Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D3FE378BD4E7B3E9AF1C47D245624178DC4E9709.cer
File:                     D3FE378BD4E7B3E9AF1C47D245624178DC4E9709.cer (raw, json)
Hash identifier:          gpLn4Xpc2QuwkSTZFzQh5d1Z4/cRpX6bZuYUIagUOCc=
Subject key identifier:   D3:FE:37:8B:D4:E7:B3:E9:AF:1C:47:D2:45:62:41:78:DC:4E:97:09
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       19754368543A3300CD6F08FD820209140EE88B1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/0/D3FE378BD4E7B3E9AF1C47D245624178DC4E9709.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 09 Dec 2023 13:22:43 +0000
Certificate not after:    Sat 07 Dec 2024 13:27:43 +0000
Subordinate resources:    AS: 28219
                          IP: 186.236.224.0/20
                          IP: 189.124.16.0/20
                          IP: 2804:29a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:75:43:68:54:3a:33:00:cd:6f:08:fd:82:02:09:14:0e:e8:8b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  9 13:22:43 2023 GMT
            Not After : Dec  7 13:27:43 2024 GMT
        Subject: CN=D3FE378BD4E7B3E9AF1C47D245624178DC4E9709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4b:29:8a:07:a0:61:74:06:4a:02:42:a9:d6:
                    fa:aa:ae:7c:d7:69:7d:ab:7a:12:70:05:ec:f8:b2:
                    b5:87:67:2a:0f:80:6b:42:b0:c5:4f:f8:e6:85:e7:
                    e7:c4:f9:37:a2:d5:f3:6c:82:29:ed:ee:08:46:dc:
                    51:e2:da:16:44:2b:bc:4c:f3:68:82:30:1b:b5:21:
                    ba:3d:64:46:9b:f7:01:e3:63:8c:ee:e9:33:2b:b7:
                    59:0c:02:b6:1a:8d:59:0a:e7:cd:e8:fe:bb:54:5a:
                    26:d6:69:22:e9:24:d9:aa:83:f0:ad:6e:da:29:88:
                    94:32:bd:49:8f:73:ea:ae:f8:1a:63:07:27:d3:dc:
                    72:ff:64:06:77:6a:ed:14:74:71:12:f5:a8:4e:36:
                    6f:84:99:f6:45:62:04:40:4c:39:f3:40:80:3e:99:
                    1b:ea:ed:e1:5c:c5:bf:ac:8d:7c:14:93:16:0f:3d:
                    f7:c7:86:ca:bd:c8:95:02:1a:98:5d:5c:6a:5d:b1:
                    ff:7b:b2:b1:bd:8c:a4:a4:cf:c6:5f:02:44:c8:cc:
                    64:80:05:52:ba:b1:2c:47:30:12:64:06:f7:ca:b1:
                    88:98:1a:39:23:c3:1b:43:4c:3a:e0:fa:62:9b:df:
                    cc:cc:01:bb:38:7c:ac:68:6c:8a:db:27:6d:43:50:
                    ed:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:FE:37:8B:D4:E7:B3:E9:AF:1C:47:D2:45:62:41:78:DC:4E:97:09
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/0/D3FE378BD4E7B3E9AF1C47D245624178DC4E9709.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.224.0/20
                  189.124.16.0/20
                IPv6:
                  2804:29a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28219

    Signature Algorithm: sha256WithRSAEncryption
         1f:dd:c3:9e:73:9e:2a:b9:36:7c:d3:09:cf:10:46:c7:5e:68:
         9c:a4:9c:8c:ef:4c:37:57:70:fe:76:a1:60:17:c7:fc:f4:31:
         18:78:59:fc:6e:78:22:14:96:b8:9b:c8:d0:b2:6c:f7:01:8e:
         3d:44:9a:1d:bd:b4:55:cb:ce:e4:c9:f5:34:93:12:69:51:0b:
         1e:5c:27:f1:1e:b4:d1:9b:12:54:b0:74:2e:2c:ac:26:6f:19:
         1c:39:05:55:8b:6b:24:00:8b:a8:6a:82:c9:50:32:d5:79:55:
         fd:3e:76:3d:20:16:c4:f9:08:e7:4f:41:54:0d:39:fd:1b:f0:
         86:c9:ef:4b:ac:71:a2:34:f0:5f:8c:d5:01:9e:38:33:67:97:
         e2:a9:a5:67:75:d9:f6:38:33:c2:6b:40:22:57:8c:84:7f:74:
         78:54:4d:b7:97:5b:5d:ef:ed:36:b9:6e:27:2f:1e:cb:b4:5f:
         be:14:83:f6:a2:2e:0e:48:99:54:c8:f9:35:2e:93:b4:39:90:
         23:45:f7:c7:1d:48:9e:fe:45:4a:28:81:a7:9d:95:76:e2:fd:
         c3:73:56:b9:bd:ae:3b:a9:97:95:50:3e:1a:30:48:dd:b8:2a:
         e1:8c:4a:e5:8a:2d:fe:be:f6:93:ac:30:0e:76:c0:f2:e8:c6:
         c1:0d:59:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org