Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0DEAFCF01F092EBA06C4F4AF456F5A11AFCF896C.cer
File:                     0DEAFCF01F092EBA06C4F4AF456F5A11AFCF896C.cer (raw, json)
Hash identifier:          xv29j5NWzGfcTJn0dzV4I9TtkSKjrM7fMwDJfHawvfw=
Subject key identifier:   0D:EA:FC:F0:1F:09:2E:BA:06:C4:F4:AF:45:6F:5A:11:AF:CF:89:6C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6A06B711FC7B072769E13FC1AA1D4C4FCF9E69A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/0/0DEAFCF01F092EBA06C4F4AF456F5A11AFCF896C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Oct 2023 08:53:31 +0000
Certificate not after:    Tue 15 Oct 2024 08:58:31 +0000
Subordinate resources:    AS: 268531
                          IP: 45.162.144.0/22
                          IP: 2804:52a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:06:b7:11:fc:7b:07:27:69:e1:3f:c1:aa:1d:4c:4f:cf:9e:69:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 17 08:53:31 2023 GMT
            Not After : Oct 15 08:58:31 2024 GMT
        Subject: CN=0DEAFCF01F092EBA06C4F4AF456F5A11AFCF896C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ba:cb:d0:39:00:38:9c:85:1e:f8:20:57:20:
                    cd:65:7c:75:26:04:91:a5:05:a1:58:99:f3:91:9d:
                    e7:80:8d:db:63:23:62:b8:64:49:10:e9:63:b9:93:
                    95:76:e6:d0:8e:9c:6e:b9:5a:b3:9a:b5:82:14:cb:
                    5c:ae:69:1c:2c:b5:a8:25:07:8b:f4:f5:bb:a9:a6:
                    a0:80:8a:1a:a1:8b:3c:3f:24:d2:7c:52:ae:e0:42:
                    44:d5:4d:e5:1b:c2:04:22:65:81:15:38:86:6a:fc:
                    ed:d3:be:16:ba:bc:e6:15:53:bd:0b:be:1c:b2:09:
                    66:c3:76:92:8e:5c:0f:dc:a6:ed:70:91:85:23:56:
                    ad:71:22:ed:bc:07:fd:e6:ef:82:2e:d9:7a:45:4a:
                    99:d7:17:11:e2:12:fc:1b:74:f7:b2:5e:b1:fd:8c:
                    8c:b1:51:73:66:a3:2a:ca:95:a6:89:83:07:46:a0:
                    bf:9a:f4:83:a0:b2:37:cf:c3:58:f7:47:0f:84:6c:
                    4e:f2:92:21:21:65:83:ce:b1:d0:1a:b7:27:39:71:
                    48:b0:f3:a3:6f:8d:96:11:c2:bf:ac:07:9d:a3:fb:
                    c4:a5:93:3b:56:d8:ce:de:0f:1c:b9:90:9d:e5:61:
                    9f:f8:fb:81:7c:56:d7:b1:c9:37:11:08:2e:90:7a:
                    b0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:EA:FC:F0:1F:09:2E:BA:06:C4:F4:AF:45:6F:5A:11:AF:CF:89:6C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4zeKsdUXbymv9AsnTETiKAxRqCbXcHtptdW5Bf83wm34/0/0DEAFCF01F092EBA06C4F4AF456F5A11AFCF896C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.144.0/22
                IPv6:
                  2804:52a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268531

    Signature Algorithm: sha256WithRSAEncryption
         b2:d9:a4:5e:58:9c:33:ff:d7:5b:ef:7b:cd:84:17:ac:ad:a3:
         18:82:95:7f:10:ce:b4:3e:05:56:f4:1e:5f:9c:e4:f1:54:5f:
         87:b8:3f:42:cf:25:94:db:89:8a:1a:33:85:f3:e8:8d:4e:49:
         3a:17:95:65:44:46:57:0f:cc:2b:21:c1:a6:d1:b4:a9:d1:fc:
         a4:b9:fc:6b:bc:74:1a:e8:16:5a:25:53:ea:f8:d8:21:00:84:
         0c:be:15:b3:f8:07:39:5a:91:90:4d:99:dd:84:29:c3:13:52:
         23:b1:9b:37:21:99:be:c5:9f:9c:0c:eb:b7:89:0b:27:0d:99:
         ec:a0:1f:0d:3f:69:33:5b:42:ac:2c:9c:11:5e:b8:58:5c:6f:
         a4:71:46:2c:33:7f:16:14:22:53:64:0d:ce:4d:23:94:47:5b:
         b4:4c:9c:a9:6b:b4:cb:8b:82:fc:c4:03:dd:d6:00:0e:ac:44:
         40:03:80:57:b0:97:98:d7:4f:a5:a1:a3:ff:4a:bf:b3:30:07:
         62:37:5a:ba:79:95:7b:59:9d:6e:43:cb:a8:e7:8f:49:49:97:
         07:70:7d:e1:75:6e:8a:44:c6:64:33:c4:8c:68:e3:91:21:66:
         91:02:96:51:53:72:af:22:3d:97:5b:36:04:6b:cb:15:37:dd:
         61:ba:08:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org