Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D3CAB97915C0D30D0E7B53C605755C025D209C8D.cer
File:                     D3CAB97915C0D30D0E7B53C605755C025D209C8D.cer (raw, json)
Hash identifier:          po7H9CsxmYN2x0hzZY2M2+9RgyqVS+5G6120kdUd+ws=
Subject key identifier:   D3:CA:B9:79:15:C0:D3:0D:0E:7B:53:C6:05:75:5C:02:5D:20:9C:8D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       71DFB34B586990B4AAB2F3D8848EE79FF6BE440E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/D3CAB97915C0D30D0E7B53C605755C025D209C8D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Jul 2022 22:38:13 +0000
Certificate not after:    Tue 04 Jul 2023 22:43:13 +0000
Subordinate resources:    AS: 266506
                          IP: 170.244.180.0/22
                          IP: 2804:38dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:df:b3:4b:58:69:90:b4:aa:b2:f3:d8:84:8e:e7:9f:f6:be:44:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  5 22:38:13 2022 GMT
            Not After : Jul  4 22:43:13 2023 GMT
        Subject: CN=D3CAB97915C0D30D0E7B53C605755C025D209C8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e3:3c:24:6e:44:5a:62:61:47:7e:b3:11:da:
                    41:90:86:d7:b0:20:cd:df:cd:f1:40:6c:20:cd:a6:
                    7b:39:bc:e8:c2:6b:90:a5:ef:95:26:28:50:53:1b:
                    f7:fb:a9:8a:db:bc:e5:9a:a9:83:47:e1:1c:21:8e:
                    47:4c:11:e3:2b:42:63:46:f9:70:1b:91:bc:ae:0d:
                    0e:24:57:5d:a7:47:77:ff:b9:33:ec:09:1e:a9:18:
                    8a:44:8d:fa:86:cf:83:3f:79:cf:47:62:bb:98:9f:
                    1b:8b:51:28:1a:86:f0:d6:11:f3:91:e5:a0:82:7a:
                    43:28:1a:53:bf:a4:cb:9c:57:aa:54:fa:24:06:88:
                    34:02:1a:4f:2d:f2:8f:65:01:9c:19:6b:b9:8d:b4:
                    7b:8c:b2:f2:24:77:d4:a4:f5:52:d6:c0:c6:73:1b:
                    14:7c:40:19:6f:94:f7:33:e2:f9:13:d3:1e:6c:ae:
                    67:50:0b:41:3a:9c:dc:cb:2e:56:85:80:02:82:d8:
                    a3:69:6c:1d:da:cc:70:63:77:c6:0b:6a:86:15:13:
                    a0:99:c3:31:c2:4a:16:3d:c7:ae:64:05:6e:e6:9f:
                    90:0f:8b:b3:da:96:66:c8:ac:d5:3a:6f:fb:cb:57:
                    46:13:9e:28:ac:6f:16:91:c2:a0:19:75:c3:f9:b0:
                    01:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:CA:B9:79:15:C0:D3:0D:0E:7B:53:C6:05:75:5C:02:5D:20:9C:8D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/D3CAB97915C0D30D0E7B53C605755C025D209C8D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.180.0/22
                IPv6:
                  2804:38dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266506

    Signature Algorithm: sha256WithRSAEncryption
         2f:97:c9:56:b9:81:44:62:5e:15:74:3d:66:70:ed:3b:f7:60:
         aa:e5:a4:79:87:1e:1b:87:17:27:82:a1:56:e1:36:db:b1:53:
         ef:5d:ff:e8:29:63:92:5d:8b:85:ce:59:b0:ab:87:62:e8:5c:
         4a:73:be:1d:d5:aa:33:37:0f:c1:9a:e7:cd:59:fb:df:42:88:
         59:80:e9:43:7b:d9:cc:96:5e:01:18:b7:23:ab:da:14:3a:96:
         2e:aa:de:86:94:89:9f:21:64:8e:e5:4e:f3:de:20:7a:ce:4d:
         84:87:b1:01:86:af:44:0d:49:89:74:03:8f:b5:f3:f5:03:5b:
         b4:e9:ab:16:01:5a:1f:97:db:8b:d5:e0:03:7b:38:9d:d0:12:
         88:38:35:e6:c4:ff:91:05:44:16:72:ff:bc:35:01:fd:da:07:
         8a:14:25:b1:b1:86:31:70:8d:bc:58:3e:02:87:31:a4:f3:45:
         a2:d5:b2:c0:cf:47:1c:b0:16:d1:dd:3b:1d:64:18:e2:97:bb:
         e4:6e:9e:df:ef:f1:24:74:d3:92:91:91:54:ea:f7:0e:f9:ca:
         2f:b9:6e:fd:dc:b1:62:56:24:e3:e2:99:1c:ea:ea:78:49:85:
         99:cd:3e:17:ed:62:5c:75:b4:56:ac:c5:85:14:8f:85:65:29:
         64:8e:25:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org