Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DB9A811B04C94AAC6285BBAEA1CBC66DA04E8104.cer
File:                     DB9A811B04C94AAC6285BBAEA1CBC66DA04E8104.cer (raw, json)
Hash identifier:          bQ7oKIlZwKYVfkwcplFf+H+hctcA113x21K2QDkFoR0=
Subject key identifier:   DB:9A:81:1B:04:C9:4A:AC:62:85:BB:AE:A1:CB:C6:6D:A0:4E:81:04
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       123858FC9E9A20639524088209257D6F643B58BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/0/DB9A811B04C94AAC6285BBAEA1CBC66DA04E8104.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 12 Aug 2023 02:54:14 +0000
Certificate not after:    Sat 10 Aug 2024 02:59:14 +0000
Subordinate resources:    AS: 270397
                          IP: 190.89.232.0/22
                          IP: 2804:6b64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:38:58:fc:9e:9a:20:63:95:24:08:82:09:25:7d:6f:64:3b:58:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 12 02:54:14 2023 GMT
            Not After : Aug 10 02:59:14 2024 GMT
        Subject: CN=DB9A811B04C94AAC6285BBAEA1CBC66DA04E8104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:48:28:2a:f2:c2:8c:90:e0:1f:b7:d2:3b:c5:
                    46:3f:af:90:3c:ca:eb:e4:f6:a0:9a:2a:5e:18:ca:
                    1a:fb:35:9e:79:fa:40:b7:cc:ea:82:3d:80:f1:aa:
                    8f:5c:eb:ab:99:cd:1f:4c:a8:22:76:e9:a6:b2:0a:
                    31:ff:7d:67:7c:38:8d:4f:a1:a5:af:9a:f7:6e:2b:
                    55:6a:5b:2c:52:70:44:4a:17:50:6d:c3:6f:eb:7a:
                    91:c3:26:13:02:35:51:44:14:19:36:38:8d:e3:f0:
                    c9:03:f9:d9:c0:b8:5b:bd:da:49:9d:b1:c0:76:1e:
                    05:b1:96:d8:ba:d8:cb:41:b1:61:3f:9f:1f:92:d1:
                    d2:93:de:56:34:8f:0b:01:d5:78:52:d6:b8:20:22:
                    51:cc:66:99:0d:90:1c:16:5b:c0:c1:b5:2b:c1:86:
                    73:ac:5a:99:63:5c:3c:d3:af:3c:b0:a1:e5:4a:59:
                    af:14:3b:f5:73:d1:ff:3d:05:a2:54:64:a4:26:ab:
                    ba:c7:7d:43:86:57:e7:eb:f3:4a:52:f3:89:58:7f:
                    a0:f4:ff:34:b6:e2:1a:59:8a:2c:7d:e6:29:c0:10:
                    39:17:5d:82:e6:28:22:11:7e:33:e2:77:a0:85:a8:
                    11:14:3d:93:02:ea:4d:b1:ee:ba:ea:27:50:4a:2c:
                    aa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:9A:81:1B:04:C9:4A:AC:62:85:BB:AE:A1:CB:C6:6D:A0:4E:81:04
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/0/DB9A811B04C94AAC6285BBAEA1CBC66DA04E8104.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.232.0/22
                IPv6:
                  2804:6b64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270397

    Signature Algorithm: sha256WithRSAEncryption
         33:ab:ee:3d:92:3e:ee:33:a2:4c:0c:b1:60:fe:9c:ec:ac:65:
         a7:9e:3b:d2:f6:a4:55:a1:ac:8b:d4:9a:7f:b6:fa:58:c5:58:
         62:c6:4c:28:a5:21:1e:a9:71:b6:78:e2:c3:05:f5:13:fc:34:
         91:2c:4a:05:29:c6:9d:d7:3a:e5:91:ee:39:7d:11:a1:2d:71:
         40:f2:34:ed:79:d1:c9:c5:28:e4:c1:e3:76:84:dc:e3:3e:d4:
         ea:3d:d0:b4:bf:c4:9d:82:d2:d8:64:32:31:cd:53:a1:9e:73:
         5d:4b:c0:b1:81:f7:cd:8e:ae:9c:c0:b4:43:80:1a:9a:f3:d8:
         d9:f1:87:15:c5:f9:79:e5:02:0e:a1:07:2c:1b:fb:ee:61:7f:
         6e:c1:d4:fd:d7:32:d3:1a:7c:01:83:97:de:9e:00:c9:ed:21:
         3c:3b:50:fc:94:00:fc:d9:58:01:d3:a0:a7:86:a7:df:1b:d6:
         67:e0:1a:5e:fb:5a:cd:c1:dc:9d:df:3e:4b:04:9f:38:49:ee:
         3e:00:c6:ed:f2:15:47:2c:e5:7b:43:b0:31:dd:fb:c2:0f:d5:
         d5:46:09:b2:5a:1c:75:fb:c5:95:52:e0:98:d7:c0:e9:11:3e:
         28:b7:3f:a3:ce:fd:d6:b5:42:a1:7f:eb:0c:5d:ca:24:52:18:
         93:6a:ae:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org