Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D33B838B6A42A35FB4291F4D13A1F247DFB53A22.cer
File:                     D33B838B6A42A35FB4291F4D13A1F247DFB53A22.cer (raw, json)
Hash identifier:          1fHAHiFKfvtFoBTcJ7gzBqd5xJiu4LCrRfSU5UqN2ys=
Subject key identifier:   D3:3B:83:8B:6A:42:A3:5F:B4:29:1F:4D:13:A1:F2:47:DF:B5:3A:22
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D12EBB327B0D2F900261920499CB1B5DF83267F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/D33B838B6A42A35FB4291F4D13A1F247DFB53A22.mft
caRepository:             rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Feb 2024 16:56:34 +0000
Certificate not after:    Fri 14 Feb 2025 17:01:34 +0000
Subordinate resources:    AS: 28646
                          IP: 201.77.80.0/20
                          IP: 2801:80::/48
                          IP: 2801:80:2000::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:12:eb:b3:27:b0:d2:f9:00:26:19:20:49:9c:b1:b5:df:83:26:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 16 16:56:34 2024 GMT
            Not After : Feb 14 17:01:34 2025 GMT
        Subject: CN=D33B838B6A42A35FB4291F4D13A1F247DFB53A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:91:5f:99:da:26:0b:8a:7b:32:df:c9:4d:4b:
                    f6:69:3b:cb:b0:4c:f6:44:a8:dd:d3:68:32:87:81:
                    64:7c:8f:24:0b:26:b0:f6:9f:a9:da:1a:d3:f6:c0:
                    8c:a2:0c:dc:b9:bd:c0:5a:de:2c:be:d2:ae:fc:b1:
                    68:dd:24:29:5b:e3:93:7d:c0:bc:79:aa:2d:71:a7:
                    b9:38:a6:b6:10:10:cb:25:55:ae:e8:04:45:a0:45:
                    83:2f:b7:5f:da:4f:08:74:f8:90:80:18:5d:a1:1b:
                    56:65:fb:38:26:85:6a:94:a5:d5:a0:31:82:4e:60:
                    f5:72:97:46:0a:ee:52:85:90:36:e8:1b:89:25:d9:
                    aa:b3:39:0f:ac:df:2d:9f:bf:41:b9:c0:15:b4:12:
                    ee:ef:3e:6f:90:31:30:9c:de:08:61:52:35:41:b9:
                    1c:c9:d4:2b:a8:19:48:5f:38:74:14:b4:42:94:86:
                    5f:71:f4:55:6e:45:43:b2:a7:c9:60:b7:76:b6:8e:
                    57:1d:fa:25:ed:66:f9:bc:8f:92:ff:9f:56:39:26:
                    d6:f7:8b:62:06:8d:56:a1:e2:37:cc:42:d2:e6:01:
                    45:95:ca:12:bc:21:f7:38:d1:21:a3:1e:5c:11:63:
                    9a:bb:bb:59:e9:1d:46:e4:97:2e:1b:27:89:78:2f:
                    84:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:3B:83:8B:6A:42:A3:5F:B4:29:1F:4D:13:A1:F2:47:DF:B5:3A:22
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/0/D33B838B6A42A35FB4291F4D13A1F247DFB53A22.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.80.0/20
                IPv6:
                  2801:80::/48
                  2801:80:2000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28646

    Signature Algorithm: sha256WithRSAEncryption
         9d:43:61:f4:d9:30:0c:92:55:e2:fa:41:f0:05:23:8b:a6:cd:
         36:5e:62:a2:23:b9:f8:6e:02:7d:46:48:06:06:54:33:db:ea:
         03:46:6e:a6:a8:7b:58:cd:fa:57:c3:73:ac:87:ea:23:35:12:
         76:24:5f:b4:b5:c4:08:0f:48:64:55:8d:20:90:1f:84:9c:8d:
         46:33:19:81:5a:db:fd:03:cf:89:d9:c4:2d:50:0e:59:61:2d:
         b2:f9:8d:da:73:d0:98:a3:8a:62:15:cc:9e:bb:e5:95:48:c6:
         8b:58:be:63:3d:05:d8:aa:9b:8f:16:29:cd:a5:0b:7f:d4:a4:
         12:55:0f:d4:5d:91:50:04:93:58:1d:e6:9f:57:e5:c5:b8:80:
         72:3d:4e:d2:38:f3:23:b6:26:f2:bb:60:49:c5:ab:eb:31:66:
         30:6d:39:8b:2a:6f:22:5a:39:a7:c7:25:54:05:2b:b5:d3:ff:
         d5:c9:a6:ef:c2:4f:64:3e:50:1d:32:11:d2:3a:bc:56:ca:f3:
         c4:5b:c2:58:95:c7:46:47:5b:8a:b4:e4:9b:e0:23:e6:c7:ae:
         27:51:a0:8a:14:f1:8c:cd:43:76:ec:cc:42:a0:1d:0f:c4:37:
         59:5a:72:7b:68:5f:3e:92:2c:3a:f7:e7:be:c2:90:3e:ea:27:
         c1:7d:0d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org