Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.cer
File:                     DBFD38621AE31C186B1722CFC87FE030F3321AE0.cer (raw, json)
Hash identifier:          gAhpO/0rpTveBShxabvQYP72cGvv+/koy0hWMX4Noxo=
Subject key identifier:   DB:FD:38:62:1A:E3:1C:18:6B:17:22:CF:C8:7F:E0:30:F3:32:1A:E0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       61F12B203206B7FC974235F2C7CDDFC631366E2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 14:38:33 +0000
Certificate not after:    Thu 12 Sep 2024 14:43:33 +0000
Subordinate resources:    AS: 267330
                          IP: 45.233.224.0/22
                          IP: 2804:4bcc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f1:2b:20:32:06:b7:fc:97:42:35:f2:c7:cd:df:c6:31:36:6e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 14 14:38:33 2023 GMT
            Not After : Sep 12 14:43:33 2024 GMT
        Subject: CN=DBFD38621AE31C186B1722CFC87FE030F3321AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:91:0e:63:0a:63:7e:e7:10:5e:ec:af:c5:35:
                    50:59:d3:f5:00:30:00:d0:8e:9c:86:a8:8f:04:be:
                    cc:ea:f1:9e:94:9a:9e:5a:37:02:08:5e:ee:19:6a:
                    7f:99:10:f0:3b:dc:bf:72:e4:91:7b:22:51:56:56:
                    2c:56:dc:cf:75:a9:29:84:87:8f:92:64:90:d0:18:
                    26:2c:f6:09:58:29:5a:e0:7e:31:3b:31:42:42:94:
                    c2:3f:de:00:ba:8d:86:74:f2:65:97:19:9c:8b:a0:
                    fe:46:74:1b:8d:2e:7b:1a:c1:b0:23:16:c0:73:cd:
                    17:b5:33:ac:9d:c9:32:e1:7e:46:19:93:d6:76:58:
                    95:f0:c5:73:fa:86:19:22:84:49:ec:63:7b:ed:40:
                    07:2d:97:4f:6c:0e:b2:86:2b:74:3e:ed:82:07:58:
                    73:29:ba:e7:12:d0:32:d7:c4:54:2d:7f:2d:5a:ce:
                    bf:ca:e5:27:54:f7:e2:ac:cc:45:3f:fc:aa:14:aa:
                    29:e8:ca:d8:05:22:51:7a:6d:f7:07:b8:87:05:b2:
                    15:e5:f6:e3:d4:21:11:1f:ed:21:37:33:5d:a7:e8:
                    0f:58:3e:80:9c:f1:80:7f:c5:ea:a9:a8:df:f0:28:
                    95:c3:42:d2:7a:bb:9f:6c:ef:69:17:72:e2:7e:d4:
                    ba:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DB:FD:38:62:1A:E3:1C:18:6B:17:22:CF:C8:7F:E0:30:F3:32:1A:E0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.224.0/22
                IPv6:
                  2804:4bcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267330

    Signature Algorithm: sha256WithRSAEncryption
         97:6a:50:2b:77:6b:9e:77:8e:e6:cb:82:07:61:e5:9f:e8:a6:
         b5:e7:24:7c:72:3d:6b:ae:5c:9d:c1:b6:15:9e:e9:c7:8c:3c:
         66:bd:5f:35:df:4c:c4:97:67:ad:72:5d:02:56:7a:3d:1e:c2:
         0b:00:f7:ee:28:33:b3:9e:6c:ca:f0:f1:54:75:b6:f7:6b:dc:
         4f:1d:8b:54:f3:97:c7:13:b9:f9:e9:a5:c9:4e:59:7a:ec:42:
         03:20:cc:ff:91:89:bb:fc:25:09:25:35:4b:0d:f6:96:5d:9b:
         ee:41:ff:ca:0f:41:af:50:b0:b3:a1:8e:aa:1f:1b:f7:2f:01:
         2d:fc:f5:a4:49:ea:8d:a2:82:0d:7c:8f:87:e4:7f:ef:66:da:
         ec:f8:16:2f:61:c6:8e:c6:ec:df:aa:4a:dc:3b:a0:04:30:e3:
         73:43:24:fe:eb:76:a7:40:39:e4:07:75:33:ac:cf:e6:d8:75:
         0c:7b:87:a4:58:85:47:4a:be:4e:8c:19:58:6b:f4:cc:94:7e:
         9e:ea:16:fb:4b:05:9c:6c:43:8d:e8:da:c8:3b:10:50:f8:8f:
         ff:42:48:ca:3c:11:e3:42:2b:60:09:a7:74:6c:aa:88:5a:16:
         13:64:66:ff:c8:1b:0d:3a:2e:09:71:fe:15:0d:83:18:e8:20:
         0a:6c:aa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org