Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.cer
File:                     CD6EDF715445E2743F6376C193BA5C67D9812DE8.cer (raw, json)
Hash identifier:          0TDHWfz6kqOmvWWKbKhr+/JFcZfp9qa57M6yP9rZA4w=
Subject key identifier:   CD:6E:DF:71:54:45:E2:74:3F:63:76:C1:93:BA:5C:67:D9:81:2D:E8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       01CB1594595AE5D63A44D6C5AF4CB4FCB5557676
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 21:55:09 +0000
Certificate not after:    Tue 03 Dec 2024 22:00:09 +0000
Subordinate resources:    AS: 263994
                          IP: 138.255.220.0/22
                          IP: 168.196.144.0/22
                          IP: 2804:290c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:cb:15:94:59:5a:e5:d6:3a:44:d6:c5:af:4c:b4:fc:b5:55:76:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 21:55:09 2023 GMT
            Not After : Dec  3 22:00:09 2024 GMT
        Subject: CN=CD6EDF715445E2743F6376C193BA5C67D9812DE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b9:de:14:4d:a3:02:d4:43:6e:39:a5:d5:4a:
                    ed:71:18:26:02:c5:90:10:a6:b1:af:83:5d:46:7b:
                    67:37:56:2a:84:aa:ab:e4:ab:5d:55:22:1d:54:1d:
                    db:d5:ed:4f:bb:10:a9:d7:05:86:33:e8:f7:d4:0c:
                    7e:d3:d4:39:44:c4:72:2e:ad:4b:e2:6d:d1:cd:f3:
                    d6:ca:60:30:17:70:cd:29:44:01:09:9b:23:88:7b:
                    b1:cc:89:55:82:f4:17:2f:ad:bd:fc:bb:af:1b:77:
                    07:10:89:a9:e8:7b:63:0e:4d:3a:46:85:d4:7c:c3:
                    66:2b:4b:cc:ae:3d:01:8d:d4:b5:87:75:97:bc:26:
                    ea:4b:7d:88:5e:9b:35:65:c6:79:89:c7:af:67:72:
                    25:70:00:b3:b3:e4:10:2a:f2:04:2a:8f:04:18:46:
                    b4:b7:cf:8e:2a:f6:53:cb:b2:75:f8:c5:3f:f7:58:
                    8a:32:15:13:60:f2:9b:00:30:2d:fc:16:cd:e5:92:
                    28:94:c8:1b:3e:77:f5:32:64:b0:cf:a5:48:7e:f3:
                    c7:56:30:59:a2:18:a1:82:66:08:2b:af:7d:45:29:
                    af:29:fc:93:b5:ba:85:aa:a5:a6:1e:05:95:8e:16:
                    f1:d4:a8:f2:f6:52:d6:da:6e:88:6d:b3:2d:5c:8e:
                    40:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:6E:DF:71:54:45:E2:74:3F:63:76:C1:93:BA:5C:67:D9:81:2D:E8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.220.0/22
                  168.196.144.0/22
                IPv6:
                  2804:290c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263994

    Signature Algorithm: sha256WithRSAEncryption
         92:d0:51:da:d6:e2:a9:47:83:ad:a2:3c:f9:00:c5:5a:a8:ba:
         58:9a:1b:fd:5f:ca:3a:5f:fb:96:66:7e:ae:03:f3:1d:8e:58:
         6d:c1:f7:48:17:5d:45:9a:4a:dc:bd:0c:f0:f7:4e:a0:fa:e0:
         e0:2a:a8:05:d8:80:cb:6d:8d:b5:d8:23:f5:84:f9:35:e4:6c:
         b1:af:02:09:1c:95:5d:e2:0d:2f:cf:c7:38:a4:cb:04:9d:32:
         4a:16:3c:ee:9f:59:bf:69:bf:c7:4d:25:9a:2d:2b:e8:b3:54:
         8f:35:7d:a2:e5:e8:e5:bf:1e:9d:77:3b:a6:e1:02:b3:ea:f2:
         0a:eb:da:b2:d6:94:d4:dc:c7:06:c9:5a:86:82:ff:08:33:1d:
         b3:c8:f0:d9:1e:9a:95:a6:37:b0:98:23:bd:70:1f:f1:8a:58:
         4a:f2:19:94:47:58:34:69:86:f9:43:ea:1a:b3:b3:4f:8a:97:
         8a:4a:5b:05:89:7e:7b:f0:4e:35:b1:ce:86:be:13:5a:3b:63:
         6f:ac:39:3c:91:c4:c2:2b:dc:76:ae:90:1a:5e:be:d9:91:d7:
         48:d9:ec:9b:5b:fa:7a:6e:6e:ea:00:72:c6:80:e7:cb:be:85:
         dc:fe:6f:77:2d:ea:df:d7:fd:8a:1d:88:b9:b2:e4:61:25:4f:
         4d:9a:bf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org