Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DA11136B3D6306BFEAD080E5A4F831EAFEB35C2F.cer
File:                     DA11136B3D6306BFEAD080E5A4F831EAFEB35C2F.cer (raw, json)
Hash identifier:          hIxjBhG5HB5JwjzhtnKd1xBjcXJFxIwdoKSySpuFx7g=
Subject key identifier:   DA:11:13:6B:3D:63:06:BF:EA:D0:80:E5:A4:F8:31:EA:FE:B3:5C:2F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       09FF482A192FCC4BA8327F567A68BD79CC844C60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/WP1zuJcaXcubS1DhB53Fs1CHXCFxXGHo2ypnMDzsBsq/0/DA11136B3D6306BFEAD080E5A4F831EAFEB35C2F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/WP1zuJcaXcubS1DhB53Fs1CHXCFxXGHo2ypnMDzsBsq/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Apr 2023 09:58:53 +0000
Certificate not after:    Thu 25 Apr 2024 10:03:53 +0000
Subordinate resources:    AS: 263408
                          IP: 179.97.8.0/21
                          IP: 2804:15c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ff:48:2a:19:2f:cc:4b:a8:32:7f:56:7a:68:bd:79:cc:84:4c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 27 09:58:53 2023 GMT
            Not After : Apr 25 10:03:53 2024 GMT
        Subject: CN=DA11136B3D6306BFEAD080E5A4F831EAFEB35C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3f:46:1c:7e:c4:e1:37:0d:55:67:77:6d:ea:
                    1a:05:f0:8b:44:e0:43:81:72:a3:f8:dc:fc:e9:a3:
                    00:02:51:a2:a2:81:05:50:17:bb:33:10:09:c3:9f:
                    37:49:4f:9d:80:33:ee:f0:3b:c5:35:45:a1:95:a6:
                    62:57:ab:a3:be:c6:e7:48:63:83:81:b5:8c:7a:26:
                    fe:2f:c7:00:bb:e8:9a:61:5d:a2:ce:68:4b:9d:30:
                    ee:d4:ce:1a:a6:1e:e6:cb:b2:68:58:2e:64:b1:4e:
                    35:bb:0d:8e:83:62:80:44:40:a1:0b:ea:24:be:85:
                    b1:4f:98:16:5a:e1:3f:ea:93:b2:8d:4f:c5:09:6f:
                    51:ac:e9:aa:18:07:88:96:6b:21:0d:07:92:a2:53:
                    fb:d1:01:59:58:34:34:cb:b7:f7:ca:53:44:f5:fb:
                    8a:97:64:fd:71:ae:b5:dd:f0:68:b1:d4:29:04:56:
                    b4:71:7a:00:f2:9e:b2:a5:77:6f:70:85:91:a5:e1:
                    73:6b:e2:75:4e:97:e6:8d:c4:e9:83:fb:8d:a5:da:
                    14:f0:d3:f3:4c:36:cf:b7:9e:52:b6:fa:c9:fd:32:
                    e5:54:9a:73:51:48:11:b3:39:4f:a3:e7:b4:77:e2:
                    77:ff:fb:a2:14:12:0e:1c:80:8c:6c:ba:eb:e0:ad:
                    38:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:11:13:6B:3D:63:06:BF:EA:D0:80:E5:A4:F8:31:EA:FE:B3:5C:2F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/WP1zuJcaXcubS1DhB53Fs1CHXCFxXGHo2ypnMDzsBsq/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/WP1zuJcaXcubS1DhB53Fs1CHXCFxXGHo2ypnMDzsBsq/0/DA11136B3D6306BFEAD080E5A4F831EAFEB35C2F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.8.0/21
                IPv6:
                  2804:15c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263408

    Signature Algorithm: sha256WithRSAEncryption
         61:91:34:f4:f6:ee:ca:3a:30:de:18:c1:29:96:d5:a2:3a:92:
         a6:f2:03:de:60:ec:55:b1:b0:7d:a1:1a:80:86:ae:7a:10:8b:
         fe:1b:33:2c:7b:05:05:f7:8a:88:71:a5:53:5c:18:35:41:d5:
         2f:88:78:06:2b:a6:8b:2e:bf:36:b6:c9:b4:57:18:50:9b:76:
         0d:7f:50:b2:b1:06:3f:fc:4a:17:d1:d3:33:d2:af:ad:1b:d8:
         e8:0a:c3:a7:35:ef:ba:50:52:32:71:22:bd:ca:a3:a3:6f:81:
         bc:78:af:44:59:19:c8:e7:e9:95:0a:40:f7:d7:11:c3:4b:6d:
         69:e1:6e:ff:93:b5:a9:8e:65:e0:c8:57:3b:4b:51:6d:f0:01:
         15:5f:36:ef:c6:8b:91:f5:27:9d:7a:36:4b:3c:68:a7:c1:d7:
         d0:04:5b:81:73:cf:27:d8:58:59:c3:47:36:05:89:47:2f:ac:
         e7:54:3a:40:87:6c:25:ac:d1:f2:2c:2d:f8:a6:88:6f:63:71:
         24:01:ac:b0:35:7e:10:98:ba:76:aa:b8:10:b9:f1:8f:80:e9:
         e5:d6:4c:39:61:31:53:50:ca:25:86:11:26:cf:3f:3f:ee:0f:
         b6:2c:bf:82:7f:07:6f:70:ee:ca:d9:60:fb:54:ad:26:52:61:
         db:2b:f6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org