Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D0A7B6545E75499D1FEFA32D015932E50FC824C6.cer
File:                     D0A7B6545E75499D1FEFA32D015932E50FC824C6.cer (raw, json)
Hash identifier:          JpZbyogEYv1xeDMckEYwvxJddrAbRDvT4vpWyetBnNs=
Subject key identifier:   D0:A7:B6:54:5E:75:49:9D:1F:EF:A3:2D:01:59:32:E5:0F:C8:24:C6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3943E7F27EDF94988A20530A113A39CABBB0E6BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ECX4MnFv6AYsmNSWs6x1Q4aG7fKm8EWhKUmVxaenZxn8/0/D0A7B6545E75499D1FEFA32D015932E50FC824C6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ECX4MnFv6AYsmNSWs6x1Q4aG7fKm8EWhKUmVxaenZxn8/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Jun 2022 20:07:51 +0000
Certificate not after:    Tue 13 Jun 2023 20:12:51 +0000
Subordinate resources:    AS: 267240
                          IP: 45.231.232.0/22
                          IP: 2804:4a70::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:43:e7:f2:7e:df:94:98:8a:20:53:0a:11:3a:39:ca:bb:b0:e6:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 14 20:07:51 2022 GMT
            Not After : Jun 13 20:12:51 2023 GMT
        Subject: CN=D0A7B6545E75499D1FEFA32D015932E50FC824C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b6:dc:6f:b7:87:c7:65:ae:05:c9:ff:29:40:
                    87:fb:48:5a:34:e8:95:ef:55:f3:3a:51:19:a6:d2:
                    92:1f:a1:df:10:b3:5b:6f:f9:7d:71:af:61:bd:1a:
                    2e:3a:ae:75:72:b4:09:8b:03:b3:75:5d:b9:47:c8:
                    00:de:f5:78:82:8d:20:8d:5a:a5:e7:81:53:ae:8d:
                    83:1b:e5:72:fb:04:14:13:a0:92:ae:b0:61:a4:a8:
                    43:dc:83:31:24:d8:92:e9:27:27:30:b5:14:89:03:
                    69:87:3e:57:85:0b:20:8b:d8:24:3d:ab:40:f9:61:
                    75:9a:1f:f2:76:c7:d0:ce:65:c1:df:af:c2:00:17:
                    0e:30:e1:a5:f6:41:1d:34:25:10:a1:35:c7:f3:d1:
                    d8:ff:67:2e:6e:e9:7b:a9:f8:e9:5d:bf:1e:d1:17:
                    14:f8:26:b1:ba:cb:d4:54:cc:7c:dd:8c:91:2e:f7:
                    da:d0:48:d2:f8:e1:c7:d4:f5:8f:51:19:f5:cb:13:
                    ec:10:ac:bd:9f:12:c4:24:af:27:b5:ea:45:f9:d1:
                    07:47:dd:18:52:70:06:06:bb:db:06:c0:6a:18:1b:
                    fb:39:b4:cb:94:42:bc:32:8e:04:32:d8:08:87:87:
                    7b:9d:a7:7b:b8:86:85:1d:7b:2c:aa:1c:bb:96:eb:
                    9e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:A7:B6:54:5E:75:49:9D:1F:EF:A3:2D:01:59:32:E5:0F:C8:24:C6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ECX4MnFv6AYsmNSWs6x1Q4aG7fKm8EWhKUmVxaenZxn8/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ECX4MnFv6AYsmNSWs6x1Q4aG7fKm8EWhKUmVxaenZxn8/0/D0A7B6545E75499D1FEFA32D015932E50FC824C6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.232.0/22
                IPv6:
                  2804:4a70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267240

    Signature Algorithm: sha256WithRSAEncryption
         a6:ad:aa:ad:af:ff:f8:15:3b:12:98:31:66:d3:27:df:06:40:
         db:36:00:5e:76:4a:2d:06:ea:19:25:77:b7:0c:68:c6:be:5a:
         6e:ff:9c:93:92:54:45:31:f9:2c:28:0a:e2:2f:8d:a5:3b:e1:
         76:db:0d:07:a7:07:ad:a1:22:ca:e8:c7:08:6b:5a:69:16:a0:
         82:78:14:37:27:6f:bf:22:5f:2b:d8:7a:fe:66:4d:25:bc:86:
         3b:e4:10:73:0c:6a:d8:72:98:ac:f6:c9:3f:60:e6:d6:2e:6d:
         ee:2f:f2:7e:5b:66:14:dd:b2:33:70:48:71:e4:40:91:7a:4e:
         ef:7e:d4:f3:ed:60:69:81:8d:f7:7c:ac:45:4a:ae:df:e1:34:
         5e:c2:bd:d9:5b:9c:82:c1:4a:65:ef:2b:e0:c1:b1:58:34:14:
         c0:51:0d:d3:0a:c9:79:2a:df:46:a7:88:f5:08:4e:1a:79:57:
         64:11:25:9b:e6:fe:00:c7:40:06:e0:8b:d9:5a:25:ad:01:96:
         12:18:45:88:64:f6:2a:9c:5f:32:6c:65:f4:6e:1c:7f:28:e1:
         cd:e5:d5:7a:39:9e:5c:64:43:25:f9:83:d8:30:13:4e:f7:84:
         07:58:26:d0:e9:ac:cc:18:41:bb:ac:2d:a8:f0:de:6b:17:cc:
         d8:ab:05:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org