Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DB3E50975F2B07750187C76A4B0E0E6B4A2692BF.cer
File:                     DB3E50975F2B07750187C76A4B0E0E6B4A2692BF.cer (raw, json)
Hash identifier:          CaHq3ifGcj5hSTO9XlakMIdElATRjm9zlBjq5TkhZZI=
Subject key identifier:   DB:3E:50:97:5F:2B:07:75:01:87:C7:6A:4B:0E:0E:6B:4A:26:92:BF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4330385DC635E09931FE27915C7617675386812D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/DB3E50975F2B07750187C76A4B0E0E6B4A2692BF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Mar 2024 18:05:10 +0000
Certificate not after:    Wed 19 Mar 2025 18:10:10 +0000
Subordinate resources:    AS: 266964
                          IP: 45.225.232.0/22
                          IP: 2804:4608::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:30:38:5d:c6:35:e0:99:31:fe:27:91:5c:76:17:67:53:86:81:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 20 18:05:10 2024 GMT
            Not After : Mar 19 18:10:10 2025 GMT
        Subject: CN=DB3E50975F2B07750187C76A4B0E0E6B4A2692BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:de:9e:0a:de:7e:a6:00:fd:00:4e:7f:cd:73:
                    41:8c:1d:3b:d2:11:7a:b9:74:d1:6b:1a:07:80:f5:
                    b8:a0:5c:58:0a:cc:3c:25:d2:76:e9:5a:6c:7d:1a:
                    12:97:54:e0:1d:a9:36:c5:74:9a:92:c0:05:c3:31:
                    10:22:e2:86:32:cd:f5:f4:79:57:aa:cd:49:90:71:
                    fe:de:d2:16:e8:18:22:04:1b:c1:0d:71:4d:a1:52:
                    63:4f:68:b6:5d:fe:00:4a:bc:38:18:56:17:18:93:
                    c0:8b:a4:82:11:7e:f0:e7:ad:04:ed:a7:ef:e4:85:
                    9d:59:83:77:c0:a9:a4:52:93:56:d4:21:bd:a4:cb:
                    56:0d:79:64:f8:ea:ce:81:66:d8:9f:02:91:73:db:
                    ca:eb:92:25:53:11:b5:67:bb:5f:44:68:6a:f4:11:
                    3d:6d:74:62:fc:35:27:3b:4f:a7:d7:39:e2:2d:49:
                    89:ca:bd:17:70:7e:ec:7b:9f:a0:52:d3:d9:e4:0b:
                    f5:84:2f:cf:da:86:b4:7f:f9:80:cb:00:5e:46:dd:
                    8f:db:e5:13:3b:e4:51:f1:a4:73:a6:cb:ce:9f:e1:
                    9a:de:39:46:7c:a9:1c:5b:8b:aa:52:44:52:ff:8e:
                    83:69:a4:c1:89:2c:fa:fa:67:b8:dc:d6:6c:06:d3:
                    a6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:3E:50:97:5F:2B:07:75:01:87:C7:6A:4B:0E:0E:6B:4A:26:92:BF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/DB3E50975F2B07750187C76A4B0E0E6B4A2692BF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.232.0/22
                IPv6:
                  2804:4608::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266964

    Signature Algorithm: sha256WithRSAEncryption
         75:ed:db:f6:95:ca:4e:16:d6:6b:e0:d5:82:35:f1:55:24:cd:
         cc:52:2b:9c:67:ae:86:c0:96:a5:cc:7a:23:54:3a:bb:d5:3b:
         64:f7:92:7a:ce:eb:ed:23:b9:5e:7a:7b:ee:73:4d:ca:89:15:
         d6:32:d2:0b:46:f8:79:60:48:eb:ac:ef:93:f9:4c:e9:5b:e7:
         49:4c:30:a3:f3:82:55:2a:35:62:d4:0d:88:74:f0:20:86:8b:
         26:86:f3:ef:f3:b8:2a:30:45:48:fa:48:9c:4d:a3:11:80:f7:
         77:41:69:8b:66:aa:5c:e3:86:1c:18:46:60:41:1b:b8:34:ae:
         06:2d:41:64:bd:7a:b0:83:b4:be:3d:bf:9b:7b:e2:96:2f:84:
         e6:1d:9a:c7:4a:7e:d9:77:52:43:b9:0f:d8:c9:46:a0:2b:0d:
         c6:75:b0:c6:05:82:47:e4:fd:35:13:07:14:42:51:c4:7e:c7:
         6d:d7:78:ff:2b:fc:68:8e:76:74:a2:42:bf:73:43:0a:d9:03:
         a2:eb:4c:46:ec:27:11:b3:e9:1c:a6:6a:5e:cd:1e:0e:fc:f5:
         73:e6:e1:ae:84:c0:b6:1a:58:c1:03:02:a1:1c:46:42:79:58:
         3e:de:02:f6:89:ee:67:fe:57:c2:33:fd:95:74:90:a0:a0:6f:
         80:83:04:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org