Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB.cer
File:                     D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB.cer (raw, json)
Hash identifier:          houKAUVsBVhvRvfs/0wcaDBANvm6z/wFpxpZneRi2vU=
Subject key identifier:   D8:08:0D:58:CE:4D:30:EF:B1:40:7E:8D:ED:ED:B0:2B:3C:C9:6C:DB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       49D86E83643ED3958F05594F723982594D25CD93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jan 2022 00:55:38 +0000
Certificate not after:    Thu 19 Jan 2023 01:00:38 +0000
Subordinate resources:    AS: 28329
                          IP: 177.107.32.0/19
                          IP: 179.96.0.0/17
                          IP: 186.226.64.0/19
                          IP: 189.50.112.0/20
                          IP: 2804:39c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d8:6e:83:64:3e:d3:95:8f:05:59:4f:72:39:82:59:4d:25:cd:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 20 00:55:38 2022 GMT
            Not After : Jan 19 01:00:38 2023 GMT
        Subject: CN=D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:39:0d:2e:69:a1:5f:2a:5a:4c:dd:e4:98:
                    47:38:4a:5f:f0:bd:c8:de:13:b9:88:99:cd:da:c4:
                    2d:e4:85:d1:1f:61:3e:38:94:48:9c:1e:28:b6:22:
                    54:68:8d:46:5f:41:77:80:51:33:7e:6e:95:73:4e:
                    18:14:55:d4:31:b8:cb:af:c2:37:66:21:6c:f2:bc:
                    49:55:72:f8:f3:64:18:dc:cc:a6:ba:ef:ad:58:b2:
                    2d:4a:8a:a7:11:50:5f:4f:ab:bd:ce:c1:b4:ac:4d:
                    21:df:6f:0d:d9:2f:30:6b:e3:eb:ff:71:1a:35:ee:
                    7c:63:de:a1:f3:e2:1f:be:f8:ae:c6:cd:15:a7:8c:
                    4c:08:6c:58:76:3d:2a:9d:4d:83:e9:0d:9a:92:c9:
                    5d:c3:d8:fc:88:ca:3a:26:36:cf:d0:6b:61:67:50:
                    48:2a:3f:b8:e9:62:ca:3e:ad:52:7d:ff:4b:3f:a6:
                    2f:7a:39:c7:ca:d2:09:66:57:32:bc:e6:a4:36:3a:
                    cd:d0:c3:f0:fe:49:ba:7f:34:94:f4:74:56:d9:8f:
                    30:7c:49:e1:a3:d3:d3:95:96:95:ac:b9:fa:98:a6:
                    a2:9f:b8:07:d9:25:f2:25:be:52:08:f3:b1:82:54:
                    ac:0c:bf:d0:a0:83:54:cb:2c:0b:0a:b2:00:d9:94:
                    95:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:08:0D:58:CE:4D:30:EF:B1:40:7E:8D:ED:ED:B0:2B:3C:C9:6C:DB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GLNM8BgNKkYHBHHn1xjjcaWTyxCyrHY7YN2sbVeMj5zd/0/D8080D58CE4D30EFB1407E8DEDEDB02B3CC96CDB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.32.0/19
                  179.96.0.0/17
                  186.226.64.0/19
                  189.50.112.0/20
                IPv6:
                  2804:39c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28329

    Signature Algorithm: sha256WithRSAEncryption
         21:e1:f0:65:e7:77:27:2d:78:67:6f:59:97:e6:2f:71:e3:34:
         7d:bf:05:07:b1:09:22:44:59:cc:c7:8d:d1:b6:4b:d8:dd:ef:
         8d:c0:a2:f3:86:53:9e:9f:5e:49:6c:99:ce:46:ee:81:45:83:
         36:0a:fe:0a:73:d2:88:94:90:38:af:94:53:79:07:8d:19:02:
         ea:9f:87:0d:7e:fa:51:8e:42:5b:b4:ae:d1:6e:8b:98:76:a7:
         50:dd:83:cd:eb:07:97:a4:ed:cc:71:ba:a7:32:d3:da:de:cc:
         8f:9a:68:65:ba:e9:1f:73:56:21:91:5b:5c:bb:ea:d9:28:dd:
         6d:77:e9:98:d7:0e:f5:15:39:b8:30:d5:60:64:58:0f:35:c7:
         60:57:d8:3f:89:bb:27:72:d7:0f:db:85:9f:84:54:11:a9:1d:
         0d:23:70:bd:ca:0b:69:f6:17:e4:33:ee:d2:ce:eb:23:48:db:
         66:a7:7c:37:6e:18:3c:00:ee:78:3e:26:2d:90:d1:3d:89:f6:
         7a:2d:4c:46:d0:64:b1:78:06:cb:80:97:20:44:72:66:88:4c:
         65:99:03:3d:9d:30:f4:28:b3:72:d4:de:85:ec:f9:71:01:1a:
         c5:1d:64:e6:ba:f1:00:08:06:87:1e:07:06:ef:e9:0d:46:c5:
         57:e7:01:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org