Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DB6A1E309D4976A0717DBEA52EB8D41BF4587E5C.cer
File:                     DB6A1E309D4976A0717DBEA52EB8D41BF4587E5C.cer (raw, json)
Hash identifier:          NhwpPAjLJhvsSTdaEQk6WznfYmqigXDsYoe1GZyCLRc=
Subject key identifier:   DB:6A:1E:30:9D:49:76:A0:71:7D:BE:A5:2E:B8:D4:1B:F4:58:7E:5C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       262CBE6B6298190ED1CA6B3E204700BB25BD650E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/DB6A1E309D4976A0717DBEA52EB8D41BF4587E5C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Jul 2023 13:42:24 +0000
Certificate not after:    Mon 22 Jul 2024 13:47:24 +0000
Subordinate resources:    AS: 265118
                          IP: 143.208.184.0/22
                          IP: 2804:2ac8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2c:be:6b:62:98:19:0e:d1:ca:6b:3e:20:47:00:bb:25:bd:65:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 24 13:42:24 2023 GMT
            Not After : Jul 22 13:47:24 2024 GMT
        Subject: CN=DB6A1E309D4976A0717DBEA52EB8D41BF4587E5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a6:6f:80:23:0c:b0:8a:f7:f1:2f:67:68:ee:
                    d5:af:f9:e4:cd:75:15:0b:c6:45:44:e0:b6:d2:24:
                    4b:1e:fe:0e:73:4a:ee:d9:70:3d:ee:06:c1:2e:ff:
                    21:b1:ce:66:d6:ec:07:60:73:b8:34:9b:e7:b7:6b:
                    00:c5:ae:03:2e:e7:30:22:4f:f0:57:eb:cc:5c:6b:
                    de:42:1b:b6:50:63:82:8d:f3:6f:cc:95:cd:e6:f3:
                    32:10:e6:d0:f4:7d:f7:8a:c0:ef:61:09:6e:03:7f:
                    9a:19:40:ca:b2:36:f9:c4:b7:2d:f3:8b:b7:77:20:
                    90:2b:ab:5a:e5:d7:f4:ec:e3:26:75:9f:07:b9:80:
                    14:c6:b5:bc:32:49:34:5b:47:78:34:ca:17:a1:c8:
                    88:4b:82:6e:b9:53:42:44:ab:62:68:2e:a2:c8:f5:
                    b8:c3:1a:01:73:71:fa:64:94:76:23:6e:3f:17:b6:
                    6f:11:02:e8:e2:24:ca:66:38:85:f5:04:7c:c9:00:
                    b9:bd:06:1c:95:96:c1:78:12:60:0b:f6:9e:27:8f:
                    2e:a3:bb:ba:ce:f7:28:04:dc:5b:3e:31:0d:52:fa:
                    90:8e:34:fc:33:2b:c0:2d:12:68:ac:10:5a:a2:c2:
                    a0:b2:d4:d5:0b:72:a3:fb:bf:f7:14:9a:4f:d4:c3:
                    d2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:6A:1E:30:9D:49:76:A0:71:7D:BE:A5:2E:B8:D4:1B:F4:58:7E:5C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/DB6A1E309D4976A0717DBEA52EB8D41BF4587E5C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.184.0/22
                IPv6:
                  2804:2ac8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265118

    Signature Algorithm: sha256WithRSAEncryption
         32:41:45:f1:98:64:f2:a5:35:5f:c3:79:34:95:24:b0:f8:21:
         e5:0e:26:38:ad:ca:c9:97:bb:6a:ee:c5:b7:40:5a:19:b7:8f:
         f6:1d:e7:91:e1:9a:b3:80:c5:43:39:b0:cc:12:91:87:1a:f6:
         37:7a:e3:a2:a9:3c:03:c9:68:d7:8d:36:d3:b3:34:9a:40:a6:
         cd:7a:19:f3:dc:d3:ce:29:b9:0e:19:db:b4:0d:95:2d:de:1f:
         ca:d4:94:9f:3a:bb:23:dc:f1:17:b5:cc:27:5a:0c:78:9e:32:
         bb:37:13:27:78:68:17:fd:97:80:a4:56:a6:2a:b2:4f:14:ca:
         8d:21:d6:ec:3e:ca:99:27:45:a8:06:d4:55:9a:a7:cd:f0:78:
         fd:cb:87:be:58:44:fb:84:50:89:84:97:5a:c0:33:a3:d8:c6:
         f7:34:af:4f:f0:90:65:21:cc:8c:86:57:8b:c6:fa:bf:46:58:
         02:76:2b:30:4b:3e:a1:fe:d8:9b:ff:0b:1a:5d:87:3d:0f:b0:
         65:70:0e:68:7d:64:40:6f:ca:82:ce:d3:07:0a:a5:f5:d9:67:
         e1:5f:36:d5:69:b3:59:d3:a5:c8:37:73:6d:6e:fc:83:09:be:
         33:47:cb:8f:b3:b8:5a:dc:5a:ae:d3:18:16:ab:2b:59:8a:03:
         1b:bf:f1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org