Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.cer
File:                     D1767E436F91B824888366F56CC5E3F1E56F76AF.cer (raw, json)
Hash identifier:          OO4dYCZNYLeM90C1XbJuGX3UHE2uX+UCPgIQZMk5i3o=
Subject key identifier:   D1:76:7E:43:6F:91:B8:24:88:83:66:F5:6C:C5:E3:F1:E5:6F:76:AF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       42B07600CE44A0B0BAC4A3277943EB490BE5387D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Apr 2023 11:30:39 +0000
Certificate not after:    Wed 03 Apr 2024 11:35:39 +0000
Subordinate resources:    AS: 267091
                          IP: 45.229.20.0/22
                          IP: 2804:4800::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b0:76:00:ce:44:a0:b0:ba:c4:a3:27:79:43:eb:49:0b:e5:38:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  5 11:30:39 2023 GMT
            Not After : Apr  3 11:35:39 2024 GMT
        Subject: CN=D1767E436F91B824888366F56CC5E3F1E56F76AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:45:0c:a0:47:2c:82:33:e5:07:1f:00:c2:
                    33:12:13:12:8e:41:de:61:ba:26:30:36:ba:0b:cb:
                    22:06:d9:30:e6:bc:2d:70:a6:39:03:36:de:9a:39:
                    0b:de:5b:fc:a9:e7:31:f1:52:c3:82:e0:df:8f:b2:
                    aa:06:47:97:bf:f9:5a:37:41:7f:7c:79:8d:0a:24:
                    d5:dc:c5:41:da:43:2c:94:9d:6d:c3:8c:f4:e2:6e:
                    1a:53:b3:73:e9:92:f5:26:82:c3:77:23:28:1b:b0:
                    d7:51:02:5c:78:14:0f:fb:80:95:ce:25:8f:cd:82:
                    8d:f4:83:f0:35:6c:f7:2f:83:e4:d9:6f:41:ef:35:
                    20:79:63:c3:ad:9e:b5:a5:75:82:f4:be:ab:55:36:
                    41:e1:9f:d0:c1:03:e9:0e:94:b1:fd:85:e3:14:0f:
                    71:e6:c7:5f:53:36:2e:6d:b5:1e:f8:7c:80:0b:65:
                    82:50:19:4d:74:aa:4e:c8:9e:66:cc:b4:b1:08:65:
                    f4:af:13:80:3a:c5:fb:67:4a:b3:66:fc:2c:43:a4:
                    a6:27:16:dc:11:0b:c0:64:1a:3a:c0:84:84:4e:69:
                    89:09:b0:17:fa:9a:c0:74:72:d8:ea:99:3b:24:b4:
                    79:c9:b0:c1:ea:98:5b:08:67:39:72:14:de:72:b2:
                    18:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:76:7E:43:6F:91:B8:24:88:83:66:F5:6C:C5:E3:F1:E5:6F:76:AF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/D1767E436F91B824888366F56CC5E3F1E56F76AF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.20.0/22
                IPv6:
                  2804:4800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267091

    Signature Algorithm: sha256WithRSAEncryption
         b2:8f:4d:a0:56:6d:48:62:d7:6e:da:95:2d:38:7f:bb:3b:c0:
         56:cd:ea:13:df:b9:9c:f7:83:48:1d:73:31:5e:83:3e:a6:a6:
         71:e2:f2:e5:6a:5f:2e:12:37:39:ca:42:4e:82:40:3e:b7:c7:
         c3:36:93:f0:1e:23:84:2d:85:4c:03:b7:0d:d8:a1:79:db:87:
         d0:34:7f:bc:55:5e:14:d8:74:b2:ad:52:5c:d5:e9:45:32:d7:
         74:12:b3:20:fc:35:39:e4:98:6d:b0:e6:8d:77:0a:68:81:d1:
         47:f5:2a:e8:f0:ca:80:f4:f4:66:4e:c2:76:4b:77:59:c7:5d:
         e2:f7:7f:96:22:be:6e:f4:eb:c0:37:3f:10:99:3f:a7:1e:1b:
         58:a6:e6:72:71:10:31:f3:d3:68:be:54:fe:a6:6e:ba:88:87:
         eb:b1:2a:10:f3:e7:73:03:6d:ad:7b:77:d9:27:3f:2f:26:03:
         a0:5f:ef:34:8d:fa:ff:2d:cb:9a:56:b3:4c:f0:95:96:2f:c8:
         5e:ff:11:ac:8a:59:5d:77:b3:e9:a8:1b:96:6f:6e:9d:1a:cf:
         be:c4:74:cc:fa:cb:1e:79:43:fe:c1:73:75:fa:71:64:ac:1c:
         9e:bf:42:ab:85:aa:30:08:ae:63:d8:5d:48:91:af:ac:76:49:
         a1:3d:f4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org