Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DAFDA496294A9C50559AC539CC20AF75F62E0310.cer
File:                     DAFDA496294A9C50559AC539CC20AF75F62E0310.cer (raw, json)
Hash identifier:          MSzCmQ8YznNXATwv8NW6TYbsrmqUEmHhF/PbW4oA9XE=
Subject key identifier:   DA:FD:A4:96:29:4A:9C:50:55:9A:C5:39:CC:20:AF:75:F6:2E:03:10
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       14EFA68C6F60A370AAF09263246949C771509564
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/DAFDA496294A9C50559AC539CC20AF75F62E0310.mft
caRepository:             rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Feb 2024 17:06:52 +0000
Certificate not after:    Tue 18 Feb 2025 17:11:52 +0000
Subordinate resources:    AS: 268727
                          IP: 45.171.188.0/23
                          IP: 2804:59d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ef:a6:8c:6f:60:a3:70:aa:f0:92:63:24:69:49:c7:71:50:95:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 20 17:06:52 2024 GMT
            Not After : Feb 18 17:11:52 2025 GMT
        Subject: CN=DAFDA496294A9C50559AC539CC20AF75F62E0310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:df:97:b9:54:97:5c:b9:61:88:e9:f3:62:68:
                    f4:3c:3d:94:fe:e0:02:f0:2c:49:1d:7d:0a:ab:19:
                    05:4c:34:c5:04:6b:c9:14:cb:04:e2:ff:fd:eb:be:
                    56:3e:ef:22:f2:3d:e9:c0:d9:0f:d8:80:db:b1:a3:
                    39:c7:86:17:9c:be:dd:5d:6b:79:b6:b4:60:57:1b:
                    f0:47:d6:2d:77:d5:69:c1:72:25:19:56:67:ce:d1:
                    07:f3:9e:4a:19:5a:24:06:05:03:31:f1:04:11:82:
                    95:58:73:e3:e4:2f:43:45:d4:d3:e6:ca:4f:a0:f8:
                    b6:a6:e7:06:ca:9a:47:48:b3:8b:0b:7a:a1:68:41:
                    a4:b9:af:92:f2:b0:d3:06:7b:2d:6f:b5:df:e0:17:
                    26:46:54:cb:75:e5:f4:06:4e:82:59:f5:ed:24:53:
                    94:b7:df:bb:cf:e4:d6:59:2d:d3:0e:f7:c7:14:68:
                    72:19:c2:ba:7a:f8:96:89:49:4d:5c:bc:4d:ad:40:
                    4b:d8:3c:ef:80:25:da:a5:63:76:fb:26:47:7e:4e:
                    dd:40:d9:ad:a5:b0:af:27:7e:7b:72:0f:25:a0:d2:
                    65:dc:8c:86:9c:a7:42:1f:db:ae:0e:6a:aa:25:2f:
                    2e:37:fb:75:4b:28:45:e8:42:bd:4f:16:de:0a:44:
                    e4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:FD:A4:96:29:4A:9C:50:55:9A:C5:39:CC:20:AF:75:F6:2E:03:10
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/DAFDA496294A9C50559AC539CC20AF75F62E0310.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.188.0/23
                IPv6:
                  2804:59d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268727

    Signature Algorithm: sha256WithRSAEncryption
         1f:00:5e:3d:0b:c2:fb:d3:e6:a4:df:12:d9:2c:b6:1c:0b:09:
         0a:f8:6a:61:d2:f2:6e:15:17:3e:cd:0a:34:e6:d4:11:99:bf:
         e5:e0:30:18:48:b3:3a:0f:a1:d3:89:ed:60:16:b2:b2:72:4f:
         d8:92:e8:ad:bd:8f:ab:18:7a:c4:cf:b2:57:30:2b:60:bc:fd:
         15:3f:36:1e:cb:3c:a7:9f:e2:f4:54:26:68:c7:bd:d9:01:83:
         67:3f:33:89:7d:1e:4d:33:3a:e0:d9:a0:0f:bb:c3:c4:a6:f6:
         75:a4:c8:1e:6c:2d:70:a9:95:8c:00:ce:03:14:8c:63:0b:f1:
         2d:93:19:c3:e0:61:b6:42:bb:a8:0f:85:61:2a:1b:70:01:31:
         a2:e7:23:3f:ef:13:d9:8b:9e:98:12:7d:93:90:e0:16:f3:28:
         e4:19:0e:f7:49:cc:bd:1e:d1:4d:27:a3:92:23:05:ad:14:db:
         9e:c5:2f:ae:34:b3:65:61:22:e7:f2:37:25:f0:c6:89:f1:22:
         34:f7:b2:d4:b8:9f:9d:77:04:6a:4a:33:01:f6:b9:b8:22:d0:
         ad:2d:a3:34:ab:bb:27:65:a9:e5:d2:c7:d5:84:ca:9d:c8:e0:
         1f:a7:21:fa:18:ea:a5:49:ef:6a:44:12:ef:bf:aa:96:a5:d6:
         5e:03:63:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org