Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DD3760EF84954446A79C77767939A1C7859DA5C9.cer
File:                     DD3760EF84954446A79C77767939A1C7859DA5C9.cer (raw, json)
Hash identifier:          R1G/LLaXh631TyOikrEJRg0jEkFD5ur7NuCtP+fMMuo=
Subject key identifier:   DD:37:60:EF:84:95:44:46:A7:9C:77:76:79:39:A1:C7:85:9D:A5:C9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       74A725F13C08F576F380E3C78E81E4F5F08325D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/DD3760EF84954446A79C77767939A1C7859DA5C9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 09 Jul 2022 12:45:15 +0000
Certificate not after:    Sat 08 Jul 2023 12:50:15 +0000
Subordinate resources:    AS: 263389
                          IP: 177.87.252.0/22
                          IP: 2804:1574::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a7:25:f1:3c:08:f5:76:f3:80:e3:c7:8e:81:e4:f5:f0:83:25:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  9 12:45:15 2022 GMT
            Not After : Jul  8 12:50:15 2023 GMT
        Subject: CN=DD3760EF84954446A79C77767939A1C7859DA5C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0e:d9:aa:66:9c:01:2b:51:ea:64:b8:57:b0:
                    fa:4e:2c:55:03:e6:b0:49:f0:6e:24:8b:5b:61:26:
                    b6:e0:44:9c:f2:64:c0:ef:43:64:88:fe:91:a3:38:
                    ae:7c:dc:64:a6:1e:2e:e5:5a:23:80:8f:44:b4:2a:
                    ea:e8:cf:cc:b5:d1:8b:06:c1:1e:11:37:08:87:fe:
                    ed:6d:2f:d6:30:fd:8c:09:81:31:71:34:a5:10:d4:
                    34:4c:cb:f6:37:12:09:6e:13:fb:42:56:ba:86:3c:
                    eb:ff:80:a6:66:a0:13:56:0b:81:06:6c:9c:c0:4d:
                    f3:ca:2b:9a:46:61:14:1a:dd:ec:7c:94:40:7d:f7:
                    b9:ff:fd:54:ec:55:b0:d8:c1:1a:35:36:e8:d4:d0:
                    64:5a:08:fe:97:4d:28:ec:11:28:a4:8b:5a:4b:21:
                    7c:ac:d2:e7:94:bc:17:d6:5b:97:3e:e9:7f:52:fe:
                    cc:ff:4a:93:ea:2f:3f:fd:94:58:82:aa:b7:ab:12:
                    0a:78:83:dc:c4:35:ed:10:55:f8:31:f3:73:49:99:
                    29:d5:79:42:35:ae:05:d5:da:f5:ba:50:5f:79:3a:
                    1f:6c:bc:b8:f1:db:58:44:f2:8e:3a:dc:0b:17:dc:
                    ba:d5:18:d4:a3:60:c8:4a:08:64:de:77:ec:13:84:
                    91:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DD:37:60:EF:84:95:44:46:A7:9C:77:76:79:39:A1:C7:85:9D:A5:C9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/DD3760EF84954446A79C77767939A1C7859DA5C9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.252.0/22
                IPv6:
                  2804:1574::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263389

    Signature Algorithm: sha256WithRSAEncryption
         08:66:0a:17:c0:db:42:ad:e3:dc:30:d3:52:1c:c7:38:c6:64:
         b0:9a:bf:76:d7:c6:ac:90:0c:28:d0:aa:9c:2f:28:43:be:55:
         ce:06:d2:21:77:53:2b:e3:c8:ff:b9:7c:ba:28:e5:c6:c5:d9:
         b5:d1:7e:08:ee:dc:ad:5c:a5:96:a4:19:b9:39:f4:30:a7:f3:
         75:b1:0b:a7:ce:34:fb:c0:00:08:33:61:d6:c3:1f:57:a2:7a:
         99:82:4d:21:18:fd:af:76:90:6f:7a:56:68:85:7a:e0:fa:e1:
         8c:b2:35:b1:3b:2d:8a:c1:da:c4:44:b0:46:f4:5e:e6:dd:95:
         6d:8d:41:91:89:f6:dd:ce:6a:59:46:bc:03:ca:c3:17:e1:13:
         ae:1c:b0:67:59:7b:5f:bc:49:59:e7:be:cf:4a:e6:2d:90:76:
         a3:fc:2f:eb:54:a8:c9:bb:83:1c:03:db:a0:3c:9e:59:c7:90:
         2f:2c:46:53:a0:1b:1d:2d:6f:66:4f:a6:4c:6c:5d:6b:51:1b:
         02:f4:61:e1:81:d2:85:64:51:ec:12:0e:1d:bf:84:9d:52:77:
         54:e8:40:95:cc:ce:65:b9:fa:9d:47:6c:0d:4c:b7:f6:d2:e6:
         9d:bd:02:3c:23:e2:dc:92:c5:fc:26:c5:13:71:9c:b4:a3:df:
         93:34:e4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org