Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DDB66674C036C2DB0C390D3FD1D7C43C9F43CB12.cer
File:                     DDB66674C036C2DB0C390D3FD1D7C43C9F43CB12.cer (raw, json)
Hash identifier:          wBk7pGVG3uI0MoeeXyfYvz5XLT6B+mZ5y8pjvy3LSLo=
Subject key identifier:   DD:B6:66:74:C0:36:C2:DB:0C:39:0D:3F:D1:D7:C4:3C:9F:43:CB:12
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       100DC30FD25B77E99DC8B7D6484935381464EBBB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/DDB66674C036C2DB0C390D3FD1D7C43C9F43CB12.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 05 Dec 2021 07:38:47 +0000
Certificate not after:    Sun 04 Dec 2022 07:43:47 +0000
Subordinate resources:    AS: 269396
                          IP: 45.184.112.0/22
                          IP: 2804:63fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0d:c3:0f:d2:5b:77:e9:9d:c8:b7:d6:48:49:35:38:14:64:eb:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 07:38:47 2021 GMT
            Not After : Dec  4 07:43:47 2022 GMT
        Subject: CN=DDB66674C036C2DB0C390D3FD1D7C43C9F43CB12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8c:b4:d1:47:5a:2f:10:8a:db:7e:bb:94:bf:
                    b2:eb:b5:1f:2b:48:80:a4:29:eb:80:22:5b:72:b4:
                    37:e2:46:22:63:1d:c1:3b:8e:4f:e2:70:bf:32:4a:
                    61:53:1c:fc:96:12:bf:04:42:c4:14:ac:ea:0a:79:
                    be:54:9f:dc:d1:f9:80:61:46:23:3d:dc:dc:7d:f1:
                    83:3e:bf:a2:cf:1e:80:18:17:e7:91:ac:6d:54:4c:
                    61:82:d3:3b:41:c0:a2:73:71:95:a1:5a:c7:71:b5:
                    b7:18:73:09:5c:c9:c1:f6:87:d9:a8:7a:51:11:fd:
                    5a:a3:1b:bb:ff:ce:ab:b9:3a:a0:08:b8:d9:54:c3:
                    f3:07:2e:57:97:c0:cc:bc:4b:68:20:79:9e:cb:d7:
                    1f:27:01:ee:3f:23:60:fe:cf:6d:91:b1:7f:ed:5c:
                    3b:11:3c:e5:10:7d:1d:4c:af:e8:20:04:56:0c:0c:
                    24:61:dc:a6:65:f9:39:a6:da:71:e8:25:82:34:3b:
                    be:e9:03:91:31:65:b2:63:db:64:0f:d0:f8:20:c2:
                    1b:3a:4a:93:d3:5d:e3:aa:29:a3:46:e9:76:13:94:
                    f3:48:b9:48:31:04:90:d3:3f:b9:bb:85:4a:8f:f5:
                    31:56:52:66:06:64:61:3c:86:85:89:4d:0a:10:81:
                    8c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DD:B6:66:74:C0:36:C2:DB:0C:39:0D:3F:D1:D7:C4:3C:9F:43:CB:12
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E75EAhsiHth2YT9GViLis1nBe66AecPYQdb1SJy4KJjV/0/DDB66674C036C2DB0C390D3FD1D7C43C9F43CB12.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.112.0/22
                IPv6:
                  2804:63fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269396

    Signature Algorithm: sha256WithRSAEncryption
         8a:a3:99:37:46:8a:bd:60:54:eb:1d:85:76:1c:6c:1a:e7:86:
         ab:8b:95:45:1b:b0:4b:9b:a9:c7:cc:e2:c0:19:73:72:65:cb:
         a3:e3:ce:9c:f9:68:f9:a2:4d:5b:db:7b:00:bf:58:d0:cd:4a:
         b7:25:9b:be:d8:eb:a7:97:5a:3b:68:a4:8c:5d:7a:6e:23:80:
         1c:b2:54:99:ff:d7:b5:a1:e7:62:00:57:a0:64:7e:fa:33:db:
         95:d8:3a:41:35:f3:7e:fc:4e:df:0b:67:15:e1:7a:ef:0c:7f:
         04:93:94:84:44:40:6e:1d:21:8a:1f:49:2c:50:ba:3e:20:30:
         25:6f:88:ed:0b:54:f3:6e:05:6a:74:c7:c6:0a:c7:69:31:47:
         cd:5a:6d:46:4d:9c:86:a3:a2:23:26:69:33:f9:fa:cb:c2:99:
         b2:f8:7d:65:29:6f:33:e0:b4:27:58:e1:22:ec:d4:2f:b4:5c:
         0f:90:29:9f:e4:5e:1a:72:f0:6b:74:82:b6:f2:2f:2e:fe:e8:
         30:7a:ae:16:db:de:ab:a5:28:b5:5f:3c:7b:c7:eb:64:16:f7:
         4b:8e:d2:4b:c3:93:d9:06:05:0d:44:9f:33:6d:a3:1a:2c:ec:
         7e:21:4c:fc:cf:04:18:ff:6a:83:b9:22:42:ea:ef:a7:03:85:
         4d:33:ff:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org