Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D7A9D56F45D6BBAD4DAF0428C9A035604518655C.cer
File:                     D7A9D56F45D6BBAD4DAF0428C9A035604518655C.cer (raw, json)
Hash identifier:          AE/OZMZW6kVBZP8g3iwmXmibmsKxbZd5ICw4gKRqKWU=
Subject key identifier:   D7:A9:D5:6F:45:D6:BB:AD:4D:AF:04:28:C9:A0:35:60:45:18:65:5C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0ECF65DC65DA479FF53CA808D470908CF775DC64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/D7A9D56F45D6BBAD4DAF0428C9A035604518655C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Mar 2024 17:00:00 +0000
Certificate not after:    Tue 25 Mar 2025 17:05:00 +0000
Subordinate resources:    AS: 272449
                          IP: 2804:815c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:65:dc:65:da:47:9f:f5:3c:a8:08:d4:70:90:8c:f7:75:dc:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 26 17:00:00 2024 GMT
            Not After : Mar 25 17:05:00 2025 GMT
        Subject: CN=D7A9D56F45D6BBAD4DAF0428C9A035604518655C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:75:c8:8f:e3:e9:73:f5:e9:fc:d5:ff:ed:c3:
                    5e:7c:7f:fb:d8:a6:2e:a0:b5:5c:17:bb:e7:74:bf:
                    ed:31:f0:7e:36:51:d9:56:9f:59:8a:38:8b:c8:4b:
                    73:f2:7c:f9:94:6a:23:c9:60:86:1e:7f:97:e6:a0:
                    ae:cc:15:4e:d5:d5:ff:0a:67:04:9f:a1:1d:e0:89:
                    2d:ae:8c:6a:de:15:91:0e:de:be:a9:29:b9:b7:b4:
                    2b:ed:57:42:49:f0:e6:b4:fe:75:8f:f0:c0:32:2c:
                    a5:67:1a:ec:9a:cc:f4:72:ad:eb:40:85:57:b6:c6:
                    97:5d:15:16:a4:6f:77:e8:e1:36:94:3e:4e:b3:f7:
                    d4:0c:60:f1:71:8d:3d:e3:76:c6:ba:03:bf:52:2d:
                    fd:76:50:5f:e8:43:e2:28:a2:f7:d2:7c:82:5e:9e:
                    2e:d6:8d:d2:5f:18:1c:0b:dc:98:64:c8:b4:b8:be:
                    bb:26:d1:9c:55:b1:12:3e:e9:cc:fc:d7:46:49:88:
                    61:0c:8f:6a:d4:11:9a:1a:97:c7:d7:fd:bc:36:4d:
                    5f:39:85:e6:15:fe:9d:cc:b3:cb:ff:b9:83:b8:60:
                    64:78:68:81:89:ff:98:ab:8a:e4:56:4f:55:bb:8b:
                    47:0e:30:ce:c8:ce:7a:4d:d9:a0:26:bb:7d:28:59:
                    ad:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:A9:D5:6F:45:D6:BB:AD:4D:AF:04:28:C9:A0:35:60:45:18:65:5C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/D7A9D56F45D6BBAD4DAF0428C9A035604518655C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:815c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272449

    Signature Algorithm: sha256WithRSAEncryption
         31:67:9f:7a:dd:d9:13:00:dc:7a:dc:09:fc:19:77:c0:88:46:
         31:1f:6e:eb:49:e8:71:37:ef:38:ff:5a:36:5d:3a:87:1a:44:
         b9:77:71:28:1a:82:33:74:74:b5:71:7b:7c:98:d0:b5:b7:19:
         d8:95:cb:7a:79:fb:ed:f5:cf:75:31:aa:51:fd:cb:1c:2e:7c:
         f0:39:55:91:d7:76:64:e8:49:3b:9a:33:3b:1a:3d:c0:71:40:
         56:57:32:9e:d0:78:8c:28:db:ce:63:5d:c9:db:c8:ba:da:90:
         7b:1a:8f:cb:2c:81:1f:53:85:62:a1:94:d7:09:9e:c2:71:51:
         36:d7:4a:dc:3d:3f:47:75:eb:10:2d:6a:3a:ff:84:c4:45:e5:
         77:38:f4:c4:2c:26:f5:ce:9f:8f:e0:ed:fa:0f:88:ee:1f:4e:
         17:81:e6:3c:b0:80:6a:cb:a1:0b:7c:c2:ce:f3:97:47:3b:94:
         52:69:84:58:63:b3:6f:35:44:d4:23:18:a8:15:67:3a:90:4f:
         a5:05:aa:ff:ca:01:59:6c:5e:a4:5c:67:31:c3:50:bd:ca:db:
         c6:cb:55:1d:11:51:3a:a5:e6:30:42:ae:ec:f1:73:a3:32:02:
         08:3a:51:7e:d9:4e:a5:a6:d6:8d:2e:bf:77:9e:d4:8e:0c:17:
         16:4c:d7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org