Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DD91AC02268CF5FD5513C24264D7E77FF26A8D1F.cer
File:                     DD91AC02268CF5FD5513C24264D7E77FF26A8D1F.cer (raw, json)
Hash identifier:          P+7UIaiP6LRkgiSBjSBrK0Ts/niiP+z+grcKNmxt5hY=
Subject key identifier:   DD:91:AC:02:26:8C:F5:FD:55:13:C2:42:64:D7:E7:7F:F2:6A:8D:1F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       54CBE6DD99AB49C6C55FFC6DAA66347D99196F62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/DD91AC02268CF5FD5513C24264D7E77FF26A8D1F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Jul 2022 23:31:48 +0000
Certificate not after:    Wed 05 Jul 2023 23:36:48 +0000
Subordinate resources:    AS: 263349
                          IP: 191.37.16.0/21
                          IP: 2804:14c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:cb:e6:dd:99:ab:49:c6:c5:5f:fc:6d:aa:66:34:7d:99:19:6f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  6 23:31:48 2022 GMT
            Not After : Jul  5 23:36:48 2023 GMT
        Subject: CN=DD91AC02268CF5FD5513C24264D7E77FF26A8D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0c:47:f5:3e:ee:cf:2d:13:48:f3:03:67:ac:
                    69:30:5f:b9:2c:d2:09:7a:c9:5d:cd:ef:7f:d3:77:
                    20:78:43:61:92:7c:c0:cd:b7:f9:2a:df:50:04:53:
                    d9:d3:cd:65:c8:fe:e2:8b:5e:d0:3c:32:23:8e:20:
                    76:42:ab:02:d9:da:5f:2d:5f:60:c2:e7:3a:c6:b7:
                    a6:60:e8:09:87:d2:a0:1a:ba:d8:5c:e6:ec:67:c3:
                    0b:ed:01:ed:f4:ec:14:5c:78:c2:6c:d5:c9:9f:49:
                    a6:ac:71:db:30:c3:43:c6:32:cc:eb:10:1b:f6:e6:
                    8e:39:c9:45:6a:30:6b:94:9f:ac:84:83:94:7e:00:
                    8f:a5:f5:cb:50:c8:00:d3:d0:11:d2:a6:b6:f7:33:
                    21:01:b8:e7:25:e3:5f:81:dd:1e:68:70:1a:9a:a5:
                    d5:d7:b9:f8:eb:b7:94:51:27:c9:e1:7c:a7:d2:f1:
                    fa:88:b2:a6:72:af:ed:61:5b:49:1f:ff:0a:47:02:
                    f2:6b:42:da:8a:eb:98:70:b5:ee:2e:34:98:6c:f3:
                    d4:00:2b:e4:5a:c2:ad:81:b6:ca:a1:d9:e5:3e:72:
                    9a:7e:0d:b5:42:45:3c:db:42:fb:96:57:e1:cb:32:
                    20:18:f8:ca:36:08:db:0b:c6:82:a4:b5:fd:03:e4:
                    eb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DD:91:AC:02:26:8C:F5:FD:55:13:C2:42:64:D7:E7:7F:F2:6A:8D:1F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/DD91AC02268CF5FD5513C24264D7E77FF26A8D1F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.16.0/21
                IPv6:
                  2804:14c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263349

    Signature Algorithm: sha256WithRSAEncryption
         3a:dd:cd:a3:54:29:2b:86:47:77:eb:b5:09:96:c1:c9:0b:ef:
         b7:f2:8e:e1:c9:6a:fe:b5:86:01:d1:fb:95:ab:83:11:41:78:
         fc:af:e6:3e:b3:01:50:70:e8:19:f2:9a:7d:50:46:be:1b:52:
         4e:f8:79:6f:45:2c:c5:e5:d9:17:92:7f:02:0b:3e:33:58:dd:
         f6:43:27:04:c7:c4:9e:f5:2a:e6:4e:e7:2a:c4:fc:96:10:20:
         24:e3:4b:f4:46:62:13:66:93:e7:69:e2:61:dd:98:b3:7e:d9:
         4f:51:24:60:f5:fb:cb:3a:5a:2f:10:d4:48:e5:bb:a0:0f:de:
         28:27:ba:ba:84:b0:71:15:fe:3c:bd:02:b9:0f:d2:1d:2c:58:
         ec:c9:7a:ac:a6:56:30:9c:95:16:5a:6c:70:aa:66:b6:72:95:
         4b:03:98:3c:58:78:c2:ed:d7:91:50:0b:4e:6b:64:46:b4:95:
         23:4a:39:06:dc:3f:07:6e:a1:09:54:38:e8:78:46:d7:c5:e3:
         a1:f4:77:23:97:03:03:19:15:4b:b9:4b:48:cf:8b:dc:e7:0d:
         0c:47:e1:d4:68:86:ec:21:9a:78:09:11:87:b3:2b:f2:06:7e:
         6e:68:19:12:a6:3d:d8:23:56:21:45:b4:d0:2e:78:e6:29:68:
         eb:64:6d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org