Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DB85262D118B08D63F7DAED3E4A17DAC17432A79.cer
File:                     DB85262D118B08D63F7DAED3E4A17DAC17432A79.cer (raw, json)
Hash identifier:          bUzto0gF2/Y0hES6PHM5Bpi9smzUe4ZH9yLW7j+JUXU=
Subject key identifier:   DB:85:26:2D:11:8B:08:D6:3F:7D:AE:D3:E4:A1:7D:AC:17:43:2A:79
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       626FA2951650D06003906FAAF2CDB0BBCC2075AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/DB85262D118B08D63F7DAED3E4A17DAC17432A79.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 05 Aug 2023 17:11:39 +0000
Certificate not after:    Sat 03 Aug 2024 17:16:39 +0000
Subordinate resources:    AS: 263905
                          IP: 138.204.200.0/22
                          IP: 170.80.68.0/22
                          IP: 2804:2780::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6f:a2:95:16:50:d0:60:03:90:6f:aa:f2:cd:b0:bb:cc:20:75:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  5 17:11:39 2023 GMT
            Not After : Aug  3 17:16:39 2024 GMT
        Subject: CN=DB85262D118B08D63F7DAED3E4A17DAC17432A79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:13:f6:d5:69:bc:98:f6:e7:a9:af:21:0b:66:
                    ee:98:e3:cc:c0:6a:81:d2:37:9c:f0:0d:d3:fa:86:
                    38:1b:90:df:c9:e8:1f:8f:70:ac:73:5f:ff:a0:36:
                    2d:15:df:00:3a:d6:6f:c1:be:06:af:4f:07:84:84:
                    dd:16:18:70:13:50:b2:7d:23:1f:81:d0:4d:d2:e0:
                    a3:0f:5f:83:6b:f9:40:54:34:97:47:fa:6c:ee:b9:
                    25:8c:df:c6:2c:d3:57:e7:e5:1a:3d:4b:b1:3a:1c:
                    72:9b:20:af:ab:62:d1:e1:0e:54:d4:da:38:50:9c:
                    bf:82:76:35:c5:cb:10:1a:a9:8d:48:b8:4f:45:87:
                    9a:4a:a4:72:8f:98:cf:40:25:ba:2f:77:7d:25:80:
                    10:da:a7:df:4c:d9:8a:81:46:ac:9b:7c:80:08:27:
                    4f:1e:4e:f8:e3:b4:ac:68:6e:90:41:44:6b:b0:66:
                    ba:d9:80:74:58:1d:b7:2f:16:dc:85:b2:0b:da:da:
                    57:d3:07:04:65:8d:b4:9f:50:0c:03:f0:5d:14:b0:
                    b6:53:de:50:93:f1:e3:84:30:20:e3:70:f3:3e:9f:
                    27:1d:e4:7a:8b:03:37:0c:fe:18:00:ee:14:65:ae:
                    8b:3c:f1:0b:5b:62:5a:96:08:28:dc:f7:a9:6b:36:
                    f7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:85:26:2D:11:8B:08:D6:3F:7D:AE:D3:E4:A1:7D:AC:17:43:2A:79
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/DB85262D118B08D63F7DAED3E4A17DAC17432A79.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.200.0/22
                  170.80.68.0/22
                IPv6:
                  2804:2780::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263905

    Signature Algorithm: sha256WithRSAEncryption
         96:80:0c:bb:0d:78:a6:d4:1e:c7:ea:a2:8a:81:e1:27:e6:6b:
         95:93:77:f3:d2:00:cb:98:bd:37:b0:ad:59:2d:01:29:74:31:
         b6:94:21:6c:77:d0:bc:fa:07:7e:ff:c2:6e:c9:9f:4b:4e:1b:
         6a:68:b3:c6:f2:e9:f8:9a:d2:ad:4f:49:90:15:a4:19:da:64:
         3b:a6:3d:43:84:84:fc:5d:7d:7f:88:99:e3:60:95:04:ec:d4:
         bd:9b:04:47:b6:1c:3a:6b:c9:5c:29:03:5f:28:f3:fd:6c:5f:
         a0:f6:f3:0c:04:7c:4d:0a:5d:02:50:12:4b:11:2f:66:9e:dd:
         a4:92:9e:fa:67:3b:c0:4f:77:a0:eb:06:a8:d0:40:75:7b:cf:
         50:7b:3e:4a:d7:d6:0b:86:4a:10:79:9b:f1:b5:57:f9:71:e9:
         ca:a3:9e:63:2c:0c:be:72:a5:04:eb:0a:7d:db:0f:99:41:2e:
         93:3c:ec:e8:e7:43:46:18:65:5d:33:b8:3f:d0:39:b0:c0:d8:
         83:06:48:5c:ff:43:31:db:15:5d:c7:cc:b3:8a:ac:dd:50:12:
         32:05:5e:5c:a7:2f:15:03:8b:3f:6b:42:38:10:51:be:1b:0a:
         83:50:4f:44:9c:05:50:a8:ab:d0:71:68:ce:49:59:c5:eb:3f:
         97:2a:49:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org