Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D4D2D03BB0E0D92A8010CD63338C3A77C1FC457F.cer
File:                     D4D2D03BB0E0D92A8010CD63338C3A77C1FC457F.cer (raw, json)
Hash identifier:          YYMRN6KwsmqNSdkliOnfgF/lZltB16wXMg3NYzsuzJo=
Subject key identifier:   D4:D2:D0:3B:B0:E0:D9:2A:80:10:CD:63:33:8C:3A:77:C1:FC:45:7F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3DB614801E78BDECB3CF909D9BB53DD32EC4A101
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/D4D2D03BB0E0D92A8010CD63338C3A77C1FC457F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jan 2022 02:25:54 +0000
Certificate not after:    Tue 24 Jan 2023 02:30:54 +0000
Subordinate resources:    AS: 264137
                          IP: 138.97.96.0/22
                          IP: 170.0.220.0/22
                          IP: 2804:2304::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b6:14:80:1e:78:bd:ec:b3:cf:90:9d:9b:b5:3d:d3:2e:c4:a1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 25 02:25:54 2022 GMT
            Not After : Jan 24 02:30:54 2023 GMT
        Subject: CN=D4D2D03BB0E0D92A8010CD63338C3A77C1FC457F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3a:d8:35:50:a9:9a:80:56:46:cc:f8:72:92:
                    e1:15:ed:17:24:14:1a:39:03:9b:90:76:0a:19:4c:
                    b1:cb:dc:86:62:b5:cd:5a:eb:42:8d:cc:12:79:cc:
                    4c:69:40:68:2e:0f:37:33:4e:39:aa:38:35:79:a4:
                    b6:89:fc:c4:4f:af:f3:15:7e:3a:af:56:90:6d:ec:
                    b0:2c:79:80:3e:94:19:15:75:a7:ec:fe:52:23:e7:
                    66:48:ab:5c:26:47:74:42:eb:2e:91:8a:22:db:31:
                    58:16:4a:4b:f1:86:ed:9f:0e:60:50:f2:63:fa:36:
                    11:ec:5f:72:e4:0f:2b:d3:07:46:e8:64:46:e7:ed:
                    83:fa:81:e2:cc:2c:e6:b6:4f:7b:81:c0:e6:59:01:
                    6f:29:b4:45:bf:9b:f1:e6:1f:04:1c:e9:40:5d:38:
                    ef:1f:e2:7b:92:b6:4e:6e:16:5a:46:d8:fd:0a:3d:
                    f7:00:2a:e1:62:f4:f8:21:04:f8:81:4e:3e:f8:2b:
                    9c:bc:82:d1:f1:91:44:f6:3a:ca:55:1b:dc:3e:cb:
                    0c:1a:a9:9d:4d:aa:ad:bf:10:95:41:1e:be:e5:fb:
                    aa:3a:63:71:2e:25:29:41:a5:0d:5e:23:a2:65:34:
                    61:7c:9d:5b:fc:81:35:51:5a:1f:e8:23:72:b0:20:
                    52:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:D2:D0:3B:B0:E0:D9:2A:80:10:CD:63:33:8C:3A:77:C1:FC:45:7F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/D4D2D03BB0E0D92A8010CD63338C3A77C1FC457F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.96.0/22
                  170.0.220.0/22
                IPv6:
                  2804:2304::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264137

    Signature Algorithm: sha256WithRSAEncryption
         54:c9:44:0d:22:6c:9c:dd:97:7a:1d:00:3b:bf:5a:07:2c:2b:
         fe:07:2a:60:71:c2:a2:4b:84:54:3a:07:ca:89:b5:01:97:c9:
         dd:60:47:0b:13:d8:b0:6e:69:2c:f1:78:ec:82:1a:64:0d:e9:
         85:a6:c7:e2:f2:11:b5:06:71:5f:03:fd:79:c0:58:08:20:98:
         bf:31:d3:e4:10:4b:3b:40:4a:13:14:81:cb:5a:36:9d:26:b0:
         f4:20:e6:fd:af:b2:19:ec:53:65:9c:26:24:75:d2:75:00:9a:
         c2:66:4b:1d:87:17:ab:f9:f6:eb:c8:e4:9d:73:30:bf:e7:55:
         06:29:47:20:b2:b3:15:c1:49:5b:00:88:ce:da:81:34:5e:24:
         8c:4b:dc:51:37:10:65:93:d7:3a:c0:b8:0a:ac:32:21:01:5a:
         b2:f6:90:0c:ab:48:f8:d4:c5:29:50:7c:f0:a5:18:dd:7c:a1:
         29:14:07:e4:82:ed:80:7e:4c:eb:ae:d0:97:cc:74:2d:9a:a8:
         5d:f8:c3:45:f2:23:6f:e6:a6:52:f3:70:2c:ee:74:1c:a4:2d:
         6f:f5:cd:8d:62:a3:f5:d1:ef:f0:64:d6:e9:86:13:6f:df:81:
         4d:fa:95:59:bf:47:0a:25:75:be:08:55:d6:17:5d:05:55:83:
         ca:bb:04:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org