Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D1AFA2F091C9D049DA7C881AF2A692163AAD4643.cer
File:                     D1AFA2F091C9D049DA7C881AF2A692163AAD4643.cer (raw, json)
Hash identifier:          2naMQH01j328sYDMDw9z8MMzWsBttJuolQiH3nZ9qwY=
Subject key identifier:   D1:AF:A2:F0:91:C9:D0:49:DA:7C:88:1A:F2:A6:92:16:3A:AD:46:43
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E15AE6D363D068C33CB6D04434330F5E25478FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/D1AFA2F091C9D049DA7C881AF2A692163AAD4643.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Mar 2024 06:44:59 +0000
Certificate not after:    Fri 28 Mar 2025 06:49:59 +0000
Subordinate resources:    AS: 269566
                          IP: 45.188.8.0/22
                          IP: 2804:6688::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:15:ae:6d:36:3d:06:8c:33:cb:6d:04:43:43:30:f5:e2:54:78:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 29 06:44:59 2024 GMT
            Not After : Mar 28 06:49:59 2025 GMT
        Subject: CN=D1AFA2F091C9D049DA7C881AF2A692163AAD4643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:31:77:6e:57:9d:1e:41:65:8a:f1:c1:87:eb:
                    dd:1b:e3:d5:ce:a0:d1:a0:80:34:95:11:3d:6c:e2:
                    31:1c:ab:3b:4c:0a:51:85:56:79:a7:45:49:90:b2:
                    9a:7b:78:3e:8f:1a:c2:c2:d5:4b:da:e6:51:ba:cb:
                    10:d5:68:de:72:af:61:ed:89:40:82:cb:d1:46:69:
                    9b:59:bf:da:85:03:c5:be:c1:38:8d:6e:42:7e:1d:
                    58:c3:86:a7:34:07:ca:c5:52:02:ad:67:29:f2:b5:
                    86:e8:90:55:5e:39:f0:6d:30:15:9b:a9:fa:0a:59:
                    30:a7:02:fc:9f:a2:d6:a7:c3:bc:43:47:e5:ae:04:
                    40:48:bd:ea:cb:38:ea:93:bf:1e:e5:c0:4f:e0:ea:
                    65:66:66:ec:29:32:0d:08:2f:b5:ee:05:33:1c:82:
                    d8:86:93:2e:81:cc:ba:f3:73:03:a2:7f:81:fc:f8:
                    12:91:a2:ed:99:96:f5:11:46:7e:81:1c:e8:c1:3e:
                    41:65:6e:cb:7d:e1:92:56:a8:07:79:ea:82:16:10:
                    49:4b:c7:c8:ed:ff:99:12:a3:92:8b:69:c9:82:13:
                    bd:eb:73:cf:b4:3f:a9:c1:11:40:ef:48:42:69:b8:
                    a9:62:c3:80:b2:e0:da:fa:ee:5e:68:1e:3b:a1:28:
                    b6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:AF:A2:F0:91:C9:D0:49:DA:7C:88:1A:F2:A6:92:16:3A:AD:46:43
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/D1AFA2F091C9D049DA7C881AF2A692163AAD4643.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.8.0/22
                IPv6:
                  2804:6688::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269566

    Signature Algorithm: sha256WithRSAEncryption
         76:db:c9:38:e3:1b:13:d9:43:1a:ed:96:72:44:3c:d4:35:28:
         f0:4a:28:c5:23:a9:83:ba:e1:30:9b:a7:11:32:4c:c9:3e:6b:
         0c:1b:95:be:d9:77:bd:99:ab:c9:27:21:f6:e5:7b:83:f2:f0:
         53:9c:6f:8c:66:74:55:29:e7:ba:0d:26:59:81:e8:fe:24:6e:
         60:bb:79:2d:cf:af:54:e5:64:92:64:b8:f0:f3:c0:90:b9:83:
         c8:73:96:55:de:37:c3:8a:95:e0:be:b9:49:af:22:ea:04:99:
         70:f4:4f:a3:3a:79:44:90:8e:13:95:e7:2e:d7:81:30:32:49:
         04:6e:86:ab:48:8f:df:cf:ae:f6:9e:5c:46:4e:2d:08:48:ca:
         64:9b:80:5f:56:f7:28:f2:3a:f2:ad:c6:85:c0:49:ff:ca:eb:
         be:02:d3:4c:b0:1e:f2:f1:a7:5a:50:1c:ce:68:7e:2b:c6:52:
         5e:b2:ee:45:26:c7:32:a9:0f:17:2e:63:6f:d4:9c:4a:a4:bd:
         41:82:16:6b:5c:cf:06:43:59:dd:2e:7f:cb:f5:c0:ea:ed:3e:
         8b:1f:a2:e6:c5:ac:9b:39:07:84:6d:e3:96:69:ea:ad:48:c1:
         26:99:db:0e:02:f9:24:3c:f3:dc:da:ae:b8:d2:d5:57:fc:0c:
         31:52:8b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org