Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DE2490482D58BA1938718BC52A6EF59DA097815A.cer
File:                     DE2490482D58BA1938718BC52A6EF59DA097815A.cer (raw, json)
Hash identifier:          wfb/GRiNFqbkSQ0+yigLjFF6+HK0tUQKwf2EOA0YNDM=
Subject key identifier:   DE:24:90:48:2D:58:BA:19:38:71:8B:C5:2A:6E:F5:9D:A0:97:81:5A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       23C2065DD26FF83EFAC45F73F8BEDCB7467626FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/DE2490482D58BA1938718BC52A6EF59DA097815A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Jun 2023 17:49:17 +0000
Certificate not after:    Mon 17 Jun 2024 17:54:17 +0000
Subordinate resources:    AS: 262742
                          IP: 177.104.32.0/19
                          IP: 2801:a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c2:06:5d:d2:6f:f8:3e:fa:c4:5f:73:f8:be:dc:b7:46:76:26:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 19 17:49:17 2023 GMT
            Not After : Jun 17 17:54:17 2024 GMT
        Subject: CN=DE2490482D58BA1938718BC52A6EF59DA097815A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e6:c4:cc:64:1a:6d:f8:61:fc:3b:1b:a5:99:
                    a2:1f:2a:e7:b6:43:5a:13:2a:91:b4:89:c4:1e:0d:
                    6b:0e:0f:06:2d:4c:cd:df:a6:70:ef:58:ad:83:de:
                    49:98:31:4e:cb:b2:db:22:c2:9e:4f:36:17:8a:9c:
                    24:ca:ef:17:1e:ef:21:b6:b3:08:8a:c2:85:a5:55:
                    3c:e2:7a:0f:c7:82:72:c8:5e:d4:97:2d:6d:c0:bb:
                    3a:b6:5e:c4:0d:a9:b0:83:2a:b4:8b:66:f5:a7:6a:
                    8c:fd:c4:f9:67:bb:78:86:aa:25:94:c9:7e:b9:52:
                    cc:bf:34:2f:f4:8b:e0:e1:83:c7:0f:71:42:4f:77:
                    2b:e1:bf:55:8f:32:b9:9b:41:9a:2a:e9:20:ec:e7:
                    fa:76:11:3a:22:ee:a2:96:fc:6c:fb:2d:15:c1:c9:
                    9c:b7:c4:08:8d:23:51:ea:79:54:10:cb:48:c1:12:
                    49:87:39:e4:f0:b6:23:f3:a7:f6:48:95:b9:ea:ce:
                    77:39:6c:d0:b3:14:09:df:18:39:6b:6d:31:8c:f0:
                    f0:1a:d7:63:f7:ab:fa:c6:b7:42:52:b1:d7:8e:63:
                    10:79:5b:ac:e4:39:89:e2:55:ad:37:77:f9:36:79:
                    35:2d:51:5a:f0:58:8f:9f:63:ec:d6:cf:b0:c7:09:
                    7c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:24:90:48:2D:58:BA:19:38:71:8B:C5:2A:6E:F5:9D:A0:97:81:5A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/DE2490482D58BA1938718BC52A6EF59DA097815A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.32.0/19
                IPv6:
                  2801:a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262742

    Signature Algorithm: sha256WithRSAEncryption
         70:8c:2d:79:04:d3:82:31:30:c5:51:53:a4:93:5a:c9:57:51:
         01:63:ac:e9:8e:a6:ba:74:f5:76:9b:17:ef:29:02:d9:7b:55:
         fc:35:99:27:3b:b4:42:4f:98:08:c5:a0:db:0b:90:be:ff:64:
         75:bd:e9:8a:41:83:f6:9c:52:15:55:f6:2e:ba:32:d7:94:a3:
         78:b3:5f:5c:ca:05:9f:5f:71:69:0a:18:0a:cc:01:0e:41:32:
         53:2d:23:ad:bf:86:9b:48:86:7e:e7:ad:ad:d4:f2:94:d1:9a:
         ed:ec:3c:db:53:1c:c9:ae:ae:4a:1b:e3:b8:92:55:8a:66:42:
         dd:ac:d3:62:67:db:ed:86:e4:d9:4e:af:f8:ff:7e:46:71:24:
         98:db:be:a6:d4:a8:3b:e7:95:d1:0a:94:a5:36:07:b1:d6:12:
         66:ec:e5:e1:15:3f:a0:fd:bc:6d:79:65:c6:a1:4e:bf:2a:28:
         c4:9f:62:b9:7b:75:f2:ba:a2:c4:a2:a0:7b:b7:47:4f:3c:6b:
         d5:d0:d1:45:3a:30:3c:e9:fd:83:9a:c7:20:e9:95:6a:b0:76:
         24:b0:24:d5:43:95:03:b9:e8:49:49:4a:00:1b:08:8c:69:78:
         33:46:af:11:6a:70:96:70:32:d3:0c:0a:4d:33:cd:36:51:f1:
         4d:06:78:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org