Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D2C882CB468AE99E1A614C65A25273760B45B141.cer
File:                     D2C882CB468AE99E1A614C65A25273760B45B141.cer (raw, json)
Hash identifier:          Ht9EJAGWm/rhQgE+lHWiL2iwCKIfcu+Jrz0m1mV6Hhs=
Subject key identifier:   D2:C8:82:CB:46:8A:E9:9E:1A:61:4C:65:A2:52:73:76:0B:45:B1:41
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       72050FAA4AF35262C509FA0C6D3A5612026B2644
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/0/D2C882CB468AE99E1A614C65A25273760B45B141.mft
caRepository:             rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Jan 2024 02:56:10 +0000
Certificate not after:    Thu 23 Jan 2025 03:01:10 +0000
Subordinate resources:    AS: 272559
                          IP: 2804:8520::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:05:0f:aa:4a:f3:52:62:c5:09:fa:0c:6d:3a:56:12:02:6b:26:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 25 02:56:10 2024 GMT
            Not After : Jan 23 03:01:10 2025 GMT
        Subject: CN=D2C882CB468AE99E1A614C65A25273760B45B141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:99:a1:42:06:2d:c1:16:b6:aa:c5:cd:10:0b:
                    f2:94:70:d9:09:3f:11:79:da:38:46:73:ca:75:3e:
                    0e:53:a8:f3:4b:07:fc:cd:08:8f:66:28:72:99:db:
                    de:8f:54:6d:5e:f2:a4:69:b0:5c:72:1c:f9:87:0b:
                    da:93:f8:a6:2c:7b:db:53:e3:af:c9:98:53:01:e2:
                    ad:02:10:3f:6a:83:5f:3e:b8:ec:62:65:60:92:bd:
                    7d:22:1b:a0:4c:c5:0c:c3:9e:52:d2:3a:64:df:23:
                    6b:ee:4c:7f:66:1f:02:24:db:35:9a:6b:9b:b5:10:
                    98:0c:51:42:c4:ec:b4:bb:ea:4d:7d:8c:18:bf:88:
                    cf:fb:20:65:4a:78:c1:52:53:50:98:1a:8c:b6:1c:
                    7a:a4:57:bf:85:25:37:da:ae:73:a1:19:94:ee:cb:
                    06:69:7f:35:b0:2e:b7:35:d1:c4:42:b2:48:02:57:
                    9a:bb:61:92:bd:78:be:6a:0a:0c:bf:a1:5d:b7:58:
                    75:3e:26:7a:aa:c2:ac:0b:b8:30:09:c9:f2:06:7f:
                    3b:f4:9e:29:95:b0:01:69:39:76:5f:b3:56:a1:df:
                    f5:4f:c0:7f:97:d8:a7:e6:fe:04:a8:65:4f:44:08:
                    24:5c:a5:60:09:31:da:38:af:cf:be:91:b9:7c:a6:
                    df:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:C8:82:CB:46:8A:E9:9E:1A:61:4C:65:A2:52:73:76:0B:45:B1:41
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/0/D2C882CB468AE99E1A614C65A25273760B45B141.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8520::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272559

    Signature Algorithm: sha256WithRSAEncryption
         8f:e0:97:e5:b1:54:3b:ba:37:5b:ab:46:55:f1:db:72:c5:9e:
         b0:57:5b:d9:0d:ab:f7:50:08:f4:1e:c5:e2:32:28:40:65:01:
         3d:30:a6:64:fe:58:07:bf:49:bc:d1:5b:3f:d1:5c:83:18:4e:
         47:c2:2c:18:b5:cc:cf:9e:af:5f:09:42:d3:55:1b:fd:38:fc:
         fe:30:83:1f:1d:11:9b:4b:a2:55:53:79:35:63:c5:9d:a7:bd:
         fc:05:9f:f8:d6:f0:6d:6a:c8:d9:fe:3e:a7:db:b4:08:79:0a:
         80:54:9b:47:2e:1a:e5:99:8b:f2:05:a9:e8:38:4d:3c:a7:ca:
         48:30:8a:ce:65:72:87:db:2a:95:3d:05:78:25:6d:59:eb:f3:
         08:0d:33:c5:17:80:cc:ba:f6:fe:68:47:25:f3:54:66:c8:f7:
         e6:b2:ee:00:ab:bf:b9:93:3a:51:93:74:39:1b:b7:02:5c:19:
         f7:f7:54:6c:52:45:c0:9e:1d:c9:f8:4f:3a:78:54:2c:6e:55:
         d8:e9:37:06:08:61:2b:e9:0a:1e:67:67:8b:e8:b2:19:03:58:
         3e:de:13:58:2e:b9:1a:8d:b8:5a:cb:0b:46:39:b6:e8:8e:ad:
         c0:3a:45:c5:3d:48:9f:4b:09:34:84:8e:41:ae:98:2c:67:4f:
         03:f0:aa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org