Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0DC19C23CDB35FB0A5F742FD8D6E4C053EF00EE9.cer
File:                     0DC19C23CDB35FB0A5F742FD8D6E4C053EF00EE9.cer (raw, json)
Hash identifier:          nZXMhWydHq12HJrXqHXINwFiVJTddrqCeGfjuzJDsXo=
Subject key identifier:   0D:C1:9C:23:CD:B3:5F:B0:A5:F7:42:FD:8D:6E:4C:05:3E:F0:0E:E9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5F54A09AC0EF6243BDA45F02FED43CB87D27B3D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/0DC19C23CDB35FB0A5F742FD8D6E4C053EF00EE9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Nov 2023 19:20:45 +0000
Certificate not after:    Thu 14 Nov 2024 19:25:45 +0000
Subordinate resources:    AS: 269329
                          IP: 45.184.128.0/22
                          IP: 2804:62f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:54:a0:9a:c0:ef:62:43:bd:a4:5f:02:fe:d4:3c:b8:7d:27:b3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 16 19:20:45 2023 GMT
            Not After : Nov 14 19:25:45 2024 GMT
        Subject: CN=0DC19C23CDB35FB0A5F742FD8D6E4C053EF00EE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e3:12:3f:94:24:43:3f:66:f5:98:7b:b2:64:
                    c8:a2:2d:a8:11:28:06:81:df:b4:07:fc:e2:36:90:
                    f0:e1:eb:65:e0:53:f8:d9:fd:96:71:3a:19:84:0e:
                    1b:22:d1:46:31:52:5c:77:dc:50:79:b4:91:22:97:
                    1c:02:2c:30:71:ad:77:53:ad:26:c8:47:83:26:cf:
                    e2:98:29:ae:bf:34:5f:dd:d3:a6:8e:33:53:16:4f:
                    30:11:94:20:b5:8d:24:15:1c:ce:2d:fb:08:47:f2:
                    5b:af:b9:83:85:ba:dd:48:45:af:5a:7e:f5:c1:d5:
                    97:f2:1e:1e:f5:12:a6:98:8f:76:1a:e4:cf:b4:46:
                    8d:8c:41:79:ee:3a:28:35:9a:bc:c5:ed:bc:ca:af:
                    40:7a:31:16:c4:91:e5:8e:a4:8b:ce:91:f9:58:63:
                    0c:fd:10:09:16:23:1c:0d:5f:7f:8c:e7:5d:97:b2:
                    0b:61:b5:11:a9:fa:f3:dc:dd:cb:e7:b3:07:a1:8c:
                    97:45:d4:ee:b0:b7:31:81:07:3c:cc:d0:51:43:e0:
                    ff:ed:22:3b:2c:35:ed:c8:28:98:26:f3:22:3b:37:
                    3d:b9:10:5a:16:de:b2:67:b4:c1:fc:a2:d0:1d:eb:
                    91:06:eb:a8:9d:1a:a6:37:bb:1c:59:b8:6f:3f:6b:
                    b3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:C1:9C:23:CD:B3:5F:B0:A5:F7:42:FD:8D:6E:4C:05:3E:F0:0E:E9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/0DC19C23CDB35FB0A5F742FD8D6E4C053EF00EE9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.128.0/22
                IPv6:
                  2804:62f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269329

    Signature Algorithm: sha256WithRSAEncryption
         ac:b6:aa:6c:10:56:98:6b:f6:dd:f7:55:25:85:3b:08:ee:38:
         76:7d:9b:94:bd:ee:88:26:d4:cd:7a:c1:b5:f9:0b:4d:60:d3:
         32:08:d0:cc:bc:aa:47:65:0c:9f:91:93:c7:0c:14:7c:3d:f6:
         02:98:24:32:d3:b1:e2:c8:92:73:2b:32:e2:42:49:fd:07:c8:
         48:f8:5c:fa:be:34:d6:dc:59:e8:49:67:d0:1d:2d:87:3e:f8:
         ee:24:70:3f:59:36:0a:57:27:2d:76:a8:2c:d5:21:cd:fd:12:
         8e:ba:ad:94:b5:a9:2c:9a:f5:7f:15:4a:b2:55:84:d3:de:4a:
         85:90:7d:89:b9:bb:84:e5:cc:00:a2:3c:0c:54:9f:a9:b4:12:
         46:24:07:91:36:08:d9:5e:09:51:7a:e7:42:17:5a:18:b0:5c:
         24:bf:93:65:4c:07:e2:7c:b2:b7:5b:9d:11:5a:b3:2a:e8:27:
         e8:d3:1f:41:56:3b:23:2e:16:4b:a5:f3:76:5f:5d:d1:5b:8d:
         65:f3:e6:d6:e9:3e:45:45:af:c7:30:8e:90:a1:1d:9a:16:ea:
         e3:4d:09:19:9f:93:e6:5f:74:51:01:30:01:b3:79:61:bb:0e:
         c6:c0:fe:7f:7e:3b:5b:e6:e5:cd:51:52:f9:ca:7a:6c:a3:8b:
         9f:3b:81:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org