Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DA1F477B3B82C1A260C1D7857E482F0D8596E756.cer
File:                     DA1F477B3B82C1A260C1D7857E482F0D8596E756.cer (raw, json)
Hash identifier:          TLJqHvOPX5LB6BINywR0/jyj5bzv7eGtYB0eERIOpsw=
Subject key identifier:   DA:1F:47:7B:3B:82:C1:A2:60:C1:D7:85:7E:48:2F:0D:85:96:E7:56
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5BA08809F51CDE8FC6E72AAD5E7D2E1CBDB8D807
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/DA1F477B3B82C1A260C1D7857E482F0D8596E756.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 13:35:41 +0000
Certificate not after:    Thu 13 Feb 2025 13:40:41 +0000
Subordinate resources:    AS: 267672
                          IP: 45.224.196.0/22
                          IP: 2804:4518::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a0:88:09:f5:1c:de:8f:c6:e7:2a:ad:5e:7d:2e:1c:bd:b8:d8:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 13:35:41 2024 GMT
            Not After : Feb 13 13:40:41 2025 GMT
        Subject: CN=DA1F477B3B82C1A260C1D7857E482F0D8596E756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f6:1b:cb:de:bf:36:b7:99:65:8b:22:40:61:
                    ca:66:fb:6a:76:bb:d1:cc:8e:dc:32:b7:02:cb:c4:
                    f2:9b:fb:41:c3:92:cc:33:6f:06:4e:8c:f6:69:e4:
                    9a:8d:48:79:ca:e1:fa:aa:6c:c4:e0:aa:34:67:4f:
                    24:5f:22:b5:c6:bd:ed:27:ab:79:a2:01:79:57:b0:
                    0c:02:6c:e6:97:47:9f:7a:32:66:15:7f:6d:f2:e9:
                    dc:45:13:3e:ae:6a:58:eb:56:39:22:26:d6:00:af:
                    d4:5c:71:85:34:16:98:7a:50:09:89:e5:a3:69:9d:
                    39:75:ee:06:e1:44:92:e3:d5:f3:92:d6:ac:d6:fb:
                    64:08:db:68:43:6f:2c:4c:aa:68:89:d5:b6:46:62:
                    46:6c:78:db:8f:e5:2e:42:1d:23:4e:c5:b7:72:d7:
                    0c:38:6a:d4:21:88:5c:40:ee:29:f5:19:b0:1e:e8:
                    19:d8:b4:79:86:7f:82:a7:a2:cd:b9:cd:18:5e:cf:
                    05:ba:7a:d1:79:fd:59:ab:2e:5f:1f:f1:9f:fe:09:
                    81:b2:a2:aa:ee:f4:dc:e5:db:00:a5:58:c8:00:db:
                    d0:ec:07:52:70:57:9f:01:d2:51:ab:c0:27:2d:5b:
                    8f:6f:2a:89:15:c8:77:9a:9d:ff:59:b2:fe:de:e8:
                    0e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:1F:47:7B:3B:82:C1:A2:60:C1:D7:85:7E:48:2F:0D:85:96:E7:56
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/0/DA1F477B3B82C1A260C1D7857E482F0D8596E756.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.196.0/22
                IPv6:
                  2804:4518::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267672

    Signature Algorithm: sha256WithRSAEncryption
         59:6f:14:62:31:71:d9:78:c0:ec:5b:af:61:fd:80:d6:f7:48:
         7a:2c:07:65:d0:cd:b3:38:d7:9c:b9:07:9b:e5:e4:a9:04:fb:
         de:85:0f:61:53:55:d9:66:d2:89:fd:be:64:35:ff:14:30:61:
         35:13:b4:1e:2f:85:98:11:ce:e4:d0:fd:d9:8e:87:a9:29:db:
         62:bf:44:da:40:d1:9c:89:64:7f:cd:5c:1c:0c:32:d1:fa:70:
         b2:3f:6b:9d:98:6a:6c:fb:82:8b:bc:92:24:13:e7:b2:5e:83:
         78:51:21:7f:60:0b:18:cf:1e:12:6e:a6:f2:cf:2b:9a:73:1a:
         bc:bd:cd:58:02:46:d3:ce:67:c6:e7:cb:79:5d:2d:47:c0:8b:
         cc:80:58:da:6d:b0:78:3a:94:18:5b:e5:09:06:76:1a:29:b8:
         5f:96:fd:bf:9b:c7:81:79:fe:3f:f9:c5:9e:4f:76:39:6e:31:
         63:7d:f4:1f:92:55:42:02:6c:50:0d:d1:d3:eb:09:e0:05:fb:
         fe:a1:5e:21:5f:8a:38:ff:04:d2:35:de:4b:e1:92:9e:43:ce:
         39:3f:7d:3c:a1:57:71:1c:e5:4e:9c:ce:18:37:ec:4c:17:0a:
         01:d4:50:30:e7:7b:43:f0:d0:8a:0f:e2:94:9a:58:37:88:65:
         72:4e:bf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org