Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DD62A3383874568E020CAEECF2AB516AAF7172D9.cer
File:                     DD62A3383874568E020CAEECF2AB516AAF7172D9.cer (raw, json)
Hash identifier:          mp9+yv34DeyL37APof6x2OOtp4fmxVuM5oKEKOvWUDo=
Subject key identifier:   DD:62:A3:38:38:74:56:8E:02:0C:AE:EC:F2:AB:51:6A:AF:71:72:D9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0D725DDBF2F68F905476D2BC515090E1FE5913BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/DD62A3383874568E020CAEECF2AB516AAF7172D9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Jan 2024 18:49:32 +0000
Certificate not after:    Wed 15 Jan 2025 18:54:32 +0000
Subordinate resources:    AS: 269263
                          IP: 45.183.56.0/22
                          IP: 2804:61e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:72:5d:db:f2:f6:8f:90:54:76:d2:bc:51:50:90:e1:fe:59:13:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 17 18:49:32 2024 GMT
            Not After : Jan 15 18:54:32 2025 GMT
        Subject: CN=DD62A3383874568E020CAEECF2AB516AAF7172D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ee:52:45:c7:83:e2:be:c3:2e:24:de:89:44:
                    b2:60:97:15:e9:dd:ff:04:62:b3:46:dc:bc:23:04:
                    84:3b:74:5d:e7:cd:25:8f:6e:45:d9:8a:55:5a:05:
                    b3:16:73:39:20:e8:14:82:62:95:fc:3a:03:e2:1e:
                    aa:9c:0c:57:72:8e:3c:c1:ec:4c:2d:f1:a2:78:17:
                    8f:e9:28:bc:fd:e4:8c:e2:9d:f6:72:05:78:7e:64:
                    ed:64:fb:e7:a9:b8:8f:d7:52:9e:43:ba:84:0b:99:
                    97:22:85:fd:e8:e1:4d:3c:85:5e:c2:db:f4:b8:c9:
                    59:78:37:bc:55:d6:ce:ce:7d:4e:21:1b:72:2c:4a:
                    c0:88:83:2f:06:e3:3e:cb:e1:f0:16:3e:d9:ea:c9:
                    7a:19:0d:f1:3f:7d:76:bc:58:db:ca:dc:e1:b8:fe:
                    c1:3a:71:e0:dd:0a:7e:7c:a8:e3:83:43:82:6b:73:
                    19:ed:5d:d9:ec:b7:d4:17:69:7d:cd:9f:a2:24:5d:
                    5f:19:74:68:2b:23:60:0c:36:4e:59:db:b1:92:fc:
                    ce:85:65:60:9e:3f:81:9e:80:bb:77:06:b4:97:90:
                    9a:0f:91:a1:a7:6c:67:87:b0:19:21:c9:a5:96:f6:
                    27:00:6a:c7:2d:94:f3:f7:04:d7:68:68:81:65:de:
                    f6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DD:62:A3:38:38:74:56:8E:02:0C:AE:EC:F2:AB:51:6A:AF:71:72:D9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AChdSKNTFGoyuVBAiPehY14J9xR8kpx1WjbaBfxzD6rj/0/DD62A3383874568E020CAEECF2AB516AAF7172D9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.56.0/22
                IPv6:
                  2804:61e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269263

    Signature Algorithm: sha256WithRSAEncryption
         85:f2:58:cf:2b:93:92:b3:04:72:c3:4c:c3:c1:2c:9b:25:56:
         9b:5d:21:2a:71:cc:55:35:7a:f7:1a:a2:5a:5e:81:10:7f:11:
         75:48:30:6b:48:a7:2d:ae:1a:82:88:f9:d9:d8:a8:59:6a:0f:
         11:f3:92:70:7d:45:fe:a4:26:f2:4f:0a:15:51:c2:24:33:b4:
         f7:31:ff:5a:d8:51:1c:43:e5:5f:77:85:6c:38:26:bf:17:3b:
         b3:ef:8f:d3:69:f4:a6:64:2e:3f:39:77:e1:88:d4:00:50:b7:
         3b:83:da:c5:de:e3:89:06:ab:0a:d4:56:ea:ef:99:3e:1e:ac:
         4a:b0:99:c5:7a:74:5e:cc:56:41:06:92:cf:46:a6:cb:6d:f1:
         c4:bc:95:26:1c:55:b7:57:79:04:fb:bd:fb:09:77:51:0f:ac:
         e3:8f:c4:cd:77:c7:c2:e3:51:80:7e:dc:f6:7f:64:2d:01:e8:
         a4:24:9d:9c:f8:fe:6c:f6:8a:12:99:85:2c:0a:ba:74:0f:99:
         f2:2f:e9:6c:77:82:cd:a2:a7:cc:5b:33:13:a8:92:72:fd:87:
         d4:19:12:4a:29:89:eb:6c:2f:e4:64:ba:ab:c0:b2:8c:0c:ba:
         40:60:5f:70:9d:87:4a:c9:8c:73:3b:b1:1e:7c:52:a9:dc:f1:
         0c:3a:67:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org