Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
File:                     DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer (raw, json)
Hash identifier:          4cyJcMYU3x0XofyRVf0NEEMIrVjV7UbCoVflqxxmKHc=
Subject key identifier:   DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5A7005B953BDB626958BE91DD13389A32193C85E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Feb 2024 00:19:10 +0000
Certificate not after:    Mon 24 Feb 2025 00:24:10 +0000
Subordinate resources:    AS: 28210
                          IP: 45.226.116.0/22
                          IP: 45.232.132.0/22
                          IP: 131.0.28.0/22
                          IP: 131.255.20.0/22
                          IP: 138.59.120.0/22
                          IP: 138.117.220.0/22
                          IP: 138.185.96.0/22
                          IP: 138.204.136.0/22
                          IP: 138.255.144.0/22
                          IP: 168.228.200.0/22
                          IP: 170.233.48.0/22
                          IP: 170.238.196.0/22
                          IP: 177.55.192.0/20
                          IP: 177.85.48.0/21
                          IP: 177.131.160.0/19
                          IP: 177.137.32.0/20
                          IP: 179.191.192.0/19
                          IP: 186.194.96.0/20
                          IP: 186.219.112.0/21
                          IP: 189.113.64.0/20
                          IP: 189.127.208.0/20
                          IP: 191.243.88.0/22
                          IP: 2804:56c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:70:05:b9:53:bd:b6:26:95:8b:e9:1d:d1:33:89:a3:21:93:c8:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 26 00:19:10 2024 GMT
            Not After : Feb 24 00:24:10 2025 GMT
        Subject: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:58:8a:d5:ae:f7:a7:fe:c9:b7:5c:3b:69:90:
                    35:08:5c:a7:61:3d:da:b7:f4:bc:6d:d5:76:a2:83:
                    f7:55:0a:d3:ca:93:eb:36:63:06:d4:7c:8f:9e:f8:
                    aa:95:d7:aa:39:c5:55:20:87:1a:bf:4c:8a:c3:95:
                    ec:8a:54:0c:37:e8:10:ce:8e:9b:a1:97:1d:96:14:
                    df:11:08:3a:2b:ba:c1:fa:d7:25:58:bc:48:66:40:
                    0d:70:5f:07:a1:de:b0:51:d0:6b:31:1e:0a:5a:49:
                    b2:ef:1a:33:78:d2:3d:95:f4:26:e2:3b:4d:70:a5:
                    5d:7d:00:f6:61:9a:82:ee:ef:38:cb:f9:a1:70:4c:
                    c6:fe:46:d5:29:85:f4:af:5a:81:6c:df:5b:05:f4:
                    53:bd:75:fd:ab:7f:61:c7:35:6a:58:b6:e3:09:45:
                    cb:2e:96:92:2c:27:48:25:6a:e4:7c:95:3e:d2:e2:
                    e2:2d:d0:fc:7b:22:c0:e8:80:28:f1:e8:e8:8a:7d:
                    73:e0:03:ac:d4:3e:f9:f3:18:c6:3e:c5:a5:1a:02:
                    80:52:64:60:f6:c3:20:86:5c:89:b6:bf:93:63:a7:
                    62:15:1f:b1:6f:4d:5c:77:af:29:c1:ab:d2:e0:1d:
                    93:d8:e2:7a:e5:e4:52:8d:77:50:18:f0:bd:33:3f:
                    b3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.116.0/22
                  45.232.132.0/22
                  131.0.28.0/22
                  131.255.20.0/22
                  138.59.120.0/22
                  138.117.220.0/22
                  138.185.96.0/22
                  138.204.136.0/22
