Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DB765E9561FFF140780A34CC6301C66F0279DD9E.cer
File:                     DB765E9561FFF140780A34CC6301C66F0279DD9E.cer (raw, json)
Hash identifier:          SsI3Ubut1OVUMooB08FMRpqvcJwndv1Yjqb+jw+zmMU=
Subject key identifier:   DB:76:5E:95:61:FF:F1:40:78:0A:34:CC:63:01:C6:6F:02:79:DD:9E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6469EB8D51139EC78AF1F514CBEFEB2F3919647B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/MjsrdDanpq6d9H7tSRi15U6hXBdFjLQgtwF2BcBF3xU/0/DB765E9561FFF140780A34CC6301C66F0279DD9E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/MjsrdDanpq6d9H7tSRi15U6hXBdFjLQgtwF2BcBF3xU/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Mar 2023 21:09:23 +0000
Certificate not after:    Fri 15 Mar 2024 21:14:23 +0000
Subordinate resources:    AS: 270396
                          IP: 190.89.216.0/22
                          IP: 2804:6b60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:69:eb:8d:51:13:9e:c7:8a:f1:f5:14:cb:ef:eb:2f:39:19:64:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 17 21:09:23 2023 GMT
            Not After : Mar 15 21:14:23 2024 GMT
        Subject: CN=DB765E9561FFF140780A34CC6301C66F0279DD9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9a:69:85:b7:fa:3c:16:42:4b:9f:d9:92:8c:
                    3c:3b:e8:d3:29:24:60:08:2e:f9:b4:5c:97:b5:f8:
                    eb:9c:0e:be:a2:ce:ed:69:57:58:9d:55:63:fd:80:
                    ef:ce:e5:5c:06:2f:6d:0f:4b:79:04:b7:f2:0d:42:
                    47:49:c5:fc:24:27:03:46:9b:72:74:b3:cc:15:a3:
                    3f:3f:f8:1f:d6:05:ce:82:74:7d:ac:4d:99:46:7e:
                    14:b9:c9:05:bb:8a:a7:6c:2d:ff:09:ab:ad:86:3c:
                    2e:de:2d:33:ff:28:f8:3f:e5:bf:2d:d9:ca:8f:1f:
                    33:9b:0f:4b:35:7d:d9:b8:66:a0:53:e1:84:02:2c:
                    64:e6:a2:cf:42:90:c0:76:fa:f2:fe:61:cb:88:eb:
                    90:73:3c:3a:53:83:76:6d:df:17:fa:72:c9:a2:11:
                    60:3b:54:f4:cb:bd:51:8f:85:63:d9:ea:d5:ce:b9:
                    c1:e9:03:58:b5:35:2f:60:d4:83:8b:dc:6c:5c:f2:
                    c8:60:6b:c8:88:85:30:bd:25:ef:be:7a:30:97:af:
                    b0:50:6e:b3:3b:09:76:48:8e:64:51:57:c0:e2:75:
                    4a:bc:32:93:73:c4:17:d3:c5:de:e4:46:25:09:67:
                    90:f9:3d:46:24:f9:e2:0b:7b:01:13:48:56:7d:ca:
                    22:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:76:5E:95:61:FF:F1:40:78:0A:34:CC:63:01:C6:6F:02:79:DD:9E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/MjsrdDanpq6d9H7tSRi15U6hXBdFjLQgtwF2BcBF3xU/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/MjsrdDanpq6d9H7tSRi15U6hXBdFjLQgtwF2BcBF3xU/0/DB765E9561FFF140780A34CC6301C66F0279DD9E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.216.0/22
                IPv6:
                  2804:6b60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270396

    Signature Algorithm: sha256WithRSAEncryption
         92:62:e8:af:0f:bd:df:c2:20:2b:2e:a1:95:85:91:56:67:16:
         53:51:2c:d8:3c:71:bb:e6:07:31:7d:a5:09:47:42:bb:a3:5e:
         29:de:06:ff:28:76:32:ca:51:77:a0:b4:93:7e:8c:61:2b:09:
         03:f9:0b:21:4c:b9:58:04:af:f0:e7:0b:9d:06:98:07:1e:5e:
         52:48:cb:37:64:fa:e4:e3:0f:d8:55:d2:ac:25:7c:41:e5:02:
         3f:db:78:de:72:e3:c1:fd:57:63:10:54:7a:7f:24:9b:c3:b5:
         84:00:f3:2d:19:51:59:a2:c6:1a:43:0d:65:5c:08:fc:b1:f6:
         56:cc:97:39:28:8e:b2:1e:16:ca:04:48:ae:d1:5f:51:9f:c9:
         e5:1f:b4:18:e7:55:20:32:4f:e6:af:bc:47:a6:61:d9:c5:3c:
         59:31:e6:1f:e1:f7:0a:7a:ec:de:41:fe:fa:26:6e:74:96:06:
         28:27:43:43:aa:d9:96:3f:1b:2d:b5:b9:b1:4e:fd:fd:f7:59:
         cb:cf:e0:3d:b4:ee:07:bd:a8:89:24:20:bd:02:cf:c6:8c:d9:
         95:bb:00:85:21:c9:77:fa:13:15:2f:da:71:47:7a:e3:b0:4e:
         00:10:fc:5a:09:ce:26:19:6f:b7:5e:eb:26:96:7b:bc:b5:cb:
         27:9d:15:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org