Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DBF2A29284DD5BA970BD320E9BBA3628FC4654A4.cer
File:                     DBF2A29284DD5BA970BD320E9BBA3628FC4654A4.cer (raw, json)
Hash identifier:          Hrma6/VpYaFcALJXi53vEwWDByS9TgZ4/O8iK30KwJ0=
Subject key identifier:   DB:F2:A2:92:84:DD:5B:A9:70:BD:32:0E:9B:BA:36:28:FC:46:54:A4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       50B39483340308AFF319D93F9BF8D86E81771400
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/DBF2A29284DD5BA970BD320E9BBA3628FC4654A4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 27 May 2022 18:15:22 +0000
Certificate not after:    Fri 26 May 2023 18:20:22 +0000
Subordinate resources:    AS: 264281
                          IP: 138.121.52.0/22
                          IP: 170.233.172.0/22
                          IP: 170.244.12.0/22
                          IP: 2804:2570::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b3:94:83:34:03:08:af:f3:19:d9:3f:9b:f8:d8:6e:81:77:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 27 18:15:22 2022 GMT
            Not After : May 26 18:20:22 2023 GMT
        Subject: CN=DBF2A29284DD5BA970BD320E9BBA3628FC4654A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:cb:15:5a:a3:75:04:0a:3b:b4:06:1d:6b:
                    5f:2a:91:c4:c3:58:c8:ea:79:c9:79:f8:fc:db:13:
                    20:dd:3c:92:6d:54:bc:cb:3f:24:9a:f6:db:da:7b:
                    fd:ba:33:3a:ea:cd:da:a7:b1:9f:b7:93:4c:18:c1:
                    e8:24:c5:ca:59:6a:44:bc:2c:1c:90:94:ff:f8:a0:
                    60:74:6f:bf:b1:56:ba:16:eb:10:c4:7d:fa:47:1f:
                    74:2b:82:ff:21:c4:c4:55:7a:60:69:30:c9:66:39:
                    c5:3d:1b:97:ae:0f:d6:d2:91:3a:d0:cf:ea:10:4f:
                    4b:7d:4a:bb:4f:04:de:b3:3b:5c:02:fe:42:91:4f:
                    12:4c:f3:66:17:87:b0:de:8a:ec:b3:b5:b4:a4:cb:
                    00:42:f8:b7:57:a9:48:ef:98:71:5c:d0:ee:58:4f:
                    e4:e2:88:d7:05:ef:ad:eb:0d:08:35:63:e4:23:37:
                    c0:76:5f:53:b1:95:19:ed:ee:6c:43:1f:d7:38:72:
                    98:dd:bb:99:e2:0f:67:c8:9c:2e:18:63:fe:35:98:
                    3f:5f:a6:c4:f4:69:a6:de:b8:0e:5d:9c:4f:8c:ab:
                    c4:44:78:d2:b3:26:cc:d3:51:44:be:88:b3:69:20:
                    96:18:cd:4d:ed:dc:00:69:3c:87:25:13:c5:22:34:
                    fd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:F2:A2:92:84:DD:5B:A9:70:BD:32:0E:9B:BA:36:28:FC:46:54:A4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/DBF2A29284DD5BA970BD320E9BBA3628FC4654A4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.52.0/22
                  170.233.172.0/22
                  170.244.12.0/22
                IPv6:
                  2804:2570::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264281

    Signature Algorithm: sha256WithRSAEncryption
         21:54:5e:18:73:85:5e:05:dd:e4:7c:d8:71:45:18:0d:c1:73:
         7b:d0:0e:38:91:90:d8:91:40:c8:6d:38:6e:54:f6:f9:1d:54:
         3d:46:3e:3b:4d:65:1e:ac:94:cd:1f:fd:3f:1f:f5:f0:ca:06:
         a8:42:39:91:f3:bb:4c:8c:ca:63:3c:0d:d5:25:af:84:19:96:
         ab:e3:2e:77:11:f1:ca:50:3b:77:e3:af:57:9c:30:d4:15:c0:
         46:d2:20:ed:af:de:80:e2:25:c8:d3:9a:c8:d9:69:cf:4a:86:
         18:1d:81:d6:8d:21:d1:b2:12:5f:45:d1:7e:4d:f5:5c:37:b8:
         db:e2:e7:9c:e6:49:ec:d0:4e:73:da:90:3f:55:d1:82:f3:9e:
         01:e0:2d:65:08:98:44:cc:58:36:a9:47:04:f7:95:bb:12:cc:
         f5:f5:c0:f2:41:a5:8d:8d:5b:c1:fe:0d:0a:77:ea:35:34:8b:
         cf:b9:5e:7c:23:6f:a3:01:68:fb:35:79:e6:18:4f:78:50:3f:
         47:37:a7:93:24:8e:5c:dc:4b:db:94:67:6b:30:55:22:c2:31:
         d4:c5:63:8d:3f:39:33:99:ec:7f:0d:76:ae:e2:48:23:a3:1e:
         7d:ad:89:1b:2b:43:5f:1b:83:38:59:1d:85:47:0f:dd:ca:1f:
         e9:3b:c9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org