44:6a:ae:b5:35:31:b5:
                    f4:48:27:5e:5e:73:40:3d:53:1d:58:4d:83:45:54:
                    c6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:6D:6A:5A:94:49:8E:E1:93:90:A0:05:7B:B7:18:87:4F:74:27:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/CD6D6A5A94498EE19390A0057BB718874F742770.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.164.0/22
                  170.231.196.0/22
                  177.67.72.0/21
                  200.33.88.0/21
                IPv6:
                  2804:9f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262530

    Signature Algorithm: sha256WithRSAEncryption
         49:4f:88:01:0e:45:50:6c:87:90:51:09:99:aa:c6:a7:69:69:
         02:1b:82:4e:0f:8c:7e:84:c0:ee:0e:35:3a:63:c3:d4:e0:c8:
         f1:b6:11:9a:7d:9c:80:a6:b1:57:5e:63:54:d2:32:40:6d:5c:
         d1:61:e8:d0:44:bb:41:a1:ca:f6:3c:b2:f7:5f:97:4a:60:b3:
         68:4c:d9:ac:a0:2b:44:33:80:95:c5:f1:db:45:dd:54:8f:e8:
         b3:b5:e5:eb:7c:5e:c0:7b:73:c5:05:d9:c5:08:91:bf:5a:1a:
         31:6b:f5:c8:d9:1f:ed:94:da:2b:7b:92:c9:91:30:ea:2f:34:
         f5:10:76:4a:0c:96:12:65:97:6b:c2:02:39:1b:87:2a:06:cb:
         95:46:30:d9:04:8e:8d:c3:aa:c9:78:fb:db:90:69:c6:10:82:
         e5:a6:b3:19:01:5f:31:e7:73:35:1d:5e:22:fd:7f:0b:74:41:
         c0:db:e6:e7:b8:a0:ee:c9:dd:23:f8:cf:6f:55:68:d0:74:14:
         36:24:95:42:bd:c0:b9:82:3d:30:67:15:dc:05:e1:d5:76:9e:
         7e:40:a7:f5:ff:3c:60:44:61:f4:fd:3a:fb:39:b0:0b:3b:6a:
         d5:41:a9:01:15:e0:e3:91:5b:e5:ff:6a:a9:1f:a8:75:a7:cc:
         05:b7:d3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org