Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D85200B38B49C68D1D0BF6CACDC2C7F14E042C44.cer
File:                     D85200B38B49C68D1D0BF6CACDC2C7F14E042C44.cer (raw, json)
Hash identifier:          sjhQE5vuJw2Z1O5TAO4QXxvA8bbeAjwMOcnIyBnzXQg=
Subject key identifier:   D8:52:00:B3:8B:49:C6:8D:1D:0B:F6:CA:CD:C2:C7:F1:4E:04:2C:44
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       78D71745D336807390B602CB6AA6F3F307D2E089
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/D85200B38B49C68D1D0BF6CACDC2C7F14E042C44.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Jun 2023 18:45:15 +0000
Certificate not after:    Wed 12 Jun 2024 18:50:15 +0000
Subordinate resources:    AS: 52995
                          IP: 177.47.224.0/20
                          IP: 177.93.248.0/21
                          IP: 2804:4d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d7:17:45:d3:36:80:73:90:b6:02:cb:6a:a6:f3:f3:07:d2:e0:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 14 18:45:15 2023 GMT
            Not After : Jun 12 18:50:15 2024 GMT
        Subject: CN=D85200B38B49C68D1D0BF6CACDC2C7F14E042C44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:30:51:27:bf:7b:34:d5:92:b2:62:9c:eb:
                    ff:24:40:d8:5e:e8:5f:73:2b:e8:2f:23:6a:9a:8d:
                    c9:59:da:36:57:17:d2:0f:97:78:4c:4e:29:3d:a2:
                    a7:ed:2d:6d:eb:f2:67:e6:fe:27:4e:df:0f:14:28:
                    0d:ae:5b:59:7c:94:30:b5:0f:ae:53:b1:8b:c3:d5:
                    08:66:36:27:df:42:ec:37:07:a2:97:3a:c5:89:b1:
                    98:d1:e3:11:9e:08:48:aa:5a:19:7a:92:7c:e1:bb:
                    e2:b4:97:cb:69:3a:80:7e:05:1d:43:ef:20:17:87:
                    4c:4c:13:91:96:7c:9f:2d:4d:af:30:8b:26:5e:6c:
                    8a:48:05:77:b6:9b:cb:0d:31:96:4a:b6:e7:4f:68:
                    af:17:c6:12:51:d1:ca:31:96:cf:e9:3f:4f:19:b4:
                    83:42:2c:33:02:ae:a4:dc:7e:18:16:5b:5b:4f:94:
                    ea:bb:50:5c:a8:45:ce:c1:67:62:7c:ab:f1:b5:65:
                    72:2c:eb:6a:9e:1d:fb:26:3f:82:fa:5a:62:7d:b4:
                    1e:d7:00:13:79:8f:29:d3:75:52:d0:ed:99:2d:b8:
                    03:37:35:d8:26:37:0f:37:36:12:18:d7:ba:6e:70:
                    b0:32:13:bc:1a:72:40:4d:fb:60:5d:2d:fb:bb:16:
                    d2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:52:00:B3:8B:49:C6:8D:1D:0B:F6:CA:CD:C2:C7:F1:4E:04:2C:44
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/0/D85200B38B49C68D1D0BF6CACDC2C7F14E042C44.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.224.0/20
                  177.93.248.0/21
                IPv6:
                  2804:4d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52995

    Signature Algorithm: sha256WithRSAEncryption
         68:f1:f5:08:d6:76:2d:5b:cb:03:7e:73:00:c0:3f:67:23:08:
         ca:91:b4:df:fa:7c:91:fd:47:0d:42:16:01:92:5f:06:d9:c5:
         34:b1:be:a5:a7:81:af:d9:1a:fd:54:fd:dd:ed:bc:16:40:0b:
         1a:ce:c4:3c:90:d4:0a:3f:de:55:21:b4:79:e4:72:a5:53:a3:
         29:13:04:10:da:0e:48:3a:1c:09:15:08:4e:85:b9:f3:4a:32:
         cb:08:83:1d:c1:f2:16:3d:d4:da:77:00:06:97:0c:dd:5e:c7:
         02:1d:91:7c:3d:b2:b6:76:d3:07:f6:ed:e7:f9:be:0c:34:85:
         69:5a:27:1b:fd:56:24:d9:ae:fe:8c:2c:27:12:0c:98:e4:7c:
         2f:12:56:e6:e6:36:fa:56:66:eb:af:ff:69:33:79:84:c2:9f:
         4a:72:26:ac:c2:1b:68:87:f5:b9:ff:e6:0f:04:9a:45:e3:f6:
         4a:bd:eb:ce:bc:d0:f6:50:3d:71:d7:b7:10:13:a9:27:cb:e3:
         3c:10:01:a7:9b:5d:e8:90:e0:20:04:6b:24:d0:5f:7e:51:e8:
         e0:63:77:20:89:ec:96:a9:d9:92:c6:17:81:7d:a4:c1:58:5a:
         20:2a:37:ec:c8:3d:32:14:fb:0c:fd:df:5c:bb:69:69:37:1b:
         09:af:6e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org