Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DAE5297EB27C4F5D6FA3C2CF5AA40E4C3DEB9E11.cer
File:                     DAE5297EB27C4F5D6FA3C2CF5AA40E4C3DEB9E11.cer (raw, json)
Hash identifier:          BqnbjkZsEYyV6EKFGOK/wH7/6DYxRpsRTw5uzmJwPDg=
Subject key identifier:   DA:E5:29:7E:B2:7C:4F:5D:6F:A3:C2:CF:5A:A4:0E:4C:3D:EB:9E:11
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       50518FE68076DF29780F7170DDF4523926B939C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G1C21N8skK9Fhz8tRzGWekutfPfkkutFhSU3ao9X5H5r/0/DAE5297EB27C4F5D6FA3C2CF5AA40E4C3DEB9E11.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G1C21N8skK9Fhz8tRzGWekutfPfkkutFhSU3ao9X5H5r/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Aug 2023 17:59:18 +0000
Certificate not after:    Mon 19 Aug 2024 18:04:18 +0000
Subordinate resources:    AS: 266496
                          IP: 170.244.20.0/22
                          IP: 2804:38b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:51:8f:e6:80:76:df:29:78:0f:71:70:dd:f4:52:39:26:b9:39:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 21 17:59:18 2023 GMT
            Not After : Aug 19 18:04:18 2024 GMT
        Subject: CN=DAE5297EB27C4F5D6FA3C2CF5AA40E4C3DEB9E11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9c:e3:e1:77:27:7e:8c:e0:de:aa:c4:44:09:
                    d0:c6:5d:f2:34:67:7a:c0:59:95:6a:3c:d3:6c:30:
                    b7:a6:ec:2d:a6:5d:73:d5:71:ea:ad:09:0e:e1:86:
                    97:9f:80:fe:ad:2c:54:09:a8:17:0e:22:9d:39:37:
                    12:3b:d1:ae:83:af:3d:88:e7:d1:e4:25:ff:02:4a:
                    cb:45:35:57:f2:ca:7e:32:c9:f5:7d:05:71:dc:8a:
                    a1:37:00:87:ae:7b:d6:c8:68:8d:5a:08:c5:db:ae:
                    42:a2:12:1d:6c:e5:29:74:c9:19:f1:b3:73:95:af:
                    12:2d:8c:ca:7a:77:3e:b1:6c:a8:27:13:ba:c7:4b:
                    bb:fc:a3:92:4f:bc:3c:93:b6:bf:d8:67:1f:d0:d5:
                    6a:69:c0:1e:84:d6:28:c6:e6:7f:37:9c:1f:5a:81:
                    ba:d2:23:14:98:99:c0:6c:c3:c1:05:37:45:d6:6e:
                    81:3e:4c:8c:15:d3:b0:8c:b2:9b:e0:05:44:d9:ac:
                    65:a0:1d:62:c8:b3:ba:72:bf:98:ae:4b:a4:75:8e:
                    97:04:8b:2f:b5:5f:73:b1:0e:b9:d4:f9:96:38:03:
                    2b:6f:99:b4:7a:f1:2a:48:80:70:8e:2d:d8:56:c7:
                    aa:f2:1d:bd:4f:05:e0:51:20:b1:a3:eb:70:4c:63:
                    31:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:E5:29:7E:B2:7C:4F:5D:6F:A3:C2:CF:5A:A4:0E:4C:3D:EB:9E:11
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G1C21N8skK9Fhz8tRzGWekutfPfkkutFhSU3ao9X5H5r/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G1C21N8skK9Fhz8tRzGWekutfPfkkutFhSU3ao9X5H5r/0/DAE5297EB27C4F5D6FA3C2CF5AA40E4C3DEB9E11.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.20.0/22
                IPv6:
                  2804:38b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266496

    Signature Algorithm: sha256WithRSAEncryption
         a6:e5:0a:49:85:cf:b2:9f:c9:b0:bc:94:ce:11:17:53:38:e9:
         b3:8a:8c:27:a9:a1:99:ab:24:4f:21:6e:6e:7b:46:87:46:2c:
         f9:7a:d8:99:b9:6c:8b:2e:bf:8d:24:f7:92:ba:7b:c7:21:58:
         7a:ea:26:a0:fb:b6:fa:ae:ba:b3:8f:d2:b9:4b:df:b5:94:87:
         b1:a1:be:69:87:77:18:01:95:b1:24:aa:71:fa:97:e4:40:89:
         2c:aa:2e:fb:b8:3f:c4:49:13:3c:aa:57:8b:8e:c5:a1:a6:57:
         52:65:c2:bb:3c:95:cd:41:4b:43:98:82:8f:72:97:c5:a1:81:
         51:97:bc:ae:19:4c:e2:1a:a4:0b:15:dc:f3:a6:29:ca:66:89:
         ec:64:86:c0:6e:ac:42:40:33:ed:65:b8:4e:b1:8e:28:15:c2:
         af:af:9c:e0:49:6f:d1:98:98:75:49:f8:42:31:62:b9:b0:fa:
         6b:9e:34:71:50:42:7f:ec:40:94:7b:60:05:eb:9b:02:43:82:
         80:52:6a:c1:81:de:dc:08:1e:50:ad:db:52:ff:da:15:8d:99:
         d9:29:dd:40:e4:ce:45:ca:43:f0:c6:c1:ae:22:c6:63:7f:74:
         12:6f:9d:e5:e2:00:0a:16:34:16:e1:c1:c4:22:49:09:6f:f5:
         bf:1e:32:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org