Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D2F36DD90FA86F0FFBAB74E26A9E1095716B1526.cer
File:                     D2F36DD90FA86F0FFBAB74E26A9E1095716B1526.cer (raw, json)
Hash identifier:          hrO0zSOvhzJ1u2+TvdxbxhgYP1Feua3YCj6V8dC6Pjo=
Subject key identifier:   D2:F3:6D:D9:0F:A8:6F:0F:FB:AB:74:E2:6A:9E:10:95:71:6B:15:26
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       23EB33C7AE9481C7710AD57120BF56BC2862C336
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/D2F36DD90FA86F0FFBAB74E26A9E1095716B1526.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 14:45:44 +0000
Certificate not after:    Tue 03 Dec 2024 14:50:44 +0000
Subordinate resources:    AS: 263604
                          IP: 143.202.112.0/22
                          IP: 177.71.88.0/22
                          IP: 2804:fcc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:eb:33:c7:ae:94:81:c7:71:0a:d5:71:20:bf:56:bc:28:62:c3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 14:45:44 2023 GMT
            Not After : Dec  3 14:50:44 2024 GMT
        Subject: CN=D2F36DD90FA86F0FFBAB74E26A9E1095716B1526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:81:75:93:d3:79:87:44:77:f7:ff:5d:3a:1b:
                    a2:12:75:4f:62:f0:f8:0c:19:b2:d3:e7:3b:06:bd:
                    e9:6c:9b:eb:e5:42:9a:3b:72:6f:81:e3:5a:46:48:
                    83:c3:c4:9f:a3:7c:93:a4:59:2b:70:a0:6e:ee:d5:
                    92:61:8d:45:ea:5a:dd:53:14:91:40:50:37:b3:97:
                    b9:f5:26:fe:a0:de:e4:d2:38:14:1b:e8:8f:27:1c:
                    e2:9c:7c:b0:b9:dc:93:41:66:1c:7e:b7:a4:12:c2:
                    71:08:d3:f2:c2:ad:14:7c:e0:bf:70:a8:5a:55:5e:
                    6d:f5:03:d4:6f:ed:80:06:9f:be:54:e2:0c:c4:c6:
                    d1:22:d1:10:09:30:3a:d0:87:e9:ed:be:8e:4f:d4:
                    4f:b7:6a:1b:07:f2:8c:79:36:4b:0e:f3:ed:3d:f7:
                    59:05:2c:a0:ef:3c:9a:04:d1:96:e0:51:8b:36:12:
                    d4:5b:b0:b2:c7:04:eb:d1:a8:b0:6c:cd:9f:6a:ef:
                    d1:eb:6d:e1:f4:c1:7c:3d:37:7b:43:e0:23:94:f2:
                    77:9a:27:11:35:32:5e:75:04:5a:f9:09:af:b8:34:
                    5d:a1:2c:a7:39:b2:68:e8:ae:c9:3c:17:17:2a:24:
                    34:2a:f6:e2:c6:f2:fe:d2:8c:78:8a:8a:c7:87:45:
                    ee:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:F3:6D:D9:0F:A8:6F:0F:FB:AB:74:E2:6A:9E:10:95:71:6B:15:26
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/D2F36DD90FA86F0FFBAB74E26A9E1095716B1526.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.112.0/22
                  177.71.88.0/22
                IPv6:
                  2804:fcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263604

    Signature Algorithm: sha256WithRSAEncryption
         50:50:a9:ce:2c:95:bd:b8:85:1f:e9:73:ea:36:ba:71:2d:41:
         4f:7c:ab:bc:6d:81:a1:44:db:5a:73:17:d3:19:02:40:cd:1c:
         62:b5:9f:f1:8f:9f:56:46:e7:48:62:f7:fc:b2:5b:e4:54:48:
         b5:b5:fa:bd:1c:6e:47:44:73:fe:cb:df:00:e1:19:d4:76:a2:
         c2:b0:00:02:b2:00:2f:64:9d:66:66:f1:03:e0:89:d5:fb:65:
         5a:6d:60:5a:29:14:90:99:63:d3:52:d1:62:88:e7:e5:28:03:
         a1:58:f8:dc:17:37:90:fa:3d:b4:a3:e9:49:0e:1c:c7:9a:ef:
         72:60:e3:a9:37:11:66:9c:f7:00:04:62:e1:b2:5d:6a:fd:63:
         1e:c7:44:cc:72:cb:e9:04:fb:ef:31:ac:56:40:39:4f:f6:1b:
         42:b9:1b:db:79:ba:2d:be:0a:28:59:39:f5:7b:2d:ef:79:65:
         f8:c0:8d:75:c7:c5:e7:da:66:9d:f8:6b:41:a1:10:4a:96:4d:
         47:c3:50:03:33:f9:eb:56:45:b6:03:49:b8:04:94:53:51:c4:
         89:44:fa:eb:d4:b3:7a:ec:db:99:79:1f:5b:4b:c9:e7:91:dd:
         9f:da:8f:54:37:d9:ee:65:dc:59:00:09:5f:e3:21:c5:0b:83:
         91:bc:c5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org