Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D4CC5012216CF55CD81075FCF31858C2CC43D0A1.cer
File:                     D4CC5012216CF55CD81075FCF31858C2CC43D0A1.cer (raw, json)
Hash identifier:          Bh18xvLR7uy1QMYTgi4s2VkENQX1NGovh+CLf9ddIEw=
Subject key identifier:   D4:CC:50:12:21:6C:F5:5C:D8:10:75:FC:F3:18:58:C2:CC:43:D0:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       10611956D31C39996AA8AEB4AB47800351B489F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/D4CC5012216CF55CD81075FCF31858C2CC43D0A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Aug 2023 23:13:59 +0000
Certificate not after:    Wed 28 Aug 2024 23:18:59 +0000
Subordinate resources:    AS: 269347
                          IP: 45.184.188.0/22
                          IP: 2804:6338::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:61:19:56:d3:1c:39:99:6a:a8:ae:b4:ab:47:80:03:51:b4:89:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 30 23:13:59 2023 GMT
            Not After : Aug 28 23:18:59 2024 GMT
        Subject: CN=D4CC5012216CF55CD81075FCF31858C2CC43D0A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:67:6e:3b:b3:18:10:50:2d:e5:ff:ff:cf:92:
                    33:e7:e3:66:c7:bf:25:39:19:d1:38:ab:2f:ec:29:
                    f3:9c:3f:45:44:86:2f:bb:d5:65:41:ae:0f:e8:59:
                    f8:2a:0a:16:35:f0:ef:af:e6:cc:2f:80:8c:f8:97:
                    bc:80:73:3d:a9:a0:52:5f:e6:d9:91:a0:09:6e:20:
                    3c:73:fb:ae:78:02:e7:ed:a7:c1:65:30:d9:61:08:
                    9d:a4:13:2c:ae:36:87:46:fd:c2:37:36:2f:56:bf:
                    43:1f:2e:00:12:9f:f3:c2:43:b6:3e:a6:be:27:06:
                    f2:c2:db:54:b4:2d:e4:26:d6:1d:91:e2:17:84:ad:
                    f7:a4:1d:de:04:6d:a3:c9:47:c0:a5:31:a9:a3:c3:
                    94:f9:07:e1:06:9f:f2:be:23:d1:e3:60:2c:ba:4d:
                    aa:1f:78:3e:a0:d4:b5:6b:08:4e:91:3a:d4:65:e4:
                    8a:90:44:b3:80:ad:9c:9d:3b:4f:29:1c:a7:0b:c9:
                    c3:b8:ed:da:90:a0:47:37:c7:c3:a3:23:c7:0d:96:
                    e0:f8:c1:22:80:84:cd:00:fe:67:8f:9d:39:e1:33:
                    bd:06:aa:b8:21:21:e7:92:0e:76:a5:f4:c9:c1:63:
                    92:6f:63:76:e9:c6:25:8c:37:e6:0c:0c:0a:1e:ed:
                    4b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:CC:50:12:21:6C:F5:5C:D8:10:75:FC:F3:18:58:C2:CC:43:D0:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FahecLnNNriXCTfJig3zoAzi7BrgMnmPLZ68454ki3Dq/0/D4CC5012216CF55CD81075FCF31858C2CC43D0A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.188.0/22
                IPv6:
                  2804:6338::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269347

    Signature Algorithm: sha256WithRSAEncryption
         69:66:22:e0:be:8b:b4:59:b9:d8:a3:44:15:fe:d6:75:f7:80:
         dd:17:b8:5a:91:9d:e6:36:b5:d6:f9:c9:27:30:44:05:db:07:
         f1:a1:51:c8:d3:93:43:56:64:dd:0d:f9:85:72:68:84:9d:f6:
         89:4d:df:02:9a:f2:33:fc:29:00:77:63:85:a9:5d:ca:0a:be:
         64:f5:6f:5b:4e:7d:6f:cc:24:3b:8c:d4:f9:ff:f4:06:27:86:
         2d:f8:f1:22:2a:05:62:65:20:76:3b:85:d2:9a:a5:62:b9:e6:
         c0:db:11:13:99:1f:a8:e6:fe:ec:bd:b4:87:72:96:e8:d6:2d:
         18:b0:d6:56:0d:6f:f4:a3:e8:7c:d8:29:54:d0:f0:81:11:31:
         95:14:a2:7a:22:03:65:9b:52:5e:33:ff:7f:d2:aa:0f:90:ff:
         f2:15:6e:44:6d:cf:a8:0c:c8:92:63:fe:1d:d3:93:72:72:e2:
         ae:45:b8:c1:e2:fd:92:86:84:d5:84:c7:b5:3c:fd:fd:3f:f0:
         74:6a:89:01:de:e9:a7:f1:4c:1b:ae:4d:d3:3d:70:36:df:b1:
         dd:6f:d8:6a:f6:92:5d:98:f8:02:0a:24:e8:05:73:00:83:55:
         e7:39:83:ea:f8:2b:c0:0b:f5:23:fa:fe:f1:09:b4:a8:33:14:
         af:12:60:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org