Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D33C962FB2B67025DEA2D9E8E01FC160EC73B49A.cer
File:                     D33C962FB2B67025DEA2D9E8E01FC160EC73B49A.cer (raw, json)
Hash identifier:          0PyTOkHCyuR38raXCQOh3szQqqLjXcSnOwKVK/SDHUQ=
Subject key identifier:   D3:3C:96:2F:B2:B6:70:25:DE:A2:D9:E8:E0:1F:C1:60:EC:73:B4:9A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       094A86DA501C9E5B94D3BBD6E675EBC45FED7056
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/D33C962FB2B67025DEA2D9E8E01FC160EC73B49A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Dec 2023 15:41:12 +0000
Certificate not after:    Wed 18 Dec 2024 15:46:12 +0000
Subordinate resources:    AS: 262324
                          IP: 143.202.128.0/22
                          IP: 177.67.28.0/22
                          IP: 177.124.136.0/22
                          IP: 2804:7d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:4a:86:da:50:1c:9e:5b:94:d3:bb:d6:e6:75:eb:c4:5f:ed:70:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 20 15:41:12 2023 GMT
            Not After : Dec 18 15:46:12 2024 GMT
        Subject: CN=D33C962FB2B67025DEA2D9E8E01FC160EC73B49A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:35:93:93:97:6b:a4:b6:ed:b4:3c:24:13:3e:
                    2a:fc:2d:4a:5d:c4:93:09:f7:50:e5:fe:f7:1b:a9:
                    8c:8b:42:1f:96:ff:0b:26:fb:f6:26:45:a4:88:f5:
                    15:1e:31:99:a9:f4:10:8f:06:63:3e:5d:a9:4e:68:
                    27:f7:2c:32:0e:ca:58:ec:a6:72:d0:d7:07:51:23:
                    d7:a5:6a:78:15:a2:e6:2e:b8:06:08:51:34:ef:45:
                    af:d4:76:96:fb:d3:82:e3:4e:37:37:c4:b8:a1:91:
                    e9:c1:6d:73:f7:d9:b8:4c:64:44:1f:3b:b8:17:29:
                    96:f8:95:65:18:61:aa:d7:8d:9a:94:1e:ba:01:88:
                    10:98:e8:f7:54:79:e8:8c:0f:fd:fd:fe:af:ad:bf:
                    17:8c:1a:6d:dd:ee:c4:d9:a3:37:8d:73:6d:b5:34:
                    bb:b1:00:58:9f:f7:97:55:58:7c:2b:a5:a3:b5:ed:
                    6f:29:83:da:12:d4:c6:c4:5b:15:42:cb:79:38:32:
                    78:86:a3:69:6b:5f:e4:70:9c:76:50:3f:9f:9d:1a:
                    47:6b:7a:36:9e:11:58:af:2e:46:3b:e6:6f:35:f8:
                    d2:c4:87:27:2e:06:8e:88:72:93:76:9c:ea:64:3c:
                    a6:31:57:37:48:fd:b3:e0:f2:7e:18:b9:75:c3:ab:
                    1a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:3C:96:2F:B2:B6:70:25:DE:A2:D9:E8:E0:1F:C1:60:EC:73:B4:9A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/D33C962FB2B67025DEA2D9E8E01FC160EC73B49A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.128.0/22
                  177.67.28.0/22
                  177.124.136.0/22
                IPv6:
                  2804:7d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262324

    Signature Algorithm: sha256WithRSAEncryption
         7b:08:91:a0:f3:ac:84:ad:6d:cd:60:10:69:e9:d7:3a:9f:5b:
         0b:1b:83:b7:55:2b:13:b8:1f:4a:ba:e0:35:e7:d5:fa:ef:54:
         64:10:ec:be:f5:d6:0a:03:26:46:e7:ce:36:17:2c:32:f5:a1:
         fa:0d:c6:fe:f1:bd:80:6c:65:84:99:8e:53:87:09:cf:1f:5f:
         9a:58:a0:29:aa:d2:76:ba:8d:25:3e:de:9e:37:e3:df:6d:3c:
         92:17:0e:c6:3c:c1:14:84:b4:6d:ed:8d:2d:df:f3:74:84:71:
         3e:9e:ff:6f:2f:80:fc:54:76:1a:bb:5f:6d:18:76:bb:a0:0e:
         ee:cf:ae:8e:bd:fa:f9:95:3a:b5:bb:31:7e:45:15:d3:60:87:
         44:6c:56:71:ab:4f:89:13:c9:37:78:d8:9d:0f:04:a9:84:11:
         df:27:be:6a:83:f8:4a:0e:4c:19:55:3d:7a:46:2d:a9:f8:2e:
         fe:32:ef:d9:34:27:78:d3:af:82:09:b7:bf:cf:44:25:3f:bf:
         74:88:6f:cf:9e:55:c8:ef:14:df:0a:d9:ed:b4:b8:70:14:88:
         9d:11:02:7a:bb:01:aa:b1:fd:be:5e:a6:ba:a8:aa:5e:1e:43:
         49:ca:f6:29:53:ed:56:69:f1:e1:6d:cd:3c:7d:9f:12:bb:9e:
         74:06:95:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org