Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.cer
File:                     DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.cer (raw, json)
Hash identifier:          eIrfZQyuLBcZRtoJ5jq3EwVxQlorL46hTHzBuMOrlaM=
Subject key identifier:   DC:C8:E9:17:3F:40:90:DF:EE:9D:C2:DC:22:DD:E2:3B:8D:E2:3A:CC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       657773844AA84024E5F73244C397A8333C2C2268
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 16 Aug 2023 18:05:59 +0000
Certificate not after:    Wed 14 Aug 2024 18:10:59 +0000
Subordinate resources:    AS: 52660
                          IP: 177.66.248.0/21
                          IP: 2804:c04::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:77:73:84:4a:a8:40:24:e5:f7:32:44:c3:97:a8:33:3c:2c:22:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 16 18:05:59 2023 GMT
            Not After : Aug 14 18:10:59 2024 GMT
        Subject: CN=DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ca:02:13:9c:be:5e:f3:70:2e:d8:f1:72:a4:
                    ac:33:57:79:c0:cf:d6:3c:52:df:09:82:3b:08:b2:
                    42:98:06:78:9b:00:55:43:58:66:a2:2f:86:a4:38:
                    ae:cd:a0:7d:08:c5:0d:30:89:4c:9e:b8:46:71:94:
                    d0:ab:ae:94:dc:0d:c0:e8:55:57:b7:d1:c3:51:6e:
                    c5:3c:29:be:76:ec:14:1b:52:ea:de:5f:42:6b:04:
                    6e:37:e5:52:72:56:b2:20:01:0b:02:bd:a2:24:9c:
                    d7:14:14:1d:69:37:1b:9c:62:e2:97:2a:e8:ca:62:
                    e9:62:73:a3:6f:bd:aa:bf:f7:4b:6a:88:87:70:e8:
                    1f:88:5e:a3:54:17:d3:57:59:62:c4:5e:b7:4b:64:
                    38:96:71:b4:a0:c2:9f:21:86:df:9b:43:26:e5:4b:
                    2b:86:5e:9f:c4:f9:fa:57:ed:b6:f8:43:18:66:cd:
                    8f:39:1c:15:d4:4f:6c:7a:4d:90:0a:c4:0e:3c:ca:
                    d6:95:b6:bc:89:58:c9:3e:af:8d:38:38:80:be:7b:
                    71:92:15:84:6f:74:78:4e:94:51:5d:14:51:f3:98:
                    35:30:fc:7d:ac:28:7e:9d:d4:34:83:15:85:5a:78:
                    27:53:bc:24:6b:d7:44:af:a8:21:5f:a2:43:fb:11:
                    1d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:C8:E9:17:3F:40:90:DF:EE:9D:C2:DC:22:DD:E2:3B:8D:E2:3A:CC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.248.0/21
                IPv6:
                  2804:c04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52660

    Signature Algorithm: sha256WithRSAEncryption
         b0:5e:3b:e5:95:d3:80:63:73:74:09:9b:e1:fa:a4:c7:c1:03:
         65:df:0d:46:73:0e:4e:9e:c5:1a:ba:14:8f:f8:78:7a:72:1e:
         0a:ce:9b:e7:03:65:c8:4b:91:16:95:0f:bb:8b:34:bf:e5:a3:
         ab:ec:9f:82:eb:1a:40:25:29:d3:76:0a:01:e0:90:21:58:2c:
         54:c9:b7:91:ed:ef:6f:3a:08:34:de:39:3b:54:9c:37:9b:b4:
         bf:f5:cb:ef:6f:3a:dc:8b:0b:bb:4d:8f:f2:2f:7c:11:cc:b2:
         eb:2f:93:f2:e0:4b:33:20:bd:9e:c2:32:9f:c5:35:e9:66:d3:
         b5:43:54:15:5d:e3:30:c2:3e:18:fd:66:00:c5:c4:24:e2:9c:
         67:6b:b6:fd:54:a1:ed:42:7b:f8:6b:e7:a8:56:a3:12:75:87:
         c7:4c:40:5d:fd:f2:37:89:2d:6e:5a:87:eb:c7:7a:3e:78:cb:
         d0:a7:c4:9d:62:c2:c6:03:89:f2:92:49:1e:79:18:2b:1d:af:
         1a:cb:12:f3:4e:9a:8b:8f:9e:e8:67:ab:8b:5e:a2:ff:85:65:
         19:c8:36:71:f7:3b:bf:1c:ae:df:59:a0:20:97:21:30:36:6f:
         4a:2f:b0:ac:ca:dc:e3:5d:31:c6:5e:ff:c1:e9:48:5f:33:2b:
         1c:2d:e0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:35 2025 by rpki-client