Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DB4FF0FE4844DE2F480C73CA45BCB95961785E33.cer
File:                     DB4FF0FE4844DE2F480C73CA45BCB95961785E33.cer (raw, json)
Hash identifier:          seL1DPYEjhFlO5d4MSmVp4u7W1CNjOI0M6xafSvDtV8=
Subject key identifier:   DB:4F:F0:FE:48:44:DE:2F:48:0C:73:CA:45:BC:B9:59:61:78:5E:33
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2DAC2FA50B155D52074771D84E1351C561D19CE3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/DB4FF0FE4844DE2F480C73CA45BCB95961785E33.mft
caRepository:             rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Aug 2022 19:36:20 +0000
Certificate not after:    Tue 01 Aug 2023 19:41:20 +0000
Subordinate resources:    AS: 264455
                          IP: 132.255.36.0/22
                          IP: 2804:1eec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ac:2f:a5:0b:15:5d:52:07:47:71:d8:4e:13:51:c5:61:d1:9c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  2 19:36:20 2022 GMT
            Not After : Aug  1 19:41:20 2023 GMT
        Subject: CN=DB4FF0FE4844DE2F480C73CA45BCB95961785E33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:97:51:7f:bf:22:e4:f9:22:e6:15:64:91:40:
                    9f:8f:db:1f:95:74:34:53:f6:7e:06:b3:6a:11:14:
                    2e:96:7e:0d:5f:18:81:c0:ed:53:73:6e:21:08:d2:
                    19:3b:72:99:63:db:2c:46:2a:f4:17:5c:11:da:6b:
                    70:24:32:82:83:4e:78:a8:00:a6:c2:42:05:29:9b:
                    20:53:cc:b1:89:11:57:0a:8c:fe:de:0c:42:9d:cd:
                    db:43:77:36:4f:88:1c:33:c8:ed:a7:6a:ac:f9:46:
                    29:cb:6d:8a:10:ba:9e:68:57:59:fa:7f:ce:80:5f:
                    94:bf:85:4d:01:89:a4:c8:19:de:14:24:88:40:80:
                    04:d8:33:5d:6c:fd:2d:67:7a:68:c0:e0:43:40:fa:
                    2a:40:a5:06:b8:4c:a9:5e:48:49:76:77:03:89:97:
                    8f:9f:d7:90:2c:31:a9:69:bc:a0:8e:92:4f:4d:72:
                    57:5f:fc:18:b3:a5:3e:54:fa:e4:ec:06:bb:0d:a0:
                    e8:4d:cc:96:1f:d8:07:03:ec:76:c6:b1:79:70:6e:
                    67:34:57:bc:d7:df:74:1e:e8:9a:32:e1:3a:29:86:
                    73:92:08:14:72:a8:5c:0f:bf:10:19:85:db:d4:fb:
                    1a:08:32:65:6c:68:3f:d9:35:17:03:33:91:24:e8:
                    a2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:4F:F0:FE:48:44:DE:2F:48:0C:73:CA:45:BC:B9:59:61:78:5E:33
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/DB4FF0FE4844DE2F480C73CA45BCB95961785E33.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.36.0/22
                IPv6:
                  2804:1eec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264455

    Signature Algorithm: sha256WithRSAEncryption
         13:7f:fa:12:73:ae:93:70:fa:0a:4e:35:43:1e:d3:bb:d5:c0:
         02:02:0d:00:de:c7:5d:91:1f:8f:8d:54:80:bb:a6:fe:6d:90:
         ab:0b:f6:fd:fe:36:0c:b6:7e:2c:d4:dc:76:fd:bd:c1:f2:b6:
         24:13:21:67:56:50:aa:87:82:94:a6:60:96:92:83:a5:04:f6:
         cc:8f:63:26:03:2d:8f:b3:ab:ee:44:e0:51:da:cf:18:5d:1e:
         e1:3a:d0:fd:b4:d5:34:d0:5f:6f:da:fb:7d:95:2e:49:c9:1a:
         19:c1:62:04:08:3d:d0:a7:2a:af:7d:57:a6:37:51:ac:d2:cb:
         bd:fa:80:35:45:0f:d0:f5:8a:51:6a:96:e1:04:68:c3:85:be:
         48:b6:49:e5:44:6b:dd:d0:65:ea:b0:61:29:68:27:d1:2d:26:
         31:5c:49:c6:8b:e3:a4:e6:43:14:93:82:3e:ec:b8:97:67:1a:
         d2:86:a6:1f:fa:d9:29:7e:27:bc:51:1a:4e:81:79:e3:f8:17:
         0e:dc:da:1f:a1:69:b8:93:70:08:3f:58:c0:da:8b:9a:de:a2:
         c9:11:70:18:5c:60:4d:d9:fb:2d:3d:04:26:7c:4c:bc:dc:8b:
         fe:67:64:a4:2e:bf:1e:07:d5:a8:ac:8e:d8:73:59:76:0b:08:
         8d:2b:46:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org