Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.cer
File:                     DD0ADDE73F928E43B84E117E0F7591F247D189BD.cer (raw, json)
Hash identifier:          pZCmT2v2X2k74pZxaJ3LF8lpn8z2RkW8e8WERQDfHRY=
Subject key identifier:   DD:0A:DD:E7:3F:92:8E:43:B8:4E:11:7E:0F:75:91:F2:47:D1:89:BD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5849FF7B2FB9D1DC9210A2F2498F84946E13A639
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Feb 2024 18:13:10 +0000
Certificate not after:    Tue 04 Feb 2025 18:18:10 +0000
Subordinate resources:    AS: 61726
                          IP: 131.72.96.0/22
                          IP: 186.227.64.0/22
                          IP: 2804:1b68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:49:ff:7b:2f:b9:d1:dc:92:10:a2:f2:49:8f:84:94:6e:13:a6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  6 18:13:10 2024 GMT
            Not After : Feb  4 18:18:10 2025 GMT
        Subject: CN=DD0ADDE73F928E43B84E117E0F7591F247D189BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6b:fd:34:3d:61:9e:48:53:0d:23:a1:05:91:
                    ea:c0:94:41:9a:d3:14:41:b0:00:9b:7c:36:22:8d:
                    2f:cb:4a:ee:46:6c:90:70:5d:ed:bd:95:a5:0a:a0:
                    c0:b6:05:53:a7:7a:70:a0:8a:ff:9f:2d:ab:62:97:
                    77:da:c7:9f:cd:d2:91:fc:fe:42:5d:62:4f:c8:4b:
                    b0:73:26:f2:59:8a:5e:ca:c0:bc:b3:40:fd:5f:27:
                    37:32:86:3d:4d:ee:24:38:68:51:0c:2a:db:a5:56:
                    66:ab:85:b4:20:63:77:6e:41:50:6d:03:9e:df:5b:
                    65:75:ae:f6:69:73:4e:40:2a:57:0a:c4:28:7e:81:
                    83:89:54:ae:ab:a0:b5:3b:95:1e:52:58:c0:e9:f2:
                    af:60:e5:91:9f:cd:b9:87:f1:66:18:68:2b:65:ba:
                    b7:90:3a:e4:f6:85:68:a7:0e:0a:23:45:e7:7b:6b:
                    44:51:99:18:a5:7d:9f:57:5c:5e:b0:e1:31:c9:ea:
                    bb:17:1a:ab:81:94:5e:30:b4:3a:ab:9d:11:83:ba:
                    45:95:bf:c4:14:27:d2:13:67:a8:6d:67:be:f3:70:
                    0b:0c:ed:3b:88:c9:1e:69:40:0c:38:88:05:71:bc:
                    43:21:fa:d0:55:5c:7c:f3:00:f0:46:47:df:c6:e6:
                    72:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DD:0A:DD:E7:3F:92:8E:43:B8:4E:11:7E:0F:75:91:F2:47:D1:89:BD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.96.0/22
                  186.227.64.0/22
                IPv6:
                  2804:1b68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61726

    Signature Algorithm: sha256WithRSAEncryption
         15:fa:43:e5:42:38:13:65:e4:59:44:a1:c7:f6:63:c8:ba:d3:
         84:c9:6c:e6:fd:8d:fd:e3:81:7c:57:6c:b6:f4:d3:9e:50:e6:
         a4:3a:28:8d:55:a6:c4:f1:99:17:70:1c:b9:5b:0c:44:72:d9:
         d1:a6:88:b3:f9:81:6e:90:28:e4:b6:8d:8f:27:83:a7:9c:dc:
         2c:4d:15:a4:a1:8a:e6:34:f6:29:5b:08:5f:ae:1f:fe:cb:95:
         fe:9c:d4:94:41:3c:d7:76:19:c3:4b:27:00:aa:e9:71:ca:b7:
         d2:79:06:2f:31:73:ee:2c:90:55:6a:6a:e4:6e:d6:cb:e1:52:
         cc:56:86:1f:ac:84:5c:b1:a3:84:3d:0f:d5:6f:93:38:25:be:
         53:e8:73:96:6d:50:e2:b6:86:60:f8:bd:8e:25:f3:69:ba:ba:
         56:73:3a:c9:88:b3:f2:68:85:9a:08:d2:69:58:52:f7:4c:9a:
         e1:29:bb:e9:4d:44:b2:eb:e8:12:a5:3f:75:21:58:2f:40:ad:
         39:84:36:f0:d7:de:6b:e0:ab:01:2e:33:05:46:0d:c7:a5:8b:
         37:de:40:25:1c:32:e7:18:fe:db:ad:81:39:bd:9f:42:3e:21:
         39:fb:d8:df:b2:65:b8:40:52:4d:d4:db:5d:49:03:89:93:a3:
         fb:59:5b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org