Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DAFBE65FF96BBA89F467D4F20B0549C579F099DA.cer
File:                     DAFBE65FF96BBA89F467D4F20B0549C579F099DA.cer (raw, json)
Hash identifier:          TUsECCQXT78xlRVCJnzXd0TDhHEtYS9Cqv4FCzOBGM8=
Subject key identifier:   DA:FB:E6:5F:F9:6B:BA:89:F4:67:D4:F2:0B:05:49:C5:79:F0:99:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3A81280643A9EA8F73BD39C3986DF39138BD40AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1/DAFBE65FF96BBA89F467D4F20B0549C579F099DA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Oct 2023 23:02:53 +0000
Certificate not after:    Wed 02 Oct 2024 23:07:53 +0000
Subordinate resources:    AS: 263145
                          IP: 168.205.136.0/22
                          IP: 170.245.224.0/22
                          IP: 177.154.28.0/22
                          IP: 2804:1774::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:81:28:06:43:a9:ea:8f:73:bd:39:c3:98:6d:f3:91:38:bd:40:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  4 23:02:53 2023 GMT
            Not After : Oct  2 23:07:53 2024 GMT
        Subject: CN=DAFBE65FF96BBA89F467D4F20B0549C579F099DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:db:eb:62:da:2f:af:d3:aa:7e:69:74:eb:70:
                    d9:a7:67:4f:52:d9:7f:2c:1f:0a:28:c6:fd:b6:4a:
                    56:43:71:46:c6:a9:fa:de:63:9a:5c:99:da:2b:6b:
                    70:9b:7c:08:71:5f:5a:c0:b8:49:8d:2e:0c:9e:08:
                    e4:93:5e:4c:15:0c:27:eb:ff:0c:ae:0b:63:4a:ba:
                    37:25:ae:43:76:79:e5:dc:70:12:a3:ff:9c:90:b1:
                    fc:d4:68:02:2f:62:12:cf:c8:e4:88:19:c4:73:4e:
                    fc:8c:9e:ad:8e:e0:5e:01:6a:ad:4d:19:93:4b:46:
                    bd:2a:e5:30:e3:9b:d0:40:34:c8:f7:f5:95:16:30:
                    b8:ee:b0:3e:b1:05:3a:c7:11:68:8e:c2:13:02:29:
                    0e:f8:82:40:78:1a:6e:bc:05:59:6b:e8:cb:14:0e:
                    e9:1e:d1:5c:8a:21:89:1b:3b:d1:ae:74:7a:72:3f:
                    00:a6:60:a8:07:3c:70:b7:2b:26:12:1e:c7:4b:2a:
                    11:74:b0:f5:4a:0e:a8:b9:2a:ad:7f:d3:0b:66:ce:
                    f8:8e:28:f7:2b:47:f6:7a:0d:ac:60:7c:35:5d:57:
                    cb:27:7f:da:c3:06:1e:2f:6a:f2:09:ac:9d:70:f9:
                    c0:58:00:87:ae:a3:cd:0a:a3:e5:60:45:dc:33:f5:
                    f8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:FB:E6:5F:F9:6B:BA:89:F4:67:D4:F2:0B:05:49:C5:79:F0:99:DA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/1/DAFBE65FF96BBA89F467D4F20B0549C579F099DA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.136.0/22
                  170.245.224.0/22
                  177.154.28.0/22
