Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D734736DE25120E6797606BF75F2DB44E938B286.cer
File:                     D734736DE25120E6797606BF75F2DB44E938B286.cer (raw, json)
Hash identifier:          HuNVYWWbtP2u+28oCnzQMma7xb/j/7bGmfz6j2S1xbc=
Subject key identifier:   D7:34:73:6D:E2:51:20:E6:79:76:06:BF:75:F2:DB:44:E9:38:B2:86
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       14D06D899A9B85FBA36CA6CDA171DA0F48FD3C31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/D734736DE25120E6797606BF75F2DB44E938B286.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Mar 2024 17:49:17 +0000
Certificate not after:    Fri 21 Mar 2025 17:54:17 +0000
Subordinate resources:    AS: 264197
                          IP: 138.97.148.0/22
                          IP: 2804:2404::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d0:6d:89:9a:9b:85:fb:a3:6c:a6:cd:a1:71:da:0f:48:fd:3c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 22 17:49:17 2024 GMT
            Not After : Mar 21 17:54:17 2025 GMT
        Subject: CN=D734736DE25120E6797606BF75F2DB44E938B286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:82:9f:07:0c:60:d9:dc:15:d4:07:24:cd:80:
                    66:ba:03:92:10:46:9b:83:6b:e2:2d:45:24:39:b2:
                    f2:d0:84:47:8f:6e:6a:0b:74:e3:6a:2d:18:80:ca:
                    dd:e9:b5:42:bd:2b:dc:bf:07:6e:9e:16:bb:6a:38:
                    23:14:01:ce:52:c9:8b:75:60:4c:d9:0e:92:35:77:
                    9a:d4:5a:30:12:44:6b:5c:9c:9c:0e:f4:62:0d:cf:
                    31:99:c6:cc:47:70:99:28:3b:e0:62:91:6a:51:42:
                    44:50:3b:54:ae:5e:a3:6f:a6:cf:64:cb:b3:f9:30:
                    8c:17:1e:88:05:38:80:de:9a:60:47:01:e4:c0:c3:
                    ea:71:37:4d:1f:10:77:81:ed:fb:2a:1c:c1:f0:8a:
                    80:b0:88:4a:d2:14:0f:1a:65:07:90:65:02:23:f9:
                    36:4e:b5:b7:14:c9:50:4d:73:dc:5f:68:f4:6d:a5:
                    2f:bc:c8:69:93:1b:a9:b2:94:21:01:60:22:4f:6c:
                    f2:0d:0f:a2:17:2b:4a:9f:77:5b:6e:e1:ac:69:12:
                    02:00:06:10:50:8a:47:ed:1a:a3:9a:4a:2d:65:12:
                    4b:38:50:aa:ce:69:57:9b:63:39:21:d3:0f:bc:8c:
                    f6:21:ac:5b:c5:df:f8:a8:ca:8b:ad:39:88:86:26:
                    75:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:34:73:6D:E2:51:20:E6:79:76:06:BF:75:F2:DB:44:E9:38:B2:86
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/D734736DE25120E6797606BF75F2DB44E938B286.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.148.0/22
                IPv6:
                  2804:2404::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264197

    Signature Algorithm: sha256WithRSAEncryption
         79:be:8d:86:b6:99:ac:17:d0:52:bd:03:94:f9:01:4c:1b:f0:
         80:ca:04:57:b4:8e:73:0d:90:66:6f:5a:a0:55:16:4b:84:c8:
         cb:f7:2f:ad:aa:5c:f9:8d:11:d4:a3:ff:e6:c4:5d:41:fa:9b:
         57:29:e0:1b:ec:e5:e9:b5:6a:05:20:13:c1:8f:e6:62:1e:64:
         b8:56:dc:df:ea:61:73:6b:80:13:d8:42:36:86:49:fe:3f:5f:
         70:32:4e:1b:be:b2:ff:bf:6e:75:47:db:13:fd:49:80:26:6d:
         ab:1a:d0:ef:9d:83:75:1b:de:e1:07:1c:5c:84:a0:5d:f7:b6:
         43:b1:e2:1b:fa:42:b6:54:70:4d:c3:f2:4e:8f:a8:46:82:6f:
         f3:fd:f7:fd:ec:be:51:9d:53:db:52:8a:d5:cd:38:5d:71:03:
         3f:12:ce:bc:28:be:e9:84:a2:a1:86:fd:ce:55:6c:3d:9e:8a:
         f0:f4:b2:f5:b5:df:e1:cb:cb:20:b3:75:50:44:57:a2:c8:68:
         0c:ed:ab:d6:4b:9a:57:99:31:b9:77:b1:0f:64:6a:4d:9a:41:
         54:62:bf:0f:32:55:59:a3:88:cb:33:09:81:44:f0:78:e8:cb:
         ba:82:6f:82:f4:86:66:a1:97:29:20:09:87:62:ae:9e:29:e2:
         d5:65:0e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org