                  138.255.144.0/22
                  168.228.200.0/22
                  170.233.48.0/22
                  170.238.196.0/22
                  177.55.192.0/20
                  177.85.48.0/21
                  177.131.160.0/19
                  177.137.32.0/20
                  179.191.192.0/19
                  186.194.96.0/20
                  186.219.112.0/21
                  189.113.64.0/20
                  189.127.208.0/20
                  191.243.88.0/22
                IPv6:
                  2804:56c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28210

    Signature Algorithm: sha256WithRSAEncryption
         6e:0a:d2:d3:a4:ea:ab:42:fc:13:ac:c2:37:65:3e:63:d1:7c:
         5c:89:a2:48:83:2e:72:1a:3c:e8:92:e1:11:ee:db:0e:0c:47:
         78:e2:11:51:88:25:08:4c:a1:60:0e:fd:5f:a0:1c:17:5f:d0:
         99:a1:54:ee:d0:ba:07:e1:6f:7a:41:b5:59:0a:1f:03:c7:a8:
         67:33:ac:0c:32:8c:ac:ef:be:67:54:44:13:a9:08:6a:4e:5b:
         d6:23:98:60:59:de:d5:b4:a7:ff:b5:0a:21:79:3b:ce:1e:59:
         18:ab:ae:ad:bd:76:c1:f6:a2:c0:d9:24:42:af:1e:9a:4e:55:
         ce:c4:ad:ba:7e:bf:10:73:f1:fa:17:7e:35:f1:27:a4:92:02:
         9b:ef:2c:76:12:a2:28:b4:91:ae:cc:ce:3d:ff:cc:b5:85:0a:
         a2:8d:18:5f:ba:07:f9:3f:74:a1:58:92:52:a9:34:ed:48:28:
         2a:e9:6e:9c:df:6a:98:b2:3e:64:27:4a:01:96:d2:14:0b:2c:
         8e:50:2c:5e:72:0a:a4:81:51:86:d3:47:20:96:6b:55:3b:0c:
         e5:7b:20:a3:e1:fa:51:4f:aa:38:a3:fd:a0:4a:8c:15:de:d6:
         64:c1:f1:8a:7c:37:a6:ef:59:91:72:d8:a0:d2:2d:45:cb:ae:
         61:71:f7:14
-----BEGIN CERTIFICATE-----
MIIGkzCCBXugAwIBAgIUWnAFuVO9tiaVi+kd0TOJoyGTyF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjYwMDE5MTBaFw0yNTAyMjQwMDI0MTBaMDMxMTAvBgNV
BAMTKERCQzMzQzY1OTY2N0FBOTJBNkEwRjI1QUVGQjYyQTYwMzM4RjVBNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1WIrVrven/sm3XDtpkDUIXKdh
Pdq39Lxt1Xaig/dVCtPKk+s2YwbUfI+e+KqV16o5xVUghxq/TIrDleyKVAw36BDO
jpuhlx2WFN8RCDorusH61yVYvEhmQA1wXweh3rBR0GsxHgpaSbLvGjN40j2V9Cbi
O01wpV19APZhmoLu7zjL+aFwTMb+RtUphfSvWoFs31sF9FO9df2rf2HHNWpYtuMJ
RcsulpIsJ0glauR8lT7S4uIt0Px7IsDogCjx6OiKfXPgA6zUPvnzGMY+xaUaAoBS
ZGD2wyCGXIm2v5Njp2IVH7FvTVx3rynBq9LgHZPY4nrl5FKNd1AY8L0zP7PLAgMB
AAGjggOdMIIDmTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTbwzxllmeqkqag
8lrvtipgM49aSzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85UWZ4UnJ0aEVXd20xdzdZU2ZZRTlXZDY0MVYxbmFYZGt1
S2tBdEM4cWdhVi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRr
dUtrQXRDOHFnYVYvMC9EQkMzM0M2NTk2NjdBQTkyQTZBMEYyNUFFRkI2MkE2MDMz
OEY1QTRCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwgbAGCCsGAQUFBwEHAQH/BIGgMIGdMIGLBAIAATCBhAMEAi3idAMEAi3o
hAMEAoMAHAMEAoP/FAMEAoo7eAMEAop13AMEAoq5YAMEAorMiAMEAor/kAMEAqjk
yAMEAqrpMAMEAqruxAMEBLE3wAMEA7FVMAMEBbGDoAMEBLGJIAMEBbO/wAMEBLrC
YAMEA7rbcAMEBL1xQAMEBL1/0AMEAr/zWDANBAIAAjAHAwUAKAQFbDAZBggrBgEF
BQcBCAEB/wQKMAigBjAEAgJuMjANBgkqhkiG9w0BAQsFAAOCAQEAbgrS06Tqq0L8
E6zCN2U+Y9F8XImiSIMucho86JLhEe7bDgxHeOIRUYglCEyhYA79X6AcF1/QmaFU
7tC6B+FvekG1WQofA8eoZzOsDDKMrO++Z1REE6kIak5b1iOYYFne1bSn/7UKIXk7
zh5ZGKuurb12wfaiwNkkQq8emk5VzsStun6/EHPx+hd+NfEnpJICm+8sdhKiKLSR
rszOPf/MtYUKoo0YX7oH+T90oViSUqk07UgoKulunN9qmLI+ZCdKAZbSFAssjlAs
XnIKpIFRhtNHIJZrVTsM5Xsgo+H6UU+qOKP9oEqMFd7WZMHxinw3pu9ZkXLYoNIt
RcuuYXH3FA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org