Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D959D60550D2B090C6370A3D59F3C84D80500A88.cer
File:                     D959D60550D2B090C6370A3D59F3C84D80500A88.cer (raw, json)
Hash identifier:          oSkBzW3s55/PH8pfqqoF7gWImX9oZSBSs4hR6brtZdI=
Subject key identifier:   D9:59:D6:05:50:D2:B0:90:C6:37:0A:3D:59:F3:C8:4D:80:50:0A:88
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4B6A15DB116C91454D8C852358E1FE1FBEC10F82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/D959D60550D2B090C6370A3D59F3C84D80500A88.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Apr 2023 13:32:35 +0000
Certificate not after:    Thu 11 Apr 2024 13:37:35 +0000
Subordinate resources:    AS: 267332
                          IP: 45.233.244.0/22
                          IP: 2804:4bd8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6a:15:db:11:6c:91:45:4d:8c:85:23:58:e1:fe:1f:be:c1:0f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 13 13:32:35 2023 GMT
            Not After : Apr 11 13:37:35 2024 GMT
        Subject: CN=D959D60550D2B090C6370A3D59F3C84D80500A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:75:47:dd:bf:c5:e1:c3:5a:5c:88:15:ec:23:
                    4f:34:9d:58:0f:68:3b:06:6e:b2:23:d1:b4:2b:76:
                    76:fd:36:2c:8e:fd:75:b6:b7:ab:38:67:d5:b1:b0:
                    70:14:5d:8b:c6:9e:e9:8c:64:23:34:4a:99:43:58:
                    50:3b:34:1a:f2:98:fe:2e:21:82:e2:92:fc:8e:18:
                    7c:de:eb:21:a1:23:fc:e5:b2:2e:0b:10:06:6f:2b:
                    09:7b:04:ff:35:19:65:3c:dc:03:64:df:34:68:a7:
                    63:54:b4:2f:2c:80:0c:e4:08:40:c0:4c:7c:c6:10:
                    14:08:41:64:79:6f:c0:cc:27:b5:0a:b2:77:f9:f9:
                    c5:8b:70:61:b8:3a:00:0f:8c:b7:c3:33:98:5d:39:
                    96:32:7d:31:b9:45:b7:cc:6d:44:1c:df:42:2c:5e:
                    41:6b:8e:bd:00:d0:32:29:62:8f:09:1d:32:cb:fe:
                    72:25:eb:d0:c3:fb:20:42:10:a0:0c:bd:57:f8:9f:
                    c7:ab:dd:43:2d:4f:97:3d:26:fd:99:a4:77:7c:6c:
                    9b:c6:5d:54:af:b6:9d:a8:a1:fd:19:db:be:39:4c:
                    4c:72:df:39:c0:87:0e:20:11:15:e3:fc:78:3f:49:
                    e8:8d:fe:7d:a2:ba:84:ab:5b:9c:fd:36:77:58:e7:
                    26:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:59:D6:05:50:D2:B0:90:C6:37:0A:3D:59:F3:C8:4D:80:50:0A:88
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/D959D60550D2B090C6370A3D59F3C84D80500A88.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.244.0/22
                IPv6:
                  2804:4bd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267332

    Signature Algorithm: sha256WithRSAEncryption
         75:a8:16:2d:1e:71:ea:cf:f6:0b:64:a8:72:8a:16:72:ad:ea:
         66:06:60:61:fd:b2:cf:54:f0:5d:db:05:04:d3:e0:4e:ab:aa:
         5c:03:99:42:03:34:28:7b:a4:2b:f9:6a:79:6a:ef:11:09:39:
         d2:c7:d9:2c:55:53:52:f0:7f:70:4b:28:f8:72:7d:fa:d1:a1:
         8c:b0:61:d9:b0:56:cd:b1:35:a0:35:2c:97:4d:3c:9e:ba:45:
         2d:f0:3e:d4:4b:28:bb:06:15:7e:8a:22:94:1e:50:b7:cb:6e:
         88:fa:aa:ab:a0:72:87:8a:0a:7e:82:a4:b7:61:51:3a:5b:bf:
         1f:05:d4:67:c9:78:78:40:6c:5b:33:f8:5b:54:e4:30:a1:8b:
         03:18:ce:77:f2:13:b7:72:a7:13:4c:08:6f:a3:c3:ad:39:13:
         f1:42:96:21:8c:76:99:8a:c5:65:7a:ed:e6:76:fe:89:7c:dd:
         66:c6:1e:aa:9a:7f:ca:1a:45:53:97:a7:d9:cd:2b:ac:26:8d:
         ee:e7:36:e9:e8:18:e3:8b:6c:c5:89:b0:95:56:e2:67:f5:d5:
         8a:ec:26:2e:13:f9:ab:c2:b0:30:bf:e7:0e:8e:d4:2a:c3:79:
         10:c0:28:32:8a:66:73:d8:f7:a4:8c:ab:a5:78:25:84:c7:30:
         46:a5:fe:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org