Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.cer
File:                     DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.cer (raw, json)
Hash identifier:          weCaDQxShOOOL4fpp/vz3hA/+t1+wQhW786kbwyI0OA=
Subject key identifier:   DA:9D:8C:17:FD:EE:E9:2B:37:48:6A:9C:BD:AC:6E:B5:BA:7D:BE:50
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       497B81D835C3B3078D5B0AE3D0A7B80424ADCAD1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Oct 2023 18:15:07 +0000
Certificate not after:    Tue 08 Oct 2024 18:20:07 +0000
Subordinate resources:    AS: 264590
                          IP: 138.36.212.0/22
                          IP: 2804:2230::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:7b:81:d8:35:c3:b3:07:8d:5b:0a:e3:d0:a7:b8:04:24:ad:ca:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 10 18:15:07 2023 GMT
            Not After : Oct  8 18:20:07 2024 GMT
        Subject: CN=DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0a:d2:9d:c8:d8:61:a1:87:d8:a1:d9:87:0f:
                    10:55:94:d0:71:c6:19:f3:07:d0:fa:d9:d4:d9:e3:
                    12:13:15:a6:3f:c0:4a:ca:1c:46:22:16:86:98:4e:
                    fa:dc:ca:b9:6a:9f:24:1d:78:97:70:82:50:ab:22:
                    cf:2d:da:dc:62:90:dc:3a:88:ab:ac:f9:70:b8:4c:
                    23:84:3f:66:fa:51:06:7d:3c:a2:96:4e:4e:d5:c2:
                    f6:a0:26:63:cf:a8:4d:45:15:79:a2:b4:07:cd:76:
                    ed:0c:c6:b2:c8:2b:fa:5d:3a:b4:34:a0:f8:53:6c:
                    c1:b3:13:85:34:9e:78:f5:0a:21:23:cd:86:ce:a1:
                    0f:26:00:5f:b7:56:a4:90:7f:6a:3f:c9:6e:60:22:
                    4f:c9:86:8f:02:8b:c0:41:c2:bb:13:47:33:ab:c0:
                    99:4e:2f:ed:59:7c:e0:a9:98:9f:89:36:65:f4:b3:
                    a8:23:14:cb:0d:eb:ee:a0:39:52:1f:2c:8f:75:65:
                    84:d1:e0:bc:71:84:13:a3:ac:fc:ce:06:66:57:43:
                    56:c0:da:65:cc:6e:22:d3:5c:43:17:84:8a:28:d5:
                    97:ae:bf:f0:2b:37:4c:02:d7:a7:79:b4:91:9e:30:
                    dc:e0:f3:47:c6:5d:78:44:54:6b:72:a7:47:b8:36:
                    cd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:9D:8C:17:FD:EE:E9:2B:37:48:6A:9C:BD:AC:6E:B5:BA:7D:BE:50
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.212.0/22
                IPv6:
                  2804:2230::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264590

    Signature Algorithm: sha256WithRSAEncryption
         a4:49:6e:6f:e1:18:bd:01:3b:a3:33:0d:27:ca:f7:d1:51:7c:
         35:48:c4:9b:15:00:24:56:1a:9f:33:4b:ae:9c:53:2d:a3:2e:
         39:b8:af:2c:3c:bc:eb:d2:90:38:a5:69:2d:11:72:3e:04:6c:
         03:de:98:ae:75:68:5a:b9:46:4e:ea:22:a6:ed:c8:a7:4d:61:
         b6:d7:5e:db:df:0f:08:ca:b3:8b:10:ed:a8:37:8e:c7:4c:12:
         7d:d8:ec:29:fe:e8:d5:87:18:43:ae:4e:5c:1f:8c:a5:64:94:
         4c:c3:40:0b:91:9e:44:79:8a:0f:ae:50:68:e2:52:a6:3c:39:
         b7:fe:00:c7:a6:6a:b9:68:bf:f0:83:6a:e4:bf:bc:5a:f9:2a:
         77:d8:61:aa:ee:fe:93:d0:1b:4c:ff:c0:16:7b:5b:db:16:aa:
         ae:53:89:16:b5:a2:a5:67:13:03:f6:33:6e:0d:3d:0c:af:3b:
         98:e7:f1:05:d4:25:e6:47:83:a7:66:fb:14:12:0d:0f:1d:e9:
         fa:df:dc:4e:3a:3d:a2:2c:38:e1:79:01:83:1a:86:d8:52:d5:
         8f:c9:7b:35:ab:42:cf:c4:92:7c:4d:b1:cb:71:2f:1e:cb:9a:
         45:60:18:92:4a:3d:7a:5a:fe:b5:33:f3:d2:d6:f0:7b:fd:1c:
         89:51:7e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org