Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DAE6F6304F53DFFBF05831AC165CA7EAFE56D529.cer
File:                     DAE6F6304F53DFFBF05831AC165CA7EAFE56D529.cer (raw, json)
Hash identifier:          ch6f61w99cwcc5a3rrFb00oMeqWg9QpTxgoMBd10LwU=
Subject key identifier:   DA:E6:F6:30:4F:53:DF:FB:F0:58:31:AC:16:5C:A7:EA:FE:56:D5:29
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       01CF58510281307D881C62FE382F2F08C4B6F0A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8HJsaTMgWyNv3sCeYQhZxzr4yxzbxXrEidpH1w2d9GoK/0/DAE6F6304F53DFFBF05831AC165CA7EAFE56D529.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8HJsaTMgWyNv3sCeYQhZxzr4yxzbxXrEidpH1w2d9GoK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Sep 2023 20:10:28 +0000
Certificate not after:    Mon 02 Sep 2024 20:15:28 +0000
Subordinate resources:    AS: 268483
                          IP: 45.161.228.0/22
                          IP: 2804:51e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:cf:58:51:02:81:30:7d:88:1c:62:fe:38:2f:2f:08:c4:b6:f0:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  4 20:10:28 2023 GMT
            Not After : Sep  2 20:15:28 2024 GMT
        Subject: CN=DAE6F6304F53DFFBF05831AC165CA7EAFE56D529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c5:42:0b:90:8f:1b:10:a9:03:e5:51:84:37:
                    f6:a0:f1:65:de:5a:07:0c:32:d5:fd:60:07:d8:05:
                    8e:e6:5d:16:e3:fe:0e:37:92:2a:9d:2b:f3:f2:40:
                    ce:15:ef:ac:23:e1:d0:c7:bf:7f:d4:03:ca:0d:1b:
                    e7:49:5d:fd:52:fc:a1:ee:03:c7:ac:f8:ab:1c:70:
                    69:ca:ae:73:e4:37:1d:7d:df:9e:03:6c:06:51:25:
                    9a:12:0d:0b:2a:99:cc:cc:7e:3a:56:a3:67:7d:53:
                    20:94:c3:12:63:e2:1e:bb:ce:b6:58:d9:30:e6:b9:
                    7c:22:7e:26:99:f2:54:86:9d:0a:8c:39:d1:b8:06:
                    4b:da:7a:b5:82:c5:47:17:98:8a:8c:55:b9:29:d4:
                    0e:a4:37:a7:e9:a7:e9:b9:2d:b6:6e:9c:88:dc:89:
                    a9:8d:29:66:e9:21:22:ee:9d:1a:3f:aa:d5:35:4d:
                    19:6b:d0:50:c4:98:ae:0b:47:7c:ad:02:41:70:d4:
                    f8:cd:fe:a7:26:85:96:d7:f2:bd:1b:2e:91:a5:93:
                    27:ba:71:2c:e6:ce:b7:1f:8f:f5:b5:b2:38:1d:5b:
                    92:c7:b9:49:30:46:71:7b:8a:c6:eb:ad:65:b2:59:
                    2d:86:5d:b8:b9:fa:97:b7:f4:1c:69:89:8e:85:c3:
                    7d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:E6:F6:30:4F:53:DF:FB:F0:58:31:AC:16:5C:A7:EA:FE:56:D5:29
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8HJsaTMgWyNv3sCeYQhZxzr4yxzbxXrEidpH1w2d9GoK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8HJsaTMgWyNv3sCeYQhZxzr4yxzbxXrEidpH1w2d9GoK/0/DAE6F6304F53DFFBF05831AC165CA7EAFE56D529.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.228.0/22
                IPv6:
                  2804:51e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268483

    Signature Algorithm: sha256WithRSAEncryption
         34:01:68:32:1f:f6:24:07:d6:59:b6:d5:5e:9c:7f:26:d3:f0:
         0d:64:ab:3e:03:01:bc:16:54:a1:e4:13:6d:cd:a4:83:3c:bc:
         2c:36:94:d8:c8:35:74:39:aa:19:11:d6:de:e9:79:d6:c0:a0:
         7f:9d:9f:69:bb:cc:c8:c6:58:fe:63:3e:7a:36:0e:3c:d4:e2:
         6c:9b:9f:a2:ad:33:05:8b:cd:59:96:b1:35:dd:1a:24:6b:bb:
         d7:fe:1e:06:47:29:87:4d:1f:81:de:68:97:bc:54:26:50:8f:
         cd:a9:62:64:f7:58:2b:a4:88:2a:0c:47:4f:69:aa:fd:36:d3:
         44:2a:6a:10:ed:e5:86:c6:1f:37:9f:1c:56:c9:38:74:35:a4:
         f4:e8:b1:fd:11:ac:09:43:1b:1a:bf:a3:fe:fe:58:d2:23:12:
         f5:7c:b1:46:ba:16:0f:77:e5:39:0f:ab:10:f8:49:88:fa:99:
         56:9f:d4:ce:a1:49:af:2b:24:b8:2e:44:9d:ce:1b:b2:27:ab:
         d1:6e:73:b2:e4:03:7e:e4:f5:16:64:a4:f3:b7:d5:e2:f5:56:
         23:28:ee:58:07:be:5a:85:4e:d2:71:5d:27:0e:92:14:60:a4:
         b6:07:21:1a:db:07:33:f4:47:e7:87:0b:9c:f3:72:6b:d5:9b:
         d7:25:76:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org