Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C.cer
File:                     D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C.cer (raw, json)
Hash identifier:          Yr+fHDR33sp7HoBRIeGlSrPImxRNvJm7X19tuZqSGZg=
Subject key identifier:   D9:74:53:74:31:9A:27:DE:FA:4D:DB:18:A5:F3:FB:09:FC:93:FC:9C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1915B86160C5889A72AEAE37E975128F70830E6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Nov 2023 13:10:47 +0000
Certificate not after:    Thu 14 Nov 2024 13:15:47 +0000
Subordinate resources:    AS: 263902
                          IP: 138.204.52.0/22
                          IP: 2804:2774::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:15:b8:61:60:c5:88:9a:72:ae:ae:37:e9:75:12:8f:70:83:0e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 16 13:10:47 2023 GMT
            Not After : Nov 14 13:15:47 2024 GMT
        Subject: CN=D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0a:db:36:72:30:da:bb:bf:4b:1c:1e:86:18:
                    a7:16:3e:4a:2d:e5:b2:34:00:e3:c8:88:2b:47:e1:
                    b2:4b:59:45:45:07:00:67:ba:da:66:ad:96:75:b8:
                    55:f4:b5:97:e2:6d:f5:6b:0e:27:c5:fe:5b:49:b9:
                    e4:82:c0:ac:8e:0c:1b:ed:ed:c0:08:c6:e0:cc:69:
                    fb:66:5e:5d:b5:88:0b:0e:23:d4:6d:5d:12:6f:be:
                    5b:19:db:ee:02:87:03:23:86:63:6b:24:89:7e:1c:
                    66:32:f0:b3:01:72:05:d9:3b:f4:e1:ba:68:43:07:
                    48:9d:83:b8:55:23:de:79:7c:b3:cd:cc:c6:e9:76:
                    76:6e:76:37:40:a9:dc:5a:14:eb:28:23:83:80:ba:
                    46:a5:07:47:41:dc:98:8b:65:40:8f:80:8f:a4:e4:
                    c2:6e:86:b7:95:f2:dc:e1:d9:61:41:47:75:da:b7:
                    05:a9:78:e6:3f:92:36:50:72:84:96:c6:34:d6:fd:
                    69:25:c7:8e:b7:6a:b9:e7:f9:ee:0b:a4:a8:35:1c:
                    ba:6e:f6:8b:c3:de:10:4d:9d:75:42:d5:ba:83:05:
                    16:3f:2f:e5:07:e7:17:b7:e9:d2:ff:04:9c:62:9f:
                    39:80:b4:10:4e:85:cd:ac:d3:d7:0d:9a:c3:e1:59:
                    54:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:74:53:74:31:9A:27:DE:FA:4D:DB:18:A5:F3:FB:09:FC:93:FC:9C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.52.0/22
                IPv6:
                  2804:2774::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263902

    Signature Algorithm: sha256WithRSAEncryption
         67:1a:ca:f8:7d:a5:56:51:57:7d:f7:e6:3a:e1:21:74:8b:d9:
         8e:4a:a3:e7:d5:dc:74:bd:13:a3:e7:7b:2f:8f:b2:75:65:22:
         4b:53:89:a2:a4:80:93:5b:b7:e2:4d:9f:a4:66:0c:6d:58:9f:
         10:5c:63:3a:be:d0:d4:aa:bf:6e:56:4c:fa:df:2d:39:22:af:
         f5:c4:c8:1e:37:20:d2:04:f0:24:a0:9a:85:b2:a1:70:63:45:
         11:bc:f1:5f:9d:1e:36:b7:fe:82:43:b4:c1:54:ca:db:4e:e5:
         38:ae:6c:71:9c:ec:9e:13:bd:91:15:29:44:5f:b2:96:fe:ad:
         39:04:b9:e8:41:f6:e0:d9:42:58:35:36:2f:83:ce:e5:db:46:
         1c:7c:2f:e3:28:6c:2a:89:e5:06:41:56:a0:4d:21:ce:15:71:
         7d:47:29:12:2c:98:c4:e0:45:94:d5:93:a0:0f:3a:ba:db:38:
         4e:d4:60:0e:06:11:6c:dc:34:19:15:a9:eb:23:65:95:0b:30:
         52:e7:83:d8:8f:e0:94:98:3d:0f:6c:90:ba:bb:1b:0e:5d:6d:
         e6:72:ae:6c:c1:87:2a:a8:73:6c:dd:ca:c1:7e:fd:34:e9:36:
         82:c6:e7:da:1f:8f:c1:a4:44:11:fb:e7:03:a6:ee:94:ec:38:
         e9:3b:80:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org