Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D319009D97BFACFD2ADE23FBF673BE5AFBA92E10.cer
File:                     D319009D97BFACFD2ADE23FBF673BE5AFBA92E10.cer (raw, json)
Hash identifier:          TEwYGXihJBwPmCcYfOin4Y9UgxltIdNrRhi5Lsu9ulA=
Subject key identifier:   D3:19:00:9D:97:BF:AC:FD:2A:DE:23:FB:F6:73:BE:5A:FB:A9:2E:10
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1DCDCFD9F7A80994AF262106A26C1B981BFD39ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0/D319009D97BFACFD2ADE23FBF673BE5AFBA92E10.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Nov 2023 00:32:37 +0000
Certificate not after:    Fri 08 Nov 2024 00:37:37 +0000
Subordinate resources:    AS: 269274
                          IP: 45.182.168.0/22
                          IP: 2804:6214::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:cd:cf:d9:f7:a8:09:94:af:26:21:06:a2:6c:1b:98:1b:fd:39:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 10 00:32:37 2023 GMT
            Not After : Nov  8 00:37:37 2024 GMT
        Subject: CN=D319009D97BFACFD2ADE23FBF673BE5AFBA92E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a3:da:8d:ad:c4:47:08:20:98:c7:7e:39:11:
                    38:21:7c:ca:4f:3c:25:c6:aa:ad:03:96:dc:8b:89:
                    d3:5d:07:4d:81:15:d8:17:99:f2:8c:a6:52:a8:f5:
                    38:94:8d:9d:36:94:8d:ae:11:ce:ad:54:99:fa:6d:
                    aa:61:27:e3:9c:cc:d0:4e:de:52:c2:82:c7:9c:d9:
                    4d:b7:e6:60:0f:8f:35:4f:b9:c7:5f:24:38:b3:79:
                    5a:63:67:15:3f:c3:9d:96:cb:eb:7a:bd:4f:f6:a8:
                    69:7d:01:f7:a3:b0:3d:58:3b:5a:99:fb:6f:ca:d2:
                    30:47:85:52:1e:0f:a2:27:d7:2b:20:e8:d8:22:bd:
                    d3:29:f0:7e:ea:0b:e9:47:8d:3a:c7:92:e1:9e:2b:
                    28:ca:71:bf:f0:e9:18:db:12:ce:bf:ce:e3:3f:12:
                    aa:6b:27:4c:f2:80:04:5d:c2:34:b2:23:0e:75:c3:
                    d1:20:a7:05:ba:3b:0a:24:e3:fe:10:98:6f:43:8b:
                    3e:32:28:b1:12:e8:fc:ae:e4:aa:63:a0:e7:e5:07:
                    0a:49:11:c9:7c:d8:e2:3b:d0:60:51:0a:c9:88:d6:
                    2c:da:9b:dd:1f:b5:d7:83:d1:e7:da:92:03:da:0d:
                    5f:90:37:25:05:20:2b:1a:dd:78:6a:f8:0e:f5:6e:
                    2c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:19:00:9D:97:BF:AC:FD:2A:DE:23:FB:F6:73:BE:5A:FB:A9:2E:10
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DHV9cFKjwq57h5ZMj2gFEDkEze6Z1YZJFtEQvNKTmjxj/0/D319009D97BFACFD2ADE23FBF673BE5AFBA92E10.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.168.0/22
                IPv6:
                  2804:6214::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269274

    Signature Algorithm: sha256WithRSAEncryption
         83:6c:1b:6d:d8:b2:02:cd:d5:12:d7:52:20:b6:ba:5a:36:5b:
         e1:6d:1c:1a:44:9a:4f:cb:f7:a4:3c:7a:83:d2:e0:ec:35:26:
         f6:d2:6a:56:e3:12:8f:95:dc:e8:61:11:a0:c2:3e:64:87:a2:
         99:74:ea:54:3c:43:5e:8e:d6:d2:73:0d:04:cc:b5:e3:5d:5d:
         9b:a5:43:0f:c4:83:35:72:bb:ad:b4:db:ed:f3:42:d6:ca:f7:
         8f:22:ab:d4:f4:30:b6:49:12:d2:52:08:35:61:02:c6:3b:56:
         87:d7:9d:c4:50:48:7b:f4:52:d9:81:a3:f5:17:54:66:ad:f5:
         40:1c:3b:b1:4e:62:b8:ab:53:04:2c:23:37:38:12:d0:08:4a:
         f4:0b:e1:44:dd:5e:f3:0b:77:6b:81:4c:c3:89:7f:06:25:2f:
         51:7c:6f:d2:d0:90:73:40:70:dc:07:33:18:67:22:f4:e6:9c:
         02:39:14:e0:b4:4b:76:c2:15:5c:3a:76:ac:e3:10:88:8f:84:
         00:14:43:9a:f8:4e:44:61:dc:c5:38:f8:0e:e6:17:fe:3b:f5:
         43:88:dc:e6:9e:65:72:b2:a8:a9:45:55:f4:ed:77:a7:61:fc:
         e7:fa:e0:ab:31:51:b3:c9:5a:a3:23:ef:a7:21:de:dc:f8:fb:
         2c:3b:ab:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org