Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DD48AB95A13E517717CB98E2E8F3B9E739F8913F.cer
File:                     DD48AB95A13E517717CB98E2E8F3B9E739F8913F.cer (raw, json)
Hash identifier:          pnw0ZYczbD/A9KTQnBihZ2BuJK9oZcPX1AYyJhSNyJY=
Subject key identifier:   DD:48:AB:95:A1:3E:51:77:17:CB:98:E2:E8:F3:B9:E7:39:F8:91:3F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7C73EB0436F0A79F8EDEC1D1DDC3F6605A045EAA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/0/DD48AB95A13E517717CB98E2E8F3B9E739F8913F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Sep 2023 17:48:05 +0000
Certificate not after:    Mon 16 Sep 2024 17:53:05 +0000
Subordinate resources:    AS: 270780
                          IP: 186.233.24.0/22
                          IP: 2804:714c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:73:eb:04:36:f0:a7:9f:8e:de:c1:d1:dd:c3:f6:60:5a:04:5e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 18 17:48:05 2023 GMT
            Not After : Sep 16 17:53:05 2024 GMT
        Subject: CN=DD48AB95A13E517717CB98E2E8F3B9E739F8913F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:09:97:01:4e:cb:25:dc:24:e9:4a:e5:96:61:
                    57:5f:79:02:d5:11:f8:e2:f8:c2:d0:9e:49:9e:6e:
                    ed:45:34:a7:7f:80:8c:af:65:df:be:51:17:27:e3:
                    17:cf:18:60:5f:d4:4b:f9:1b:93:8d:9e:6e:3b:21:
                    17:ae:f2:5d:36:6a:a0:3f:90:d3:f5:2e:6e:b5:ce:
                    bc:60:ac:d8:b4:aa:78:6a:17:f0:02:12:07:1e:d4:
                    2d:fd:d7:00:12:c2:82:e9:1c:1a:d1:00:26:1e:23:
                    bd:5f:02:99:3c:6a:ec:50:22:aa:ca:62:82:d2:18:
                    19:50:63:bb:ea:52:ac:d7:b7:b7:b8:3d:48:ac:29:
                    bf:06:96:3f:93:17:af:18:3f:fc:f8:7f:6b:77:5f:
                    b7:b4:af:10:98:2b:f8:76:e1:5e:61:5c:89:6a:3d:
                    b8:ca:dc:25:d5:a1:b1:82:f6:cf:24:30:32:7c:87:
                    37:7c:4a:30:4f:7f:b8:ac:d2:db:4e:53:ae:bc:80:
                    b0:b5:03:1f:2c:68:68:44:9c:51:87:57:7b:df:7f:
                    a4:64:8a:0c:c7:28:c2:a3:32:39:1a:99:13:18:8b:
                    2b:af:c5:28:ff:34:a3:f7:7c:e3:ce:22:3a:62:8f:
                    86:97:f1:e2:86:24:f7:b7:0f:ea:52:25:15:c6:e5:
                    32:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DD:48:AB:95:A1:3E:51:77:17:CB:98:E2:E8:F3:B9:E7:39:F8:91:3F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/0/DD48AB95A13E517717CB98E2E8F3B9E739F8913F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.24.0/22
                IPv6:
                  2804:714c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270780

    Signature Algorithm: sha256WithRSAEncryption
         8f:df:44:49:26:29:c6:93:0a:48:0f:eb:ff:0f:18:f4:32:d4:
         ec:62:ad:7e:72:96:90:97:0b:9d:dc:1e:59:57:ba:72:a9:8b:
         04:31:fe:7e:c8:10:ea:3a:1c:31:37:8c:c3:d2:f9:d5:1a:a2:
         d3:a3:69:8c:86:f1:d7:1c:2d:f6:81:33:50:21:85:66:cc:b2:
         4d:65:ce:ad:0a:4c:6d:40:6e:24:73:63:42:8e:f2:a1:bc:f6:
         50:03:f5:8f:58:e2:97:2d:28:8e:b7:8b:02:63:7d:77:5c:31:
         dc:ba:89:95:b9:57:21:ea:14:a2:fb:86:a2:cb:f3:89:47:55:
         88:04:b4:ad:82:24:d8:9d:b3:6a:e6:c5:d8:ee:c6:3d:69:8a:
         5e:3d:f9:76:78:68:be:fb:5d:82:d7:72:9a:31:fa:2b:c7:61:
         af:62:c9:d9:84:90:41:ba:3b:be:86:25:21:9e:1b:2b:8b:63:
         8e:01:14:ad:b3:5c:25:7c:48:53:a6:f9:53:09:6e:7f:69:e3:
         65:60:e1:d3:cb:7d:54:8c:15:33:60:d8:d5:22:f8:f7:c8:7a:
         0a:c2:76:22:7d:91:29:19:65:cd:a3:87:d3:9d:2e:1a:39:fe:
         23:e0:d2:c8:c0:df:d0:80:0b:1a:71:d0:bb:64:73:41:47:5e:
         4e:78:ab:1d
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUfHPrBDbwp5+O3sHR3cP2YFoEXqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MTgxNzQ4MDVaFw0yNDA5MTYxNzUzMDVaMDMxMTAvBgNV
BAMTKERENDhBQjk1QTEzRTUxNzcxN0NCOThFMkU4RjNCOUU3MzlGODkxM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSCZcBTssl3CTpSuWWYVdfeQLV
Efji+MLQnkmebu1FNKd/gIyvZd++URcn4xfPGGBf1Ev5G5ONnm47IReu8l02aqA/
kNP1Lm61zrxgrNi0qnhqF/ACEgce1C391wASwoLpHBrRACYeI71fApk8auxQIqrK
YoLSGBlQY7vqUqzXt7e4PUisKb8Glj+TF68YP/z4f2t3X7e0rxCYK/h24V5hXIlq
PbjK3CXVobGC9s8kMDJ8hzd8SjBPf7is0ttOU668gLC1Ax8saGhEnFGHV3vff6Rk
igzHKMKjMjkamRMYiyuvxSj/NKP3fOPOIjpij4aX8eKGJPe3D+pSJRXG5TJ9AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTdSKuVoT5RdxfL
mOLo87nnOfiRPzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DeExhY01QOEhoekx2UlpwZWkyNkZBRVhaa21KWENNQzFp
VEVHSndNSHlOWC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQ3hMYWNNUDhIaHpMdlJacGVpMjZGQUVYWmttSlhDTUMx
aVRFR0p3TUh5TlgvMC9ERDQ4QUI5NUExM0U1MTc3MTdDQjk4RTJFOEYzQjlFNzM5
Rjg5MTNGLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK66RgwDQQCAAIwBwMF
ACgEcUwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCG8MA0GCSqGSIb3DQEBCwUA
A4IBAQCP30RJJinGkwpID+v/Dxj0MtTsYq1+cpaQlwud3B5ZV7pyqYsEMf5+yBDq
OhwxN4zD0vnVGqLTo2mMhvHXHC32gTNQIYVmzLJNZc6tCkxtQG4kc2NCjvKhvPZQ
A/WPWOKXLSiOt4sCY313XDHcuomVuVch6hSi+4aiy/OJR1WIBLStgiTYnbNq5sXY
7sY9aYpePfl2eGi++12C13KaMforx2GvYsnZhJBBuju+hiUhnhsri2OOARSts1wl
fEhTpvlTCW5/aeNlYOHTy31UjBUzYNjVIvj3yHoKwnYifZEpGWXNo4fTnS4aOf4j
4NLIwN/QgAsacdC7ZHNBR15OeKsd
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org