Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DAE4EA4B7489C5C5C26B19C2BF6BF06F7C94C59B.cer
File:                     DAE4EA4B7489C5C5C26B19C2BF6BF06F7C94C59B.cer (raw, json)
Hash identifier:          1GWSi4uXuS1vnmreRMM/A3SbFDJ+HCz747vVLilzAfA=
Subject key identifier:   DA:E4:EA:4B:74:89:C5:C5:C2:6B:19:C2:BF:6B:F0:6F:7C:94:C5:9B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       73647D4029B17BC382F4FA2AC5BB1FEAC7C3BFB4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/DAE4EA4B7489C5C5C26B19C2BF6BF06F7C94C59B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Jan 2023 23:31:22 +0000
Certificate not after:    Mon 29 Jan 2024 23:36:22 +0000
Subordinate resources:    AS: 10715
                          AS: 11242
                          AS: 263300
                          IP: 150.162.0.0/16
                          IP: 200.18.0.0/20
                          IP: 200.19.96.0/20
                          IP: 200.135.0.0/16
                          IP: 200.237.192.0/18
                          IP: 2801:80:a80::/44
                          IP: 2801:84::/32
                          IP: 2804:1f2e::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:64:7d:40:29:b1:7b:c3:82:f4:fa:2a:c5:bb:1f:ea:c7:c3:bf:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 30 23:31:22 2023 GMT
            Not After : Jan 29 23:36:22 2024 GMT
        Subject: CN=DAE4EA4B7489C5C5C26B19C2BF6BF06F7C94C59B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:eb:aa:31:66:a4:1e:35:fb:50:4f:e9:7d:38:
                    ca:f6:44:83:d6:df:7e:c4:44:eb:36:2e:8c:06:5b:
                    f8:99:be:3a:fa:66:2e:ab:9a:f3:c1:da:1c:5e:98:
                    a1:5a:49:bd:1c:b2:24:92:8a:f1:20:f5:5e:f1:63:
                    9d:f5:81:46:02:30:4c:40:c6:3f:6f:1c:2a:53:db:
                    25:4b:3f:aa:1e:d7:ed:df:5f:74:c4:d2:da:3b:d9:
                    9b:a2:1c:8a:76:99:6d:11:5d:14:9a:26:e2:b4:65:
                    d9:7a:e8:e9:9b:32:57:c5:22:79:52:c8:f8:fe:aa:
                    36:4d:c7:ee:55:3a:d9:6b:ec:58:22:2e:01:de:ee:
                    33:90:e4:8b:75:7e:ea:70:72:de:b2:85:0b:38:5d:
                    21:df:2a:27:07:62:84:2f:cf:e5:af:05:e4:26:65:
                    94:04:bb:c3:11:d9:eb:4c:46:86:2c:5c:6b:f6:8f:
                    31:af:91:e1:d6:e6:92:f8:eb:74:bc:da:54:75:b4:
                    bd:ed:6f:24:0c:ee:e9:4a:44:d9:3f:70:ed:60:8b:
                    8c:08:dd:47:c1:e8:27:62:c6:89:7a:59:a6:0d:94:
                    ed:5d:1e:8d:ab:37:fd:17:10:73:14:07:1c:e8:3e:
                    b9:f1:5e:5b:96:52:0f:ec:bf:e3:9c:8b:04:ee:a4:
                    f1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:E4:EA:4B:74:89:C5:C5:C2:6B:19:C2:BF:6B:F0:6F:7C:94:C5:9B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/DAE4EA4B7489C5C5C26B19C2BF6BF06F7C94C59B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.162.0.0/16
                  200.18.0.0/20
                  200.19.96.0/20
                  200.135.0.0/16
                  200.237.192.0/18
                IPv6:
                  2801:80:a80::/44
                  2801:84::/32
                  2804:1f2e::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10715
                  11242
                  263300

    Signature Algorithm: sha256WithRSAEncryption
         85:e2:53:74:8e:28:47:60:67:3e:92:33:45:bb:c9:24:23:7a:
         8c:d8:ca:99:90:4d:0a:a9:76:9b:cf:a2:e0:2b:c8:f5:24:f3:
         52:ec:e7:d0:fa:ca:e9:45:f5:dd:fd:3f:da:b3:ec:ef:3c:e4:
         c9:85:9b:37:a7:77:da:8c:2a:11:6b:3e:d3:03:c6:b1:b1:04:
         6f:fe:3d:4d:5b:2c:a1:e8:d6:bb:26:06:af:04:f5:2e:b0:9c:
         df:ce:ae:2f:28:e9:46:37:21:dc:3f:79:d7:94:10:bd:d5:aa:
         1f:ff:2b:83:06:f8:05:da:e9:37:0e:9d:81:b2:48:9d:bf:7c:
         48:34:f0:4d:f9:f7:4f:17:f2:9e:b2:23:2c:b9:98:24:1f:c9:
         40:ce:5d:30:69:32:57:db:6b:2a:3b:a9:ed:76:5a:24:98:30:
         1e:5a:40:f4:9e:22:66:5f:76:cf:04:f5:de:c6:31:58:ac:fd:
         8a:93:59:9f:6e:ff:12:ee:63:c0:e6:85:63:bf:e3:27:5a:3b:
         d2:ba:9b:c0:d6:a0:24:e9:fc:fe:da:62:c9:a7:b5:0e:d5:8e:
         a8:70:cf:83:b2:2b:71:96:b6:58:9e:1d:b4:af:9d:1f:6e:eb:
         7c:cb:e0:6b:6e:78:e3:ef:5f:c9:32:46:2f:9c:7b:99:f0:d4:
         e1:92:32:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org