Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CDD9973303E25E7554D25F5703FB347389D59326.cer
File:                     CDD9973303E25E7554D25F5703FB347389D59326.cer (raw, json)
Hash identifier:          9MxjCpWKUCx3FidZegtikrkexrt4yG3EU1Hy3JhXsC0=
Subject key identifier:   CD:D9:97:33:03:E2:5E:75:54:D2:5F:57:03:FB:34:73:89:D5:93:26
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6EE81E0D2E8937121C1612E76F5F0C6C1EA01D00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/CDD9973303E25E7554D25F5703FB347389D59326.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 31 Jan 2023 14:15:15 +0000
Certificate not after:    Tue 30 Jan 2024 14:20:15 +0000
Subordinate resources:    AS: 10715
                          AS: 11242
                          AS: 263300
                          IP: 150.162.0.0/16
                          IP: 200.18.0.0/20
                          IP: 200.19.96.0/20
                          IP: 200.135.0.0/16
                          IP: 200.237.192.0/18
                          IP: 2801:80:a80::/44
                          IP: 2801:84::/32
                          IP: 2804:1f2e::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e8:1e:0d:2e:89:37:12:1c:16:12:e7:6f:5f:0c:6c:1e:a0:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 31 14:15:15 2023 GMT
            Not After : Jan 30 14:20:15 2024 GMT
        Subject: CN=CDD9973303E25E7554D25F5703FB347389D59326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:88:b0:46:d1:7d:2e:2a:81:b6:a5:aa:7b:82:
                    54:e1:ad:9f:52:16:5f:23:3b:f2:74:26:14:3b:08:
                    46:c8:3d:f3:6b:1d:54:69:3d:42:75:4c:73:5e:b0:
                    be:50:e1:41:69:8e:1d:2f:99:ba:11:6b:e2:eb:9d:
                    d2:fb:22:ab:a8:9d:62:96:36:66:fb:fe:84:be:0d:
                    a9:9b:3c:35:08:2a:cd:b1:be:1a:93:c4:4f:5e:b8:
                    58:48:25:85:fe:50:1e:59:67:70:e8:81:e4:88:cb:
                    2b:9e:16:b0:d4:d8:a4:43:ad:b9:70:52:fd:2d:50:
                    8e:75:e5:8a:57:5d:9d:99:b5:c4:e3:8b:86:73:28:
                    68:03:f1:9b:f2:35:c1:f4:45:c4:5b:fb:29:8b:a9:
                    e5:38:0a:c5:a4:82:61:d8:53:5a:a2:c0:d2:0d:c9:
                    85:b9:e0:4e:f3:cb:ed:b2:b9:1c:a5:18:8d:f7:3c:
                    30:d6:af:83:b9:8b:1d:1e:04:4b:1c:90:f3:6b:1f:
                    79:21:7c:58:4c:d0:81:e2:1b:28:8e:f4:4e:30:85:
                    fa:55:db:8f:8a:2d:86:51:d5:8d:2a:a0:db:85:61:
                    f1:7b:5a:7c:9f:17:1d:df:38:27:9b:69:b8:07:16:
                    f1:a0:54:d4:88:c4:d5:47:84:f9:1c:24:58:0b:0d:
                    68:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:D9:97:33:03:E2:5E:75:54:D2:5F:57:03:FB:34:73:89:D5:93:26
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/CDD9973303E25E7554D25F5703FB347389D59326.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.162.0.0/16
                  200.18.0.0/20
                  200.19.96.0/20
                  200.135.0.0/16
                  200.237.192.0/18
                IPv6:
                  2801:80:a80::/44
                  2801:84::/32
                  2804:1f2e::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10715
                  11242
                  263300

    Signature Algorithm: sha256WithRSAEncryption
         a6:b8:4a:4c:76:ad:fa:50:f5:4c:a6:e3:32:04:f3:74:2a:a8:
         fa:1f:8a:90:34:b4:ca:52:ff:e7:80:43:14:b0:0f:50:33:15:
         30:d2:40:d7:99:11:42:bd:d6:31:1b:61:61:7d:58:8d:d9:26:
         50:82:20:32:10:f2:2e:96:88:4c:d1:99:37:af:c4:57:fc:a2:
         3a:ee:10:4d:bd:6b:9d:d9:94:de:b5:75:64:06:9c:03:44:3d:
         5c:17:cd:4f:81:24:e6:0f:2f:0e:8a:72:e3:b8:6e:3a:f5:d9:
         2f:9f:ef:68:dd:c8:34:65:05:31:87:12:7f:c0:b3:cb:b6:ec:
         fb:81:17:b6:91:53:af:7b:63:74:ea:74:a9:ae:2d:d1:2c:42:
         cb:91:c8:53:25:cf:0a:04:fd:e5:95:ca:f0:c7:69:4c:1b:11:
         e3:64:d1:e4:ed:5d:ef:8c:82:35:d3:63:a3:0d:22:59:7b:fa:
         5f:d3:0d:bd:13:8a:09:3e:c4:6d:8f:f1:f0:15:83:5a:d4:a3:
         d2:e7:22:54:c8:42:06:00:64:ec:2f:95:ad:38:24:ce:d1:f3:
         22:ff:29:09:48:ad:a3:c8:3f:d9:5e:3f:f3:95:04:33:a0:d0:
         22:ce:8c:70:59:2f:8f:5a:4f:5e:3c:f1:48:2d:cf:86:7c:1f:
         77:54:a6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org