Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DD78D80D94B34F9D270B1E784F6D6633D838399B.cer
File:                     DD78D80D94B34F9D270B1E784F6D6633D838399B.cer (raw, json)
Hash identifier:          dP/2hBkWFyOtJwn4vmgsUwX5lAQ82wmAQ0xFyFW1SrI=
Subject key identifier:   DD:78:D8:0D:94:B3:4F:9D:27:0B:1E:78:4F:6D:66:33:D8:38:39:9B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       212B57B0C900288C8F0CEC40F4B3AC629C50F1B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/DD78D80D94B34F9D270B1E784F6D6633D838399B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 29 May 2021 19:41:00 +0000
Certificate not after:    Sat 28 May 2022 19:46:00 +0000
Subordinate resources:    AS: 262474
                          IP: 177.53.168.0/21
                          IP: 177.154.20.0/22
                          IP: 2804:4dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2b:57:b0:c9:00:28:8c:8f:0c:ec:40:f4:b3:ac:62:9c:50:f1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 29 19:41:00 2021 GMT
            Not After : May 28 19:46:00 2022 GMT
        Subject: CN=DD78D80D94B34F9D270B1E784F6D6633D838399B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:2b:c6:4a:9a:18:72:48:c5:a6:3b:60:47:
                    73:f4:87:8e:f6:60:89:21:3f:cc:b9:1a:6b:27:26:
                    be:be:3d:1b:12:d6:60:df:5a:f4:c9:75:fe:24:89:
                    75:18:88:ca:cf:06:d7:66:6c:0e:71:4f:b6:a6:54:
                    e5:75:36:26:96:36:a7:22:28:8a:c9:79:6f:28:44:
                    bd:b2:ba:3e:f7:5e:45:94:0e:96:74:24:7d:04:62:
                    49:a6:0d:8e:ac:68:a9:d1:58:ec:35:d6:37:63:0d:
                    51:fe:99:b9:b7:f6:50:1e:95:f0:76:46:fe:74:8f:
                    43:a2:7f:74:d0:52:ac:94:4b:02:7d:8b:65:18:26:
                    ab:59:b9:c5:f7:18:d8:d8:ac:e0:6c:df:7e:55:00:
                    68:0e:86:91:89:af:12:73:26:2d:c8:33:6b:02:5e:
                    6a:13:2a:88:11:cf:14:dc:8f:a1:0a:05:43:99:bb:
                    35:42:4e:fa:5a:56:c2:72:f5:e0:e9:06:ec:0b:65:
                    9c:b8:a9:b6:91:7f:5a:71:b1:23:1e:29:7f:b1:bb:
                    6a:5d:34:92:45:4d:87:c5:36:5d:d3:2b:80:47:0e:
                    0b:64:40:81:f8:c9:59:6f:a3:b1:4e:b5:45:57:2b:
                    03:d7:36:ea:b7:8e:6b:51:5a:f2:3e:b0:3a:31:1f:
                    09:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DD:78:D8:0D:94:B3:4F:9D:27:0B:1E:78:4F:6D:66:33:D8:38:39:9B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/DD78D80D94B34F9D270B1E784F6D6633D838399B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.168.0/21
                  177.154.20.0/22
                IPv6:
                  2804:4dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262474

    Signature Algorithm: sha256WithRSAEncryption
         ae:8d:e9:20:0a:0d:62:17:e6:5a:f8:8e:44:9a:23:a0:6d:36:
         a5:98:cc:02:22:e0:8d:25:65:b8:a5:96:8a:57:d5:c9:31:c0:
         2b:32:6a:f4:61:90:de:e1:0d:15:87:63:8d:3c:ee:34:73:7d:
         c3:93:41:9a:a9:6e:f7:70:8c:7c:73:8d:0b:a7:32:37:fd:22:
         b8:b8:61:b4:cb:74:3e:8a:b1:5c:06:88:b6:7a:6b:cc:ea:42:
         d8:b0:51:29:32:5e:c8:33:12:43:b0:d1:d9:19:6e:de:55:da:
         9d:99:60:1a:aa:0c:dc:9b:70:b0:44:5f:1d:1d:24:98:d5:45:
         8a:c2:b9:97:59:c5:ee:67:b8:35:cb:e4:a1:e5:8b:82:9e:8f:
         bf:c1:7a:2a:93:ff:4d:3e:51:53:a7:c4:aa:12:75:c6:ef:a3:
         53:27:c9:9e:b2:ef:57:e7:e3:9c:3b:f6:ab:94:d4:99:7b:b4:
         35:a6:08:2e:a3:60:f3:47:fd:ad:de:62:d3:7c:a1:90:f3:cb:
         58:c2:6c:80:74:39:67:3d:42:02:e8:e0:f0:5d:27:55:e7:a0:
         4b:99:66:10:53:dc:8c:df:b2:eb:1f:71:13:57:d6:99:e0:3c:
         d8:db:b9:f0:a2:02:03:42:54:05:b5:7d:e0:51:6f:7b:60:1e:
         a8:9f:14:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org