                IPv6:
                  2804:1774::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263145

    Signature Algorithm: sha256WithRSAEncryption
         3f:5f:eb:b1:29:22:33:0b:4a:3b:a2:89:87:24:85:00:91:1b:
         a3:32:00:ba:65:99:82:61:04:08:8e:ce:0d:c8:43:7a:29:27:
         cd:5d:97:51:6d:c8:87:53:76:e3:1b:3e:bb:2a:ce:6d:1b:ff:
         fd:97:82:35:af:a0:63:88:45:59:5c:0c:03:b5:62:ad:9d:b0:
         2f:ff:cb:aa:d7:1b:16:ac:52:80:b3:72:ee:da:65:a0:a0:39:
         ba:3a:05:7a:e1:1c:64:61:6a:39:3e:cb:63:fb:0d:03:ba:3b:
         6b:2c:47:0b:e0:cc:26:1c:9c:87:5a:a7:51:23:8f:50:49:7f:
         e8:8c:c9:7f:84:3c:6a:1b:03:15:2b:50:21:26:cf:46:c7:58:
         ba:92:a5:87:e6:ca:71:98:eb:53:b3:2e:82:d8:20:40:e0:de:
         94:98:84:83:28:6c:f9:55:79:a3:9a:5d:d5:29:af:31:2e:08:
         f2:11:59:5f:31:78:92:79:c9:52:6c:fb:db:2f:03:82:8b:42:
         e9:22:30:0a:f4:99:c5:8a:be:4c:62:f4:0b:3e:31:11:e5:6a:
         35:de:fa:a5:e9:73:fb:ad:b4:56:3f:ea:19:23:3b:2d:62:53:
         b5:39:5e:03:9c:8b:19:74:c0:87:54:ab:f8:58:fb:fb:69:2d:
         1b:e9:ee:d5
-----BEGIN CERTIFICATE-----
MIIGHDCCBQSgAwIBAgIUOoEoBkOp6o9zvTnDmG3zkTi9QK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMDQyMzAyNTNaFw0yNDEwMDIyMzA3NTNaMDMxMTAvBgNV
BAMTKERBRkJFNjVGRjk2QkJBODlGNDY3RDRGMjBCMDU0OUM1NzlGMDk5REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk2+ti2i+v06p+aXTrcNmnZ09S
2X8sHwooxv22SlZDcUbGqfreY5pcmdora3CbfAhxX1rAuEmNLgyeCOSTXkwVDCfr
/wyuC2NKujclrkN2eeXccBKj/5yQsfzUaAIvYhLPyOSIGcRzTvyMnq2O4F4Baq1N
GZNLRr0q5TDjm9BANMj39ZUWMLjusD6xBTrHEWiOwhMCKQ74gkB4Gm68BVlr6MsU
Duke0VyKIYkbO9GudHpyPwCmYKgHPHC3KyYSHsdLKhF0sPVKDqi5Kq1/0wtmzviO
KPcrR/Z6DaxgfDVdV8snf9rDBh4vavIJrJ1w+cBYAIeuo80Ko+VgRdwz9fjRAgMB
AAGjggMmMIIDIjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTa++Zf+Wu6ifRn
1PILBUnFefCZ2jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80NTExc0hXMUFwd0tSWUVBZkhnRU1hMUN6c2d3ODcxSHA0
U01wWDNwS3NSTC8xMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80NTExc0hXMUFwd0tSWUVBZkhnRU1hMUN6c2d3ODcxSHA0
U01wWDNwS3NSTC8xL0RBRkJFNjVGRjk2QkJBODlGNDY3RDRGMjBCMDU0OUM1NzlG
MDk5REEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAqjNiAMEAqr14AMEArGa
HDANBAIAAjAHAwUAKAQXdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEA+kwDQYJ
KoZIhvcNAQELBQADggEBAD9f67EpIjMLSjuiiYckhQCRG6MyALplmYJhBAiOzg3I
Q3opJ81dl1FtyIdTduMbPrsqzm0b//2XgjWvoGOIRVlcDAO1Yq2dsC//y6rXGxas
UoCzcu7aZaCgObo6BXrhHGRhajk+y2P7DQO6O2ssRwvgzCYcnIdap1Ejj1BJf+iM
yX+EPGobAxUrUCEmz0bHWLqSpYfmynGY61OzLoLYIEDg3pSYhIMobPlVeaOaXdUp
rzEuCPIRWV8xeJJ5yVJs+9svA4KLQukiMAr0mcWKvkxi9As+MRHlajXe+qXpc/ut
tFY/6hkjOy1iU7U5XgOcixl0wIdUq/hY+/tpLRvp7tU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org