Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D2D2D71D988525073935916EEBCA45B03AB78E14.cer
File:                     D2D2D71D988525073935916EEBCA45B03AB78E14.cer (raw, json)
Hash identifier:          faVvWNYJFh8hxlTkuxtWn3e7PhpIVXpfl+Dl6L4h+PI=
Subject key identifier:   D2:D2:D7:1D:98:85:25:07:39:35:91:6E:EB:CA:45:B0:3A:B7:8E:14
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7172E77FD887D1A905503DEE47203FFF02E25B02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/D2D2D71D988525073935916EEBCA45B03AB78E14.mft
caRepository:             rsync://rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Apr 2023 11:45:11 +0000
Certificate not after:    Thu 04 Apr 2024 11:50:11 +0000
Subordinate resources:    AS: 52980
                          IP: 45.180.212.0/22
                          IP: 131.161.164.0/22
                          IP: 143.137.88.0/22
                          IP: 170.79.208.0/22
                          IP: 177.52.0.0/20
                          IP: 191.243.248.0/21
                          IP: 2804:474::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:72:e7:7f:d8:87:d1:a9:05:50:3d:ee:47:20:3f:ff:02:e2:5b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  6 11:45:11 2023 GMT
            Not After : Apr  4 11:50:11 2024 GMT
        Subject: CN=D2D2D71D988525073935916EEBCA45B03AB78E14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:e6:a8:de:ee:97:51:ec:1f:00:17:31:9d:
                    10:56:1a:bd:2f:ba:00:f1:a4:2d:b8:1a:9a:0d:98:
                    ce:66:f0:70:18:e4:05:4c:39:3d:8f:ad:da:d7:63:
                    19:17:f5:94:dd:b3:64:2b:96:2a:85:f6:e1:bb:a9:
                    9a:ac:e9:c4:8c:99:8a:d5:ac:3d:25:d1:01:36:5c:
                    52:4e:01:a6:18:f6:19:ef:02:9c:b0:e1:d1:dc:be:
                    98:92:be:b1:b0:a8:f3:3d:ad:13:3e:b8:08:56:bf:
                    5c:bb:5e:e1:a3:e4:36:b2:29:91:b8:f2:02:bd:14:
                    25:89:51:24:a5:f0:f9:91:10:69:9c:0c:2e:9d:3d:
                    6e:af:c8:76:e2:bc:4c:cb:2a:32:38:ca:6a:b9:83:
                    c1:db:c7:85:77:20:c1:d0:31:f4:67:69:ef:3f:3d:
                    82:81:72:1f:47:44:23:1c:25:03:bb:e0:ff:9d:e6:
                    99:d7:c5:81:0c:51:39:57:71:e6:aa:24:8d:31:ce:
                    40:4e:8b:b8:60:4d:b4:ac:d9:8d:ee:b3:b4:19:d7:
                    93:24:7f:f7:f8:40:47:b5:41:b0:84:96:21:bf:13:
                    5b:56:d4:70:d3:25:97:13:b0:26:3a:c3:f4:d6:d9:
                    0d:f4:43:6e:e9:08:ae:6a:7e:b2:6e:ea:ad:8c:43:
                    00:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:D2:D7:1D:98:85:25:07:39:35:91:6E:EB:CA:45:B0:3A:B7:8E:14
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/57aLNec1j5Kc5Mw7u4MBiYA4AKUyjJ1UCcfzJRwCGChq/0/D2D2D71D988525073935916EEBCA45B03AB78E14.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.212.0/22
                  131.161.164.0/22
                  143.137.88.0/22
                  170.79.208.0/22
                  177.52.0.0/20
                  191.243.248.0/21
                IPv6:
                  2804:474::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52980

    Signature Algorithm: sha256WithRSAEncryption
         1b:50:a5:eb:87:10:65:d4:27:24:8c:04:cc:ca:57:6e:f2:19:
         39:06:2d:88:7a:75:da:f7:65:db:42:6f:7b:52:19:a8:56:cb:
         7d:09:7b:7a:91:f5:33:2b:16:19:4f:82:34:84:20:07:da:ef:
         b5:b0:ca:0a:16:84:77:69:b3:83:5e:9e:70:ad:26:0b:20:12:
         91:25:4c:06:d0:d6:d1:50:05:58:8d:ba:5d:fe:a9:ec:b2:db:
         30:53:3f:22:23:02:c6:62:30:60:a8:0e:24:c2:7c:08:79:43:
         39:21:3e:4f:4b:00:a1:90:9d:40:7f:ff:ab:2c:d3:21:56:b5:
         49:f6:d0:03:32:7e:50:58:f1:15:79:74:05:c9:61:02:0b:77:
         9f:3d:62:8c:05:ea:5e:03:c1:82:30:36:fc:a0:fa:aa:ea:b9:
         db:a9:47:a5:0c:5a:37:9b:ba:bf:c9:81:36:f2:af:0e:0d:87:
         44:04:7d:1d:fd:10:0b:74:90:61:e2:b4:c8:83:56:e3:bf:41:
         b6:00:76:f8:02:dc:e8:61:c2:fa:08:e4:59:5c:4d:57:c0:d7:
         77:bf:46:b7:06:07:78:b9:f1:94:56:7d:f6:27:92:2a:58:c9:
         f7:2d:6e:7c:94:5e:1a:51:6b:f4:98:45:e7:04:a7:a7:39:bb:
         ca:77:8b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org