Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DD7C07AB5D45C142684E530246EC0DF22CA535A2.cer
File:                     DD7C07AB5D45C142684E530246EC0DF22CA535A2.cer (raw, json)
Hash identifier:          /5H8yRHYpkOB/2Ks9Tp4eHUpfru+TPee1cfPLCQPqsM=
Subject key identifier:   DD:7C:07:AB:5D:45:C1:42:68:4E:53:02:46:EC:0D:F2:2C:A5:35:A2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6D11EF2820801FAB1A3AC03ACACBAE575A939635
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/DD7C07AB5D45C142684E530246EC0DF22CA535A2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Sep 2023 01:34:10 +0000
Certificate not after:    Wed 25 Sep 2024 01:39:10 +0000
Subordinate resources:    AS: 53014
                          IP: 170.247.196.0/22
                          IP: 2804:588::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:11:ef:28:20:80:1f:ab:1a:3a:c0:3a:ca:cb:ae:57:5a:93:96:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 27 01:34:10 2023 GMT
            Not After : Sep 25 01:39:10 2024 GMT
        Subject: CN=DD7C07AB5D45C142684E530246EC0DF22CA535A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:82:34:43:a1:52:a9:ef:46:d6:5c:62:3f:b2:
                    79:c9:b8:64:9f:a2:ca:b9:1b:59:5d:8a:42:ed:4d:
                    e0:66:51:df:75:64:cb:6c:1f:e3:78:9e:5e:cb:94:
                    48:b6:a7:38:e5:30:54:1c:d4:5a:1c:dd:d4:54:a7:
                    71:05:c3:83:15:f8:ad:9e:fb:d3:08:e8:4c:4a:dd:
                    11:df:8c:a3:d1:3e:f3:bd:27:b6:e4:37:22:ea:17:
                    bd:7f:bf:a2:ad:72:69:22:a8:18:a1:7b:1d:db:22:
                    eb:b4:26:d3:37:28:79:7d:18:66:f0:b1:dd:8d:37:
                    84:e5:e7:4c:4b:17:e7:59:d0:c7:d4:d1:b7:2c:48:
                    f7:22:b0:58:71:93:c5:05:30:15:92:be:c5:aa:21:
                    cb:64:4b:22:64:14:c9:ab:14:98:95:cb:80:e5:84:
                    a6:79:f4:20:d9:e3:6d:3a:4a:3d:06:95:38:b1:4a:
                    f7:69:ba:17:7d:a1:29:fc:cf:80:56:6a:a8:48:91:
                    74:2f:0e:10:ed:13:e8:19:6b:04:53:1b:bc:a1:91:
                    1a:71:4b:0a:93:b2:26:f8:30:57:f6:33:9b:df:b4:
                    56:0a:18:cb:bf:6d:84:17:83:de:30:65:57:76:62:
                    e1:f7:4e:99:6a:59:f9:3d:10:1e:95:3f:08:88:e5:
                    f3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DD:7C:07:AB:5D:45:C1:42:68:4E:53:02:46:EC:0D:F2:2C:A5:35:A2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/DD7C07AB5D45C142684E530246EC0DF22CA535A2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.196.0/22
                IPv6:
                  2804:588::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53014

    Signature Algorithm: sha256WithRSAEncryption
         57:33:1d:cc:b1:a0:53:90:35:fd:7b:94:57:b1:57:94:29:01:
         90:31:80:c7:a0:e1:fb:b8:d4:f0:a4:28:33:ef:25:aa:84:84:
         bf:bb:46:a5:00:24:bf:11:b0:a0:5d:19:81:31:c3:7c:6b:fe:
         97:71:9f:29:46:b0:df:1a:43:bc:b3:c0:5e:5b:7f:48:8d:b3:
         62:9c:0c:a5:fb:3f:c6:e8:ba:b7:26:21:c5:f2:2a:2d:d5:c9:
         53:e4:38:f7:b1:a4:74:8a:f3:64:de:20:0b:20:b3:af:c0:f3:
         8b:ec:b9:44:41:09:4e:4b:a5:9c:41:dc:9d:c1:c5:1c:b8:91:
         c4:f2:cb:4e:f1:47:cb:c9:7e:f4:e2:be:24:fa:14:39:06:03:
         c7:0d:ea:d3:af:c1:25:1f:74:20:20:80:6b:95:12:3f:01:9a:
         7b:5c:e1:b3:d7:de:75:2b:4e:83:7b:68:5a:a3:7d:a5:1e:de:
         45:34:fc:27:07:7d:45:22:37:95:82:68:54:ca:77:d7:b3:b7:
         c8:e6:01:1f:49:66:cb:ba:32:ed:0f:d9:9d:84:4c:b3:c5:a2:
         80:b7:bb:ce:76:53:59:10:ca:74:b5:1c:37:19:6d:e6:b0:79:
         0a:c7:03:a3:4d:b9:42:8e:5e:5a:06:d6:f4:72:41:9e:5b:50:
         20:c5:9b:c3
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUbRHvKCCAH6saOsA6ysuuV1qTljUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MjcwMTM0MTBaFw0yNDA5MjUwMTM5MTBaMDMxMTAvBgNV
BAMTKEREN0MwN0FCNUQ0NUMxNDI2ODRFNTMwMjQ2RUMwREYyMkNBNTM1QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMgjRDoVKp70bWXGI/snnJuGSf
osq5G1ldikLtTeBmUd91ZMtsH+N4nl7LlEi2pzjlMFQc1Foc3dRUp3EFw4MV+K2e
+9MI6ExK3RHfjKPRPvO9J7bkNyLqF71/v6KtcmkiqBihex3bIuu0JtM3KHl9GGbw
sd2NN4Tl50xLF+dZ0MfU0bcsSPcisFhxk8UFMBWSvsWqIctkSyJkFMmrFJiVy4Dl
hKZ59CDZ4206Sj0GlTixSvdpuhd9oSn8z4BWaqhIkXQvDhDtE+gZawRTG7yhkRpx
SwqTsib4MFf2M5vftFYKGMu/bYQXg94wZVd2YuH3TplqWfk9EB6VPwiI5fO5AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTdfAerXUXBQmhO
UwJG7A3yLKU1ojAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zdjJ0MmlKVVhRY0JHeFdRcmQ5OUNLMW41RWYxRVRGZ3Zn
ZEVRMWJoclpGaC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zdjJ0MmlKVVhRY0JHeFdRcmQ5OUNLMW41RWYxRVRGZ3Zn
ZEVRMWJoclpGaC8wL0REN0MwN0FCNUQ0NUMxNDI2ODRFNTMwMjQ2RUMwREYyMkNB
NTM1QTIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqr3xDANBAIAAjAHAwUA
KAQFiDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzxYwDQYJKoZIhvcNAQELBQAD
ggEBAFczHcyxoFOQNf17lFexV5QpAZAxgMeg4fu41PCkKDPvJaqEhL+7RqUAJL8R
sKBdGYExw3xr/pdxnylGsN8aQ7yzwF5bf0iNs2KcDKX7P8bourcmIcXyKi3VyVPk
OPexpHSK82TeIAsgs6/A84vsuURBCU5LpZxB3J3BxRy4kcTyy07xR8vJfvTiviT6
FDkGA8cN6tOvwSUfdCAggGuVEj8Bmntc4bPX3nUrToN7aFqjfaUe3kU0/CcHfUUi
N5WCaFTKd9ezt8jmAR9JZsu6Mu0P2Z2ETLPFooC3u852U1kQynS1HDcZbeaweQrH
A6NNuUKOXloG1vRyQZ5bUCDFm8M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org