Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DA0875269ADC2D471DB95D7D06D3B10D0D665D51.cer
File:                     DA0875269ADC2D471DB95D7D06D3B10D0D665D51.cer (raw, json)
Hash identifier:          uU79W//vQSAkb41cS0rfWLGZB2Vn1PMvvO9uh8tnol4=
Subject key identifier:   DA:08:75:26:9A:DC:2D:47:1D:B9:5D:7D:06:D3:B1:0D:0D:66:5D:51
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       02553E815653793FB2DA9D7E6250B42DC88A5ABE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0/DA0875269ADC2D471DB95D7D06D3B10D0D665D51.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 01 Nov 2022 17:21:59 +0000
Certificate not after:    Tue 31 Oct 2023 17:26:59 +0000
Subordinate resources:    AS: 265147
                          IP: 143.255.128.0/22
                          IP: 2804:2b54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:55:3e:81:56:53:79:3f:b2:da:9d:7e:62:50:b4:2d:c8:8a:5a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  1 17:21:59 2022 GMT
            Not After : Oct 31 17:26:59 2023 GMT
        Subject: CN=DA0875269ADC2D471DB95D7D06D3B10D0D665D51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c1:c9:94:ac:51:ad:a6:b8:dd:a7:7f:7e:93:
                    12:fa:af:15:25:f9:3b:c1:0c:d5:bf:e6:4e:fd:41:
                    d5:4e:c2:08:6f:82:18:76:68:12:1d:d9:0f:b8:f2:
                    a0:f8:20:0b:dd:19:05:95:73:78:5e:d8:e1:03:db:
                    90:78:da:0a:cf:41:a3:31:a4:ca:90:9e:67:d6:b6:
                    d1:c0:90:da:7a:9f:cb:63:a5:49:f0:ee:9b:74:00:
                    7b:0d:68:2f:1f:c1:96:1d:d4:49:ad:6b:fa:79:2d:
                    d0:99:2e:21:2c:09:02:63:4b:96:a1:cc:8f:48:aa:
                    39:6c:22:9e:e8:e6:44:17:c9:a2:ca:b5:01:69:c2:
                    b6:33:3d:5d:63:21:9c:82:1d:6a:a9:1c:3c:dc:01:
                    1a:96:9a:0a:fa:b9:4a:42:f9:4c:b6:d9:69:79:a8:
                    7a:d4:32:e4:0b:46:88:4c:64:95:81:36:07:f7:80:
                    61:35:2b:b5:3d:9d:be:e0:8d:73:24:27:5b:7c:3a:
                    9c:d8:5f:58:7a:96:aa:0f:36:6e:86:d8:31:a7:1d:
                    47:f9:a9:cf:9a:09:eb:bd:c9:12:a2:72:4f:44:80:
                    c7:fa:10:07:4d:a1:ce:ce:b1:c8:97:d3:7a:1f:2e:
                    67:50:d8:e3:dc:c7:65:8a:7f:a0:84:81:ab:12:f6:
                    06:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:08:75:26:9A:DC:2D:47:1D:B9:5D:7D:06:D3:B1:0D:0D:66:5D:51
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0/DA0875269ADC2D471DB95D7D06D3B10D0D665D51.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.128.0/22
                IPv6:
                  2804:2b54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265147

    Signature Algorithm: sha256WithRSAEncryption
         a7:f6:68:72:19:d2:a0:31:bd:1e:0b:be:1b:e1:f9:38:dd:43:
         f6:4c:51:2e:e6:85:0a:29:02:12:ad:0d:ab:7b:67:5c:85:62:
         a3:d6:cf:6e:d6:98:3b:b8:0b:ea:d8:53:b3:c9:29:32:ba:30:
         a6:1f:c5:ff:6d:6e:05:c5:12:27:4e:f0:76:f3:68:2f:c3:d0:
         5e:45:62:85:63:e5:ec:dc:e7:e1:d2:72:14:12:2a:4f:8b:b3:
         a6:ea:02:39:e3:b8:68:0b:12:45:db:b7:e4:3a:d9:80:ad:11:
         4e:1d:ea:94:ed:c2:01:32:72:b1:07:cd:b7:b1:20:de:49:27:
         29:f9:86:47:19:e9:5a:93:0b:c1:3a:ae:94:ad:86:5a:ae:02:
         57:64:d8:cb:59:ba:06:51:88:ad:0c:9b:26:67:df:80:7b:cb:
         e3:7f:b6:f0:af:1c:9c:64:bc:f7:99:4e:cd:6b:b3:55:bf:a4:
         03:2d:be:e3:d3:1a:2f:71:bd:e2:f3:6c:11:e9:eb:22:71:fc:
         59:b1:63:0b:a2:db:0d:50:b2:05:0c:10:54:ad:91:51:b2:c3:
         6e:b7:51:74:4b:cb:23:8c:5b:83:17:aa:1f:a8:2a:d3:8d:6a:
         d0:be:d7:c6:bf:1a:b5:22:ae:b1:ca:06:34:6d:d3:a0:06:ed:
         1d:dc:2e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org