Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DBA87B52C08D64387CF846B996B53360B65F2B90.cer
File:                     DBA87B52C08D64387CF846B996B53360B65F2B90.cer (raw, json)
Hash identifier:          +FpLSBpn9HgzQWqKKoeml2LqzUK9h96jLf1c/gAWhik=
Subject key identifier:   DB:A8:7B:52:C0:8D:64:38:7C:F8:46:B9:96:B5:33:60:B6:5F:2B:90
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       78DA04FB686493299DF8FCFA7B8A16CD602910EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/DBA87B52C08D64387CF846B996B53360B65F2B90.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 21:39:27 +0000
Certificate not after:    Tue 03 Dec 2024 21:44:27 +0000
Subordinate resources:    AS: 268138
                          IP: 45.168.64.0/22
                          IP: 2804:5898::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:da:04:fb:68:64:93:29:9d:f8:fc:fa:7b:8a:16:cd:60:29:10:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 21:39:27 2023 GMT
            Not After : Dec  3 21:44:27 2024 GMT
        Subject: CN=DBA87B52C08D64387CF846B996B53360B65F2B90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5f:a1:28:d6:ab:ef:a5:51:e9:c1:73:3f:20:
                    0a:65:de:a1:e5:e8:e5:45:4e:c8:f2:99:b3:48:95:
                    c1:2d:ec:65:0f:72:5a:e5:fe:d3:b0:41:db:a8:1e:
                    68:a6:79:11:e7:93:6f:e9:2d:93:ab:f4:0c:31:07:
                    49:1b:05:de:e6:ca:31:1d:00:d1:5b:dc:9d:10:c5:
                    60:7b:d2:cc:5d:1a:09:89:ee:03:c2:34:87:93:64:
                    28:42:af:77:3d:42:e6:d8:f0:f9:4a:23:2c:e4:51:
                    b2:65:c6:65:3f:34:2f:cc:6c:09:3c:78:6f:85:f9:
                    a3:ca:2d:50:ad:f3:8d:f3:63:c1:f6:da:64:ad:e7:
                    cf:a9:6f:ec:ad:c3:48:8c:ad:fc:5e:53:b3:03:dc:
                    f4:81:62:78:58:f3:b6:97:4e:57:54:b0:fe:0d:bc:
                    1c:44:6e:f2:0e:69:a9:f4:ca:9e:71:81:c0:55:26:
                    d1:99:0d:47:95:cd:75:d9:e8:8e:9e:c0:8e:34:18:
                    82:31:95:4f:e1:76:29:dd:9a:05:20:f7:48:9e:e8:
                    7a:aa:37:f8:df:e3:49:d6:09:9b:e9:b2:e8:0f:39:
                    b8:f5:f2:a7:6b:d7:86:44:df:92:1b:83:ec:31:62:
                    54:87:92:2a:e2:3b:23:2c:8d:91:45:19:c8:69:70:
                    3b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:A8:7B:52:C0:8D:64:38:7C:F8:46:B9:96:B5:33:60:B6:5F:2B:90
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/DBA87B52C08D64387CF846B996B53360B65F2B90.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.64.0/22
                IPv6:
                  2804:5898::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268138

    Signature Algorithm: sha256WithRSAEncryption
         3e:31:48:fe:b7:1b:15:a7:ae:ea:10:f0:35:2a:e4:51:f6:c4:
         0b:17:fa:57:8f:98:be:e6:6e:f1:22:81:9c:49:f6:a0:d8:37:
         98:27:a4:9b:41:31:40:98:ca:20:30:49:53:36:59:eb:80:16:
         44:35:e4:d9:ad:1e:12:6a:8c:35:79:9e:2b:05:44:4d:01:6c:
         52:0e:04:22:a2:5b:aa:45:97:ba:4a:70:b2:43:80:35:e1:55:
         fe:68:06:82:61:42:2f:ca:e3:cf:b7:34:ae:f2:ae:5e:78:56:
         3a:ba:47:8f:fc:23:fd:0c:37:c9:3d:b0:7e:64:2d:28:2c:34:
         8a:cb:7a:29:a8:3c:33:72:16:60:75:5e:e2:2d:1c:8d:70:a2:
         d2:88:17:18:5a:6a:25:93:ef:3b:b8:8e:5f:8b:7b:f3:c4:ca:
         bf:da:5a:40:12:c0:71:b0:cc:9c:12:61:b6:31:b4:33:f8:31:
         03:57:48:78:fa:29:c1:ef:a2:7f:43:34:38:ac:0b:07:d3:55:
         f8:0a:92:1e:a7:fa:a6:c4:48:bf:fe:dd:ff:2c:e5:e9:10:58:
         9e:f0:4c:2b:31:3d:9d:d7:70:60:4b:e0:06:38:56:15:b8:66:
         c4:f5:59:22:68:14:00:84:42:81:2a:23:54:22:e6:e1:07:49:
         13:a6:02:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org