Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DD7FCBBC453CEAD2151004BDA36F24FEB766F1E3.cer
File:                     DD7FCBBC453CEAD2151004BDA36F24FEB766F1E3.cer (raw, json)
Hash identifier:          76258Z0lus//mwC3yH1+BsRyTcQKgjjyODP5VMrcitg=
Subject key identifier:   DD:7F:CB:BC:45:3C:EA:D2:15:10:04:BD:A3:6F:24:FE:B7:66:F1:E3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0ED0120DF8CAA67C0B2B0D3E607C209EA89D5A22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/0/DD7FCBBC453CEAD2151004BDA36F24FEB766F1E3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Jan 2024 02:56:13 +0000
Certificate not after:    Thu 09 Jan 2025 03:01:13 +0000
Subordinate resources:    AS: 271705
                          IP: 2804:7fb8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d0:12:0d:f8:ca:a6:7c:0b:2b:0d:3e:60:7c:20:9e:a8:9d:5a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 11 02:56:13 2024 GMT
            Not After : Jan  9 03:01:13 2025 GMT
        Subject: CN=DD7FCBBC453CEAD2151004BDA36F24FEB766F1E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:68:77:40:8b:1d:96:0b:13:cc:7e:76:5d:99:
                    c0:03:34:79:aa:c0:71:d7:60:dd:5d:39:f1:26:73:
                    9c:f6:d5:a7:34:34:db:60:ee:00:b6:09:0a:61:ff:
                    0c:a2:b6:30:09:40:d4:c2:19:86:ac:57:59:5f:8a:
                    77:0e:88:65:d4:65:a0:1e:16:4f:93:26:b4:d8:1b:
                    ff:09:04:72:01:19:e8:22:fe:b6:e2:28:ec:59:e5:
                    a4:87:70:1a:74:15:c8:f0:bc:43:cb:76:ff:4d:b6:
                    40:2d:d9:c1:9a:52:99:ed:51:83:bd:b8:f8:1c:33:
                    3e:f6:3f:f9:a1:c5:e9:6f:7a:2b:66:1d:e7:7d:22:
                    94:c5:85:43:43:69:bf:79:f5:3a:24:10:9d:bc:73:
                    a5:a8:32:05:35:d5:6d:4a:80:d9:d0:33:a4:a4:32:
                    6a:a5:6a:25:63:56:f5:38:01:01:5d:70:d4:91:a7:
                    2c:4e:d2:2c:4b:27:1f:33:9e:b5:b1:a5:30:63:12:
                    1e:9b:3f:c7:33:86:ae:36:41:b6:67:ff:7e:08:63:
                    df:87:07:19:b4:72:04:03:a3:95:7a:5b:5e:35:bf:
                    3d:06:a8:0a:ea:3b:9c:6a:68:a5:b4:4b:6f:04:37:
                    2d:31:7d:4d:ee:14:5b:6f:4d:8f:82:59:cc:26:68:
                    87:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DD:7F:CB:BC:45:3C:EA:D2:15:10:04:BD:A3:6F:24:FE:B7:66:F1:E3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GMf3WHE1aKQEeAnTj8Gunb6b2LFvTjaK36XGn3n5wxdo/0/DD7FCBBC453CEAD2151004BDA36F24FEB766F1E3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fb8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271705

    Signature Algorithm: sha256WithRSAEncryption
         98:83:7b:97:93:3a:c1:a0:3d:a5:d7:11:d8:68:51:6a:49:c8:
         48:89:6d:55:60:02:61:36:49:ce:91:fc:eb:61:3c:8c:13:c4:
         59:2d:30:67:cc:b8:d3:dc:0c:e2:ab:74:97:29:5f:02:8a:6b:
         d4:86:c6:92:57:6a:73:85:48:1a:c0:ed:da:a6:ee:73:eb:c6:
         46:52:5f:4f:ad:6a:1c:98:62:6c:49:0b:28:d4:68:36:51:0d:
         67:ad:b8:8d:04:1c:bb:ca:a1:22:9c:22:b2:1c:86:21:58:98:
         7c:01:50:c8:27:7e:2b:61:c3:b4:c2:9b:06:e1:ed:2a:06:0a:
         d4:bc:02:be:4e:60:39:0a:97:08:38:d1:41:ff:ae:54:16:c9:
         ec:5d:21:e8:1b:4a:31:5c:3f:02:3c:ac:28:4b:5c:58:a9:05:
         dc:d0:3b:c0:6b:fa:c3:8d:30:b7:6f:52:7e:d2:59:b1:22:50:
         03:c9:ed:bf:9a:59:c7:db:8a:78:f3:f5:dd:c9:ec:9c:1d:4e:
         96:27:4c:46:dd:8f:47:2d:46:31:61:f4:9b:db:bc:e4:e9:a0:
         b1:98:e0:8f:11:1b:a2:f7:41:52:69:14:d7:b2:d4:a2:ff:75:
         6f:d2:e5:77:47:09:ce:f6:fc:b1:ec:21:dc:cc:09:43:64:a3:
         da:c9:c2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org