Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90.cer
File:                     DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90.cer (raw, json)
Hash identifier:          HW7sRoSiOKu7DAB2Vy8Yo7Q7SrWZ1oadC/J0c8+Dc+g=
Subject key identifier:   DB:67:56:3D:AD:64:E3:F3:02:B7:F4:3E:96:A8:D2:E4:AE:B6:3E:90
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2A94E669F3AF82B1098CC9067346FDD4944E8130
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 23:13:59 +0000
Certificate not after:    Thu 11 Jul 2024 23:18:59 +0000
Subordinate resources:    AS: 267369
                          IP: 45.234.176.0/22
                          IP: 2804:4c68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:94:e6:69:f3:af:82:b1:09:8c:c9:06:73:46:fd:d4:94:4e:81:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 23:13:59 2023 GMT
            Not After : Jul 11 23:18:59 2024 GMT
        Subject: CN=DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cd:17:94:b5:66:22:b6:08:20:67:1a:24:01:
                    3d:8a:97:59:68:c6:52:64:c8:9d:17:a4:ee:be:9a:
                    51:74:ed:ec:2e:38:e8:66:4f:0b:dd:97:33:8e:1a:
                    b8:05:16:1b:4e:e6:41:c0:a0:8e:15:9e:7e:1d:57:
                    a0:0d:15:0f:e6:f7:a4:93:77:85:15:68:bd:cc:68:
                    30:67:1f:a7:ac:bd:48:23:6b:1d:57:a4:06:63:f5:
                    54:0d:ad:67:eb:70:12:24:c0:96:d2:b4:74:b7:67:
                    4d:58:f0:75:8e:de:e1:5c:ae:08:a8:15:78:0d:3d:
                    3b:56:25:7a:cf:81:a5:27:62:29:31:b0:2a:64:56:
                    69:c8:49:2d:78:ec:d1:96:95:6a:ac:a9:e8:56:f5:
                    60:b6:00:7c:bd:7f:02:f3:a0:88:8b:bd:05:33:77:
                    98:d8:02:e5:88:1b:94:35:8c:64:b3:77:6a:2e:7a:
                    b2:de:d0:ab:c6:f4:9a:95:df:9e:b7:87:6f:dd:db:
                    23:1e:37:18:fa:b9:ed:a5:ed:cc:7f:c7:47:b8:30:
                    73:5f:05:6e:8b:c3:2f:52:94:a4:79:22:ce:b5:10:
                    8a:ce:78:4a:07:84:85:c4:91:4d:56:d0:54:69:10:
                    78:4b:ef:f2:c2:eb:be:d9:23:86:0c:c8:f2:ab:42:
                    43:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:67:56:3D:AD:64:E3:F3:02:B7:F4:3E:96:A8:D2:E4:AE:B6:3E:90
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/DB67563DAD64E3F302B7F43E96A8D2E4AEB63E90.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.176.0/22
                IPv6:
                  2804:4c68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267369

    Signature Algorithm: sha256WithRSAEncryption
         99:44:19:d0:8f:ab:8e:5f:67:97:34:46:0f:71:84:b4:bc:63:
         35:bc:47:41:e8:6f:0d:f9:9c:f6:d4:65:64:6d:f8:7d:b2:a7:
         1a:9e:d9:58:b0:f8:e0:82:f2:01:52:ec:7f:f0:94:23:e5:13:
         9c:04:e1:ab:80:54:0d:83:d5:1e:f2:66:7e:e0:16:f4:ad:2f:
         70:f3:3d:73:ec:29:dc:1d:04:56:1a:49:bc:07:83:94:7f:06:
         a8:b3:45:e9:44:94:2f:96:7d:f7:58:47:26:bc:ef:b7:bc:bd:
         69:27:bb:24:8f:c7:c7:4b:2a:44:ae:a7:09:f2:7e:f1:de:ed:
         f5:86:bd:d8:f5:e1:c4:74:94:c2:ca:c3:00:45:54:ee:24:d5:
         c9:75:9a:ff:f6:66:ae:0e:67:cd:ee:f8:a3:55:21:5d:38:e8:
         16:45:40:7a:85:34:cf:53:b8:aa:ad:3c:4d:64:a2:be:3a:29:
         01:36:ea:06:c0:95:7d:1b:d9:e4:d5:ec:e3:d0:69:8c:d8:c8:
         ee:ff:54:d9:03:f2:7c:a7:8c:7b:87:42:9c:ff:be:1a:28:bc:
         a5:de:b7:00:d8:16:f2:82:3c:31:3c:7d:c0:e0:fc:3e:7a:60:
         0c:0f:00:fd:d8:70:8c:90:0f:0b:12:89:e4:d3:cd:49:6d:7e:
         54:5d:24:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org