Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CDBB2AB6D632E955A756955729107E2352C882ED.cer
File:                     CDBB2AB6D632E955A756955729107E2352C882ED.cer (raw, json)
Hash identifier:          k9o2myhDnazsKFU8sJ0HpiQgkX1mOdoJZ87Iz2lt1ME=
Subject key identifier:   CD:BB:2A:B6:D6:32:E9:55:A7:56:95:57:29:10:7E:23:52:C8:82:ED
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2BA1B679875B34887EF03897E84E2E86E955D318
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/0/CDBB2AB6D632E955A756955729107E2352C882ED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 17:55:13 +0000
Certificate not after:    Thu 03 Apr 2025 18:00:13 +0000
Subordinate resources:    AS: 262409
                          IP: 177.38.192.0/21
                          IP: 2804:400::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a1:b6:79:87:5b:34:88:7e:f0:38:97:e8:4e:2e:86:e9:55:d3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  4 17:55:13 2024 GMT
            Not After : Apr  3 18:00:13 2025 GMT
        Subject: CN=CDBB2AB6D632E955A756955729107E2352C882ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:11:cd:c4:fa:f9:09:af:c1:63:1f:cb:69:e6:
                    51:49:f3:bd:26:f2:a4:f4:bc:18:20:fc:67:24:de:
                    b9:98:18:d1:34:57:d9:5b:e4:35:27:71:fd:76:9a:
                    37:2e:4f:da:5e:5b:81:6f:ed:26:04:17:1c:13:c7:
                    63:60:0a:4c:f6:5f:05:fa:40:36:36:55:4a:16:4d:
                    49:e2:d3:1d:e9:92:14:30:a7:14:5b:a5:cc:d3:4c:
                    d7:81:68:a4:91:64:da:dd:53:0a:d5:11:41:56:f6:
                    67:8e:73:26:04:9e:95:ec:32:b0:69:c3:34:81:b1:
                    ff:61:60:03:c5:2f:b9:c0:44:96:85:77:63:b4:aa:
                    6b:99:9b:5a:ee:83:e2:dd:67:a0:4d:f6:7d:ac:db:
                    b7:bc:1c:44:64:a0:42:fb:48:1a:ad:dc:9e:b8:f1:
                    21:3b:a9:20:2f:50:87:a8:54:9d:e7:d2:32:70:aa:
                    54:52:00:26:c7:76:5f:43:6e:9c:fc:33:72:07:22:
                    a1:83:b7:e3:56:85:b5:cb:a0:99:77:20:40:a5:0f:
                    e7:95:7c:9f:90:a9:d4:d0:18:c1:81:34:a7:de:3b:
                    55:56:ee:60:3e:c5:b6:d8:86:c7:f1:37:c9:d6:78:
                    58:d2:d4:6c:64:d0:34:8b:2f:8f:3f:73:9c:33:9a:
                    99:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:BB:2A:B6:D6:32:E9:55:A7:56:95:57:29:10:7E:23:52:C8:82:ED
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HmzZf9GHkWkpxePeKTQDyuHHm7YhnrLQjD4QgCTzDn5Y/0/CDBB2AB6D632E955A756955729107E2352C882ED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.192.0/21
                IPv6:
                  2804:400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262409

    Signature Algorithm: sha256WithRSAEncryption
         93:35:82:de:da:ff:41:db:a8:5c:da:b0:ad:e7:c5:4f:40:e9:
         31:69:a3:af:c5:1a:38:e8:33:9f:13:f3:a1:5f:66:66:d3:80:
         e7:a0:da:e4:9c:6e:2e:ca:c7:fc:d0:de:1a:8e:74:f6:45:65:
         bd:ff:2f:ea:44:82:89:a2:80:28:70:4e:40:89:e9:cd:85:44:
         ef:c3:a2:06:8c:f4:b1:8d:6b:7c:92:53:7f:14:9d:cf:e7:79:
         27:18:1a:2c:ae:36:05:ee:7d:95:0f:8d:56:bb:93:e5:a2:4b:
         c2:b3:ef:cb:90:cf:75:1d:4a:8b:8a:d4:8a:21:15:d7:c8:f8:
         fa:93:cc:68:5a:c8:87:b1:07:44:58:7d:39:16:8f:b2:dd:0d:
         5a:ad:53:86:49:01:2e:4b:17:d6:25:28:8b:90:82:d9:bc:fa:
         fd:61:84:e5:63:ee:47:cc:6c:fd:9d:49:aa:e4:5c:06:6c:90:
         aa:0a:3c:71:4a:67:bf:72:f2:ba:d7:82:b1:01:a2:4d:2d:0a:
         11:07:22:ec:1d:6c:9c:36:9b:69:80:b4:80:51:e9:f8:ab:b2:
         56:f9:02:e4:ef:f6:60:34:30:68:63:8a:f4:1c:10:38:c1:6b:
         1a:84:a9:c4:76:92:dd:a8:94:2b:bd:00:a5:14:87:e6:6e:56:
         87:b5:e2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org