Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D35F81E9E55C4E76424E39703EB07E6238E47B82.cer
File:                     D35F81E9E55C4E76424E39703EB07E6238E47B82.cer (raw, json)
Hash identifier:          jPyazXpj1zezOFy2G40OTwbni3bcs8MJemaHpyxGiT8=
Subject key identifier:   D3:5F:81:E9:E5:5C:4E:76:42:4E:39:70:3E:B0:7E:62:38:E4:7B:82
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       63F1F7E62DF384F13CBB21E43BBC34DD7BCE54FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/1/D35F81E9E55C4E76424E39703EB07E6238E47B82.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Mar 2023 20:41:44 +0000
Certificate not after:    Thu 29 Feb 2024 20:46:44 +0000
Subordinate resources:    AS: 52674
                          IP: 131.161.40.0/22
                          IP: 168.227.236.0/22
                          IP: 177.67.88.0/22
                          IP: 2804:1d40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f1:f7:e6:2d:f3:84:f1:3c:bb:21:e4:3b:bc:34:dd:7b:ce:54:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  2 20:41:44 2023 GMT
            Not After : Feb 29 20:46:44 2024 GMT
        Subject: CN=D35F81E9E55C4E76424E39703EB07E6238E47B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5c:13:fe:eb:20:80:92:8a:06:e6:d9:7f:8e:
                    44:2f:d7:2b:af:72:f2:89:91:82:47:0f:58:32:61:
                    1f:35:d2:db:38:bf:31:26:b5:3a:df:bd:2f:b9:20:
                    f3:ee:2b:e4:ac:16:8a:42:a5:77:39:fd:f7:9d:32:
                    51:33:08:a7:e4:d6:31:c4:2a:fd:62:0c:63:d9:e4:
                    04:a6:2b:9b:79:9e:99:08:a2:d1:fb:ba:57:38:a8:
                    4d:30:28:f2:8f:ba:6b:c0:ac:22:26:03:7c:3a:b3:
                    b4:84:2e:64:1e:7a:7a:43:71:24:56:f2:8c:02:82:
                    e2:a4:60:4d:a5:d7:50:92:2b:b3:37:79:59:7d:37:
                    4f:5d:ec:fb:af:d9:be:78:5f:64:7c:d8:96:4a:86:
                    bb:25:d2:16:68:af:ae:69:94:63:4c:a1:2e:9e:9a:
                    8e:d3:50:72:ce:ad:1c:0d:c1:be:ba:ae:5d:b1:46:
                    9f:4a:50:b5:41:10:29:cd:0b:92:32:24:08:de:21:
                    b8:cd:38:f6:fd:10:de:dd:e5:bb:54:5a:cc:6a:a5:
                    e9:a5:a5:fa:2c:0b:5b:c1:50:e4:2e:f7:2a:2d:48:
                    37:fc:c2:4a:24:39:76:07:2f:96:6c:51:fa:1a:a1:
                    5a:68:66:46:d9:25:8d:f8:0d:b0:10:a1:72:da:fe:
                    e8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:5F:81:E9:E5:5C:4E:76:42:4E:39:70:3E:B0:7E:62:38:E4:7B:82
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/1/D35F81E9E55C4E76424E39703EB07E6238E47B82.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.40.0/22
                  168.227.236.0/22
                  177.67.88.0/22
                IPv6:
                  2804:1d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52674

    Signature Algorithm: sha256WithRSAEncryption
         8b:d6:ef:e7:23:4c:e8:e8:99:24:e3:e9:d9:8e:5d:17:8b:ae:
         23:9e:64:8c:b7:1d:38:d3:1a:ba:be:96:a2:8b:bc:f9:34:f9:
         2c:f9:92:92:f5:12:46:55:12:b8:ec:59:37:5f:d0:94:0d:72:
         64:b7:c5:53:c6:4e:21:72:5d:5d:46:9a:45:ee:7c:16:33:33:
         ec:d9:77:1f:74:65:e0:63:3f:95:e3:5a:06:96:1a:5e:86:c9:
         7f:f3:2b:ed:07:4d:7a:50:95:8c:4c:b4:d7:96:8c:14:9a:2c:
         18:22:f8:d6:ea:a3:3e:90:f8:c3:67:c3:1e:8b:1f:a2:98:55:
         7d:84:86:1a:33:93:14:db:0a:ca:5a:3f:22:91:e5:18:48:68:
         41:92:7c:c5:8a:22:51:f2:d8:43:ff:97:e0:05:32:dc:f1:35:
         f9:4b:3c:9f:8e:55:0c:0d:5c:63:2d:7b:ca:b3:2e:cb:7f:e3:
         e2:65:22:16:a0:7a:3b:47:55:6b:a0:65:1e:2d:98:86:ca:80:
         a9:31:01:f9:f8:ab:d4:1b:34:02:5e:f1:5e:91:e3:29:16:09:
         53:99:9b:b4:21:04:12:b2:05:5d:2d:a1:e2:42:a7:31:2f:64:
         80:74:35:b6:2e:68:7f:64:bf:c4:17:0f:73:98:b3:6b:be:f4:
         3d:f9:22:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org