Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9.cer
File:                     D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9.cer (raw, json)
Hash identifier:          wFLfnDYYL6BZKPV2uKwyJu8SmeIWFHUGHUry1zabASo=
Subject key identifier:   D6:C2:23:F2:35:2F:0D:FB:6A:59:72:27:5D:CA:2F:3C:94:71:A7:F9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2A4DD0A99A5F005A09567DBCD0BD1405ECF316F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/0/D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Nov 2023 09:03:24 +0000
Certificate not after:    Wed 20 Nov 2024 09:08:24 +0000
Subordinate resources:    AS: 264412
                          IP: 131.221.104.0/22
                          IP: 2804:1e2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4d:d0:a9:9a:5f:00:5a:09:56:7d:bc:d0:bd:14:05:ec:f3:16:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 22 09:03:24 2023 GMT
            Not After : Nov 20 09:08:24 2024 GMT
        Subject: CN=D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ea:a5:5c:89:cd:4e:19:cb:93:5c:0b:d1:a7:
                    ce:b0:f0:24:bd:bd:3a:f1:d8:57:ae:99:f4:d8:34:
                    31:e4:a7:99:ca:4e:4f:e1:5f:f3:87:f5:21:44:3e:
                    60:72:0b:09:47:2c:71:8a:f6:2d:b0:27:72:81:22:
                    b9:76:8f:5e:5c:54:76:d3:72:ce:75:8b:ed:77:5f:
                    bb:67:0d:81:33:1a:ee:3b:78:10:fb:d1:21:07:b8:
                    82:03:fc:87:ad:65:7f:a8:83:26:0f:3c:b9:21:47:
                    e5:c1:06:c8:77:fa:4d:22:1e:47:94:2b:75:e7:0b:
                    62:98:ae:05:7c:09:da:e3:6c:2c:23:8f:4c:29:a8:
                    89:6e:af:92:c2:32:73:83:e3:ec:37:26:7e:e6:b4:
                    c5:81:fe:e5:25:d0:47:02:7b:65:3f:68:05:fe:53:
                    c1:ee:8c:2c:bd:5d:e6:36:72:cf:3c:ff:e2:8d:a9:
                    ce:cb:9f:bc:fe:8b:7c:d8:ae:1f:db:1d:30:ba:a7:
                    48:aa:a9:ac:2d:ba:60:07:9c:18:a9:bf:aa:08:5c:
                    ea:bc:57:f0:ba:ff:fc:33:e3:74:ec:ca:07:7e:10:
                    32:65:49:49:42:86:69:fa:7d:9c:d5:0c:3d:84:ce:
                    ad:9f:98:b1:52:26:63:27:51:41:7b:1a:d1:16:d9:
                    70:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:C2:23:F2:35:2F:0D:FB:6A:59:72:27:5D:CA:2F:3C:94:71:A7:F9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/0/D6C223F2352F0DFB6A5972275DCA2F3C9471A7F9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.104.0/22
                IPv6:
                  2804:1e2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264412

    Signature Algorithm: sha256WithRSAEncryption
         26:47:82:61:64:c0:2a:45:ce:ac:79:c7:e4:c7:7a:78:f3:8b:
         ff:7d:21:2a:56:a3:10:47:fa:6f:8b:4d:3a:71:af:64:7a:c5:
         61:0b:c6:1e:33:f0:42:df:8a:fc:37:1e:25:7c:be:44:5a:7b:
         e0:ab:71:d9:5f:b7:0f:52:01:db:4c:b1:8c:fc:25:d9:1b:18:
         18:d1:d3:2c:4b:00:38:0e:40:57:9a:2c:70:d6:da:0f:de:a4:
         65:a1:3c:ba:0c:7e:7d:c3:f4:d6:12:33:bb:e1:b9:d5:68:af:
         8c:fa:3a:d0:2a:f0:36:81:10:77:9e:3e:3b:c3:8b:f7:f2:8f:
         86:03:8c:1a:1b:70:10:3e:80:e4:14:15:b7:47:3d:f4:43:d2:
         38:06:80:fa:ca:6b:ee:19:be:a8:23:ee:31:d3:73:16:99:8a:
         ee:29:09:c3:28:16:a7:d1:b8:44:29:9d:58:0f:d9:9d:d7:02:
         0a:66:30:86:cf:f9:0a:95:cb:09:2b:78:b9:bc:84:6b:b2:87:
         46:c8:cd:5f:d1:8e:c1:b7:cb:1a:96:98:9c:c1:80:65:0a:93:
         b3:ba:bf:13:bf:97:8a:53:08:76:b0:ff:43:14:ab:9b:45:3b:
         bc:33:8b:6d:d8:fb:90:2a:bb:65:25:66:3e:af:58:65:f9:39:
         f6:9a:e1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org