Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DDC6FAE4C7FD5696ED7BDCA7C0F2CF639317052D.cer
File:                     DDC6FAE4C7FD5696ED7BDCA7C0F2CF639317052D.cer (raw, json)
Hash identifier:          CzP4H41S/0JesI8gd49jXnZzfmtM1flUH5iM7HvhCtg=
Subject key identifier:   DD:C6:FA:E4:C7:FD:56:96:ED:7B:DC:A7:C0:F2:CF:63:93:17:05:2D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       39FF6D761EDD58FC895F00A3C7E89142956F3C57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/DDC6FAE4C7FD5696ED7BDCA7C0F2CF639317052D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Oct 2023 12:19:42 +0000
Certificate not after:    Tue 22 Oct 2024 12:24:42 +0000
Subordinate resources:    AS: 273360
                          IP: 2804:8d7c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ff:6d:76:1e:dd:58:fc:89:5f:00:a3:c7:e8:91:42:95:6f:3c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 24 12:19:42 2023 GMT
            Not After : Oct 22 12:24:42 2024 GMT
        Subject: CN=DDC6FAE4C7FD5696ED7BDCA7C0F2CF639317052D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0d:d9:4b:32:53:66:6f:0e:de:51:21:e9:67:
                    ec:e4:f3:e0:61:db:99:18:c2:e8:33:bb:50:95:57:
                    74:fd:25:8e:d0:2e:9e:7e:d8:fd:ba:a5:6a:c9:03:
                    9e:08:9e:51:33:66:c1:d7:de:7f:06:93:86:ee:cb:
                    65:f5:4e:07:7d:f3:ac:1e:c6:d8:13:7e:b7:89:75:
                    88:54:fb:d3:86:ec:fc:0b:8b:82:b7:8e:06:5c:e8:
                    c1:52:09:b7:bf:d7:44:21:03:4c:e9:a9:1e:a0:a1:
                    d8:69:6b:03:e1:17:cd:51:37:de:24:b7:c3:9d:54:
                    61:95:a6:1e:8a:8b:6b:af:43:37:4f:1a:89:70:c2:
                    01:b8:75:48:44:0b:01:85:de:17:6a:05:c1:cb:92:
                    28:b6:4f:c4:0e:b7:6e:62:27:11:09:53:f9:8d:a4:
                    60:46:79:48:2f:15:87:ad:6e:67:b1:02:be:de:1a:
                    38:0d:4e:cb:42:1f:50:14:42:51:8b:e5:8d:cd:40:
                    d1:6e:67:57:85:be:77:5c:b5:a6:ce:36:b0:57:d6:
                    57:27:c2:9f:ac:5f:97:54:85:e9:79:79:49:ed:0e:
                    ab:7c:ef:08:33:4e:29:52:c7:b4:f8:6e:af:b2:72:
                    4e:ff:fb:d4:c3:39:a9:15:ac:18:19:ad:62:ff:a0:
                    0e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DD:C6:FA:E4:C7:FD:56:96:ED:7B:DC:A7:C0:F2:CF:63:93:17:05:2D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/DDC6FAE4C7FD5696ED7BDCA7C0F2CF639317052D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273360

    Signature Algorithm: sha256WithRSAEncryption
         98:76:a0:6e:29:68:ee:a7:43:8f:16:05:fa:e0:52:08:b3:00:
         e0:d3:3a:fa:2a:ff:22:21:00:ae:1b:5b:9a:f9:0b:6a:ae:ca:
         fb:5a:a8:6c:68:de:8c:10:ee:56:b0:26:c6:ab:c0:a5:d3:0d:
         67:92:14:60:ce:ed:f8:64:85:00:a4:d6:2a:55:ff:e4:29:03:
         f7:1a:70:b2:4b:ca:d0:66:07:08:59:53:2e:5e:eb:5e:a2:d8:
         88:cf:e3:2e:c9:7b:29:5f:76:c1:59:c6:c1:20:23:c0:ea:0e:
         46:9d:05:a5:ca:de:c5:72:3d:b4:15:e5:3d:99:c9:e0:57:31:
         a1:b2:83:4d:9e:ed:bb:4d:44:aa:3e:38:e9:25:fb:bc:7b:e8:
         f2:55:3c:e2:01:fb:bf:88:ef:8c:b2:bb:73:ed:bc:c6:4a:10:
         04:92:11:64:30:ce:ad:d7:e0:7b:2c:2b:82:85:7a:92:26:06:
         a4:bb:e5:a0:af:54:f9:38:bb:2a:d7:63:8d:21:82:45:11:d6:
         0f:f9:61:e0:03:b8:ef:13:11:6c:88:00:a4:a8:8a:97:cd:26:
         ab:81:01:34:51:b5:30:a2:fd:df:35:83:51:fa:83:5e:27:94:
         33:b9:5b:0c:52:ef:cf:2a:38:b7:93:25:b9:cf:28:b0:46:2e:
         06:7f:91:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org