Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DB230BDFE01F82C051C74A2139FA5FD231C8D9D7.cer
File:                     DB230BDFE01F82C051C74A2139FA5FD231C8D9D7.cer (raw, json)
Hash identifier:          NfGmPQ+ta+aNO6EBnbnSoRz8Ktw1eylW+ltTG5i4gNI=
Subject key identifier:   DB:23:0B:DF:E0:1F:82:C0:51:C7:4A:21:39:FA:5F:D2:31:C8:D9:D7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       46FB1F655F36B7EB950F236B62BD2A47CC17B876
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/DB230BDFE01F82C051C74A2139FA5FD231C8D9D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Jun 2022 23:35:18 +0000
Certificate not after:    Fri 16 Jun 2023 23:40:18 +0000
Subordinate resources:    AS: 52557
                          IP: 177.86.8.0/21
                          IP: 2804:cd0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fb:1f:65:5f:36:b7:eb:95:0f:23:6b:62:bd:2a:47:cc:17:b8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 17 23:35:18 2022 GMT
            Not After : Jun 16 23:40:18 2023 GMT
        Subject: CN=DB230BDFE01F82C051C74A2139FA5FD231C8D9D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:31:18:3a:89:ec:09:3e:e4:d1:2e:fd:8f:aa:
                    95:3e:f8:8f:fb:52:32:4e:24:c8:ac:27:0c:59:be:
                    33:43:ae:3c:69:ce:40:0f:dd:ef:7d:6d:42:ae:54:
                    73:ce:d4:a2:b4:71:83:77:e9:53:3f:a5:36:03:96:
                    36:5c:99:52:16:06:fe:b4:28:13:7f:50:af:42:42:
                    95:bd:a6:c8:24:48:f2:3f:15:23:0a:f3:a1:9d:b1:
                    bb:a9:f2:55:95:30:9b:cc:61:ca:02:18:ea:58:61:
                    73:7a:6a:2e:6e:3b:5e:50:25:80:8d:51:44:29:f4:
                    e5:0d:75:a9:04:8c:b5:d2:2e:e9:87:01:68:5c:d2:
                    fe:c3:a4:cf:b1:27:d7:2d:15:2d:cd:3e:a9:ac:8b:
                    1b:9e:ab:39:74:c0:f8:d6:bd:1c:a0:96:8f:5a:5b:
                    c7:a0:4b:2e:e1:73:e9:7a:5b:4b:79:bb:67:30:29:
                    a3:b2:b2:2a:b5:8f:fc:60:96:ed:df:6c:5e:1a:08:
                    9a:ab:bb:e1:a9:f4:ce:40:9d:ed:a7:5b:b1:1f:ea:
                    9d:91:08:79:66:42:3b:28:45:7a:84:b9:b6:8b:42:
                    6a:1d:8b:11:97:e3:5f:ab:a5:87:80:ba:18:a9:67:
                    01:f8:59:e2:68:ba:38:f4:a4:f2:38:c7:7a:74:bb:
                    a1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:23:0B:DF:E0:1F:82:C0:51:C7:4A:21:39:FA:5F:D2:31:C8:D9:D7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/DB230BDFE01F82C051C74A2139FA5FD231C8D9D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.8.0/21
                IPv6:
                  2804:cd0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52557

    Signature Algorithm: sha256WithRSAEncryption
         83:ca:b9:a4:cd:1b:d2:a3:13:ca:28:01:c5:d4:d9:d1:bc:c2:
         f9:fb:e8:7e:00:93:13:32:1e:37:f5:1d:e7:fa:33:3e:f7:fd:
         8e:ee:d0:fc:8b:f8:31:c2:8b:ba:c2:9f:a0:38:98:31:c3:a6:
         00:c3:b8:32:68:0c:fd:29:42:9f:4b:af:15:89:b3:06:13:43:
         5f:ce:23:00:ea:78:1d:56:9f:99:a4:5c:9a:6b:41:03:27:8e:
         49:3b:5b:b3:4e:e8:20:ab:a0:c2:3a:d2:89:64:77:7a:73:f6:
         95:35:3b:0d:98:97:c5:8f:02:b5:07:56:ec:00:55:c0:61:83:
         0b:b1:b3:ad:c4:96:52:e1:83:43:a6:9f:11:a9:95:68:77:cd:
         01:6f:25:aa:b7:eb:d1:12:9a:e6:62:21:b1:f4:1a:7b:d8:0d:
         ba:06:2c:87:aa:f8:e3:b0:1c:aa:0f:8b:07:8b:71:ce:49:8d:
         e9:76:89:9d:b3:26:d6:0f:f6:68:67:c5:04:66:0d:80:12:54:
         34:c4:69:9f:3e:8c:c4:a6:dc:25:fe:54:2a:55:47:e7:e8:0c:
         bd:f9:fe:ef:03:90:e8:4c:2c:d3:28:c3:6a:96:a4:d9:24:64:
         e7:03:b0:80:66:60:07:68:1b:39:4d:b1:10:ab:5d:3b:89:e7:
         8b:54:ec:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org