Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D1B071C7AC021EE5B639D2F9441A80258F008EFA.cer
File:                     D1B071C7AC021EE5B639D2F9441A80258F008EFA.cer (raw, json)
Hash identifier:          SqUmV2OFp3tPHBkSWbOSqE6hoSvHucBcUpZGFVvcb9I=
Subject key identifier:   D1:B0:71:C7:AC:02:1E:E5:B6:39:D2:F9:44:1A:80:25:8F:00:8E:FA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4415C4910342B085CF0FCA2BF77F1701D64FF308
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/D1B071C7AC021EE5B639D2F9441A80258F008EFA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 06 May 2023 19:13:07 +0000
Certificate not after:    Sat 04 May 2024 19:18:07 +0000
Subordinate resources:    AS: 269025
                          IP: 45.178.128.0/22
                          IP: 2804:5e50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:15:c4:91:03:42:b0:85:cf:0f:ca:2b:f7:7f:17:01:d6:4f:f3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  6 19:13:07 2023 GMT
            Not After : May  4 19:18:07 2024 GMT
        Subject: CN=D1B071C7AC021EE5B639D2F9441A80258F008EFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:72:4a:c6:27:0e:4d:da:ed:f6:e4:55:22:60:
                    da:ec:1e:0e:1a:a5:c0:c5:a5:95:70:5c:a2:5a:51:
                    10:33:3e:99:4e:9f:7f:9c:a3:82:32:f2:51:0c:45:
                    51:3c:2e:12:73:e7:1b:00:77:e0:bb:65:2a:4f:0f:
                    41:60:26:d0:ce:33:4a:87:b3:00:26:cf:bd:f7:32:
                    9b:c5:ee:73:85:07:ae:62:03:91:32:90:46:91:02:
                    76:38:cd:86:8c:78:00:fe:43:99:4e:e4:e5:58:0b:
                    e6:70:d5:a4:0b:f8:4b:00:d0:12:bb:55:4e:f6:e1:
                    d3:03:e0:61:9c:f7:ae:71:41:01:78:a8:db:13:63:
                    b9:3d:eb:5c:d8:0d:a5:f5:7b:39:cf:58:a5:a5:46:
                    12:82:ae:b2:0a:78:86:24:0d:8d:44:58:a0:3e:64:
                    c5:97:da:a9:db:23:74:e6:76:41:72:23:cc:a1:d5:
                    64:75:41:d2:be:64:50:a5:2b:82:a3:b9:e8:8c:1b:
                    e7:67:a2:da:27:72:52:f4:f9:4f:45:85:48:8d:2d:
                    55:d0:7e:86:4d:84:5d:c7:05:40:8e:e0:e3:d7:e6:
                    07:a3:21:23:7c:9d:c2:ae:92:dd:9c:1b:89:8c:64:
                    dc:32:3a:23:53:ea:fa:62:54:a6:64:ff:37:bc:88:
                    e1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:B0:71:C7:AC:02:1E:E5:B6:39:D2:F9:44:1A:80:25:8F:00:8E:FA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/D1B071C7AC021EE5B639D2F9441A80258F008EFA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.128.0/22
                IPv6:
                  2804:5e50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269025

    Signature Algorithm: sha256WithRSAEncryption
         aa:4a:7b:0c:4d:7a:f0:62:20:6b:83:f1:0e:f1:ee:20:50:10:
         32:b8:4a:6b:d4:42:51:7b:33:93:18:47:99:20:50:44:43:75:
         05:45:43:13:96:ed:61:22:e0:30:9c:df:2e:41:9c:12:1a:22:
         db:2a:28:95:b0:6b:b7:ee:94:3b:6a:30:3f:f4:26:f1:19:7e:
         a9:71:19:01:3a:0b:86:43:15:60:82:1b:2e:fd:90:57:36:b7:
         92:3e:af:3c:80:17:05:d1:94:81:6e:66:5b:8f:04:a4:d3:eb:
         e6:e5:4d:9b:52:79:76:94:4c:9b:38:ff:23:57:db:bc:3d:66:
         98:b7:0a:d8:5a:b4:61:df:a7:30:b2:ed:4e:62:6c:69:d9:58:
         34:ca:3b:2b:59:a7:c9:13:e8:ca:82:9d:a6:78:a8:f1:92:80:
         b1:e9:e6:b7:59:ac:00:70:c1:e6:78:d7:fc:a5:ff:92:04:f7:
         77:2f:3b:1a:4a:fb:b8:3c:f0:a4:05:de:29:17:25:41:73:18:
         f6:3b:00:4b:28:55:88:9d:d2:c8:4e:92:aa:f9:1b:b6:0f:15:
         5b:d6:23:47:f8:78:74:25:d8:75:85:af:46:2d:59:92:a8:74:
         e7:30:3b:6b:f8:64:32:93:3f:32:fa:df:c1:4c:b9:ae:0f:9d:
         c6:45:f9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org