Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.cer
File:                     DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.cer (raw, json)
Hash identifier:          LB8HngXM9faoLQ8IadQVJl15BGWr0vLHXU9o7ChEY/0=
Subject key identifier:   DB:80:9A:DF:AE:28:05:64:AF:8F:7B:4B:35:7D:1A:B3:AE:52:F1:F7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       27D15BC2B3562C92F547183BE96539366E5F8A6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Feb 2023 13:37:44 +0000
Certificate not after:    Tue 27 Feb 2024 13:42:44 +0000
Subordinate resources:    AS: 271353
                          IP: 190.52.76.0 -- 190.52.78.255
                          IP: 2804:7a30::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d1:5b:c2:b3:56:2c:92:f5:47:18:3b:e9:65:39:36:6e:5f:8a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 13:37:44 2023 GMT
            Not After : Feb 27 13:42:44 2024 GMT
        Subject: CN=DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d7:7d:05:01:c9:26:ec:fd:80:f1:4b:eb:33:
                    0a:42:8e:a8:15:8b:45:91:84:66:24:49:1f:87:c5:
                    7b:e5:ec:7d:1d:92:78:cb:0d:97:84:53:3c:0d:f3:
                    1d:f5:74:61:f9:91:c8:0e:21:01:d6:d4:19:bb:c2:
                    6f:56:34:0c:87:d7:ba:ba:73:ca:0b:22:1e:a2:2f:
                    7c:ae:3f:36:d0:4f:3a:53:ef:84:7b:3b:1b:79:0b:
                    d6:cc:df:40:03:fa:59:38:4e:fa:69:10:fa:f0:49:
                    c9:4e:07:e2:29:c4:dd:29:11:7b:25:3d:cf:6d:ee:
                    b4:f0:bd:b5:be:49:57:76:5f:ed:cd:84:0a:aa:eb:
                    98:e5:f2:f1:e9:49:e5:e2:7c:ab:ca:9f:06:1e:48:
                    54:4d:3f:cf:ec:f8:4c:8a:62:dd:ec:75:74:94:25:
                    ce:4f:fa:ff:17:cc:5d:5c:87:52:5e:62:68:17:2b:
                    2f:ee:d4:bd:93:7a:a2:32:bb:2f:88:37:61:80:ff:
                    9c:05:5d:6f:6d:5d:15:a1:6e:e5:20:80:43:1e:e8:
                    c4:a9:8a:98:d9:e8:c8:c4:b3:73:55:ff:5f:a7:04:
                    a4:03:ef:4c:0e:36:ea:27:8e:2b:62:a5:1a:2e:dd:
                    f6:38:15:34:53:42:89:c5:5e:81:f6:53:d6:fd:0b:
                    d2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:80:9A:DF:AE:28:05:64:AF:8F:7B:4B:35:7D:1A:B3:AE:52:F1:F7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.76.0-190.52.78.255
                IPv6:
                  2804:7a30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271353

    Signature Algorithm: sha256WithRSAEncryption
         89:47:7f:8d:4e:d9:07:b6:82:9a:2a:3b:af:1c:13:d0:19:62:
         65:b9:8b:a1:da:fe:40:cd:e0:d2:8f:66:c3:91:da:49:c9:1a:
         65:fc:1a:55:c5:84:cc:72:e9:50:b1:35:1d:80:bf:36:94:7f:
         a0:12:10:df:c2:20:94:1f:5a:56:a2:ce:38:ff:45:3a:7e:63:
         96:75:58:29:9c:ef:3c:85:2a:ba:fd:9e:32:2b:1e:cf:70:43:
         2f:00:a0:a1:ef:65:87:02:3e:90:2e:f9:17:a2:61:16:23:2d:
         dd:f6:f5:63:8b:da:00:51:03:76:58:c4:8b:ff:0b:01:36:66:
         3f:de:ac:99:ba:d4:90:e0:0e:22:d2:f0:aa:95:4c:a8:74:93:
         04:b8:8d:c8:26:a2:5e:aa:3a:ee:2a:aa:9d:48:ad:79:17:42:
         91:20:7d:90:30:c3:6d:d0:ca:9d:1b:a7:bf:da:f1:a6:31:99:
         b9:97:e6:5c:92:c2:a1:e5:cd:87:15:85:78:f5:0e:4b:1d:76:
         d6:03:5d:e1:2a:1b:b2:fb:eb:d3:8a:8e:93:5c:b9:4c:59:f8:
         e1:9b:66:58:f7:f3:25:62:f0:34:98:b9:31:25:53:21:28:e6:
         ba:02:3a:df:dd:30:9b:58:0e:93:4d:2b:dd:58:7d:e8:4d:84:
         57:4c:41:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org