Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D9063EFC8FADBB6EDE40B5D4A734BB938D21B77C.cer
File:                     D9063EFC8FADBB6EDE40B5D4A734BB938D21B77C.cer (raw, json)
Hash identifier:          f66j+nQwrJ2uxpkur2w5CzxAuLa7wR5ZGvDR05aYE8g=
Subject key identifier:   D9:06:3E:FC:8F:AD:BB:6E:DE:40:B5:D4:A7:34:BB:93:8D:21:B7:7C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       260A76CC41C7F78EB8991BA30A663E159D77DBD7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/D9063EFC8FADBB6EDE40B5D4A734BB938D21B77C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Mar 2023 18:20:04 +0000
Certificate not after:    Thu 21 Mar 2024 18:25:04 +0000
Subordinate resources:    AS: 266114
                          IP: 45.5.156.0/22
                          IP: 2804:3adc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0a:76:cc:41:c7:f7:8e:b8:99:1b:a3:0a:66:3e:15:9d:77:db:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 23 18:20:04 2023 GMT
            Not After : Mar 21 18:25:04 2024 GMT
        Subject: CN=D9063EFC8FADBB6EDE40B5D4A734BB938D21B77C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d8:59:f7:06:f2:34:52:7e:ca:dd:5d:9e:47:
                    16:68:de:21:f5:4d:fc:df:40:3e:2e:d0:02:95:c7:
                    f2:08:6d:c9:95:fd:c3:cf:3f:f0:45:e5:df:cb:3a:
                    7c:4e:5e:c8:e0:5d:24:c6:4d:a0:ac:5b:1b:7f:97:
                    cf:c6:6c:99:e3:03:fa:62:dd:81:c6:aa:9d:26:75:
                    c7:83:c0:25:8c:36:cb:8f:9d:d5:30:68:c7:80:fa:
                    69:90:6e:3b:ea:4f:d4:b7:fc:aa:7d:43:06:24:0d:
                    89:f0:52:49:49:ad:a0:a7:9d:59:f4:6b:cf:ae:13:
                    4d:6d:e5:a5:cc:05:71:cf:21:7d:9b:98:3c:d2:ea:
                    f0:c6:a4:f3:00:b3:ef:c9:f7:23:35:27:2d:ee:c7:
                    89:91:f6:ab:53:cf:f6:57:f9:18:5a:6c:60:4f:90:
                    7a:05:eb:0d:19:ab:d6:e8:81:9e:60:3d:d4:b1:7b:
                    7a:4d:cb:d6:b1:d5:66:34:92:6c:b7:1d:44:ca:ae:
                    64:13:c4:8d:e9:aa:20:8e:24:b8:72:40:4b:4d:b2:
                    88:bf:2e:c7:6a:ab:0f:0d:e8:de:6a:ab:80:89:70:
                    f2:b5:af:53:76:9f:5e:58:d4:e5:9c:28:77:8d:8f:
                    30:54:9e:27:1c:a7:c9:24:f9:61:85:00:4c:0b:0e:
                    df:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:06:3E:FC:8F:AD:BB:6E:DE:40:B5:D4:A7:34:BB:93:8D:21:B7:7C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/D9063EFC8FADBB6EDE40B5D4A734BB938D21B77C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.156.0/22
                IPv6:
                  2804:3adc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266114

    Signature Algorithm: sha256WithRSAEncryption
         24:e6:fb:1d:0c:64:3f:29:72:70:8d:40:bd:5b:f0:e6:39:56:
         04:c3:cd:e2:5b:6c:0c:38:e6:ad:67:2e:40:66:90:f3:c9:e8:
         b5:21:d0:2b:1e:7f:dc:55:08:b0:07:74:bd:0a:e5:af:d4:ca:
         dc:1d:3e:d9:53:a3:d8:75:d7:ec:67:5d:c0:83:8d:7a:81:66:
         a8:d3:aa:74:f9:ec:2e:d7:c0:4b:7b:e2:f4:0e:15:24:0e:00:
         64:05:b6:6a:8c:b7:ef:7f:89:95:50:54:dc:8c:6d:3f:81:72:
         27:5e:d0:69:b5:65:9e:3d:97:ab:de:18:6d:7d:20:1d:aa:be:
         34:3e:af:1c:51:9d:26:a4:7f:3f:6b:25:82:58:87:62:da:2b:
         a4:4a:6e:09:69:fa:2e:76:88:88:4b:b5:a9:a6:02:56:d9:22:
         41:4c:fa:1e:0e:2b:6b:c7:d5:46:f2:10:aa:ad:31:5b:15:80:
         78:25:f5:0a:62:03:d0:48:cd:1e:0b:db:bf:9c:50:09:9a:e6:
         45:39:71:2a:8b:1e:61:3d:b1:1d:9a:c4:94:ab:48:73:9e:9c:
         98:99:e2:28:8b:09:88:ec:2c:ef:41:d4:19:61:8c:11:1c:9e:
         21:ee:e6:88:bd:33:11:2d:d3:be:8f:36:a8:5c:26:07:4a:eb:
         e9:28:b7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org