Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DC0D8F99AEF084F4413832D5E81267A2B0862ABA.cer
File:                     DC0D8F99AEF084F4413832D5E81267A2B0862ABA.cer (raw, json)
Hash identifier:          dVXLQB/rdyf8KmHAYtJbwtE8pAXwLPxn27fzUq7Mp8Y=
Subject key identifier:   DC:0D:8F:99:AE:F0:84:F4:41:38:32:D5:E8:12:67:A2:B0:86:2A:BA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       14F644B15A7C99D7858D46BB22ABE1A0322E5BD5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/0/DC0D8F99AEF084F4413832D5E81267A2B0862ABA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jul 2023 13:11:30 +0000
Certificate not after:    Tue 23 Jul 2024 13:16:30 +0000
Subordinate resources:    AS: 262738
                          IP: 186.195.160.0/20
                          IP: 2804:1ba8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f6:44:b1:5a:7c:99:d7:85:8d:46:bb:22:ab:e1:a0:32:2e:5b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 13:11:30 2023 GMT
            Not After : Jul 23 13:16:30 2024 GMT
        Subject: CN=DC0D8F99AEF084F4413832D5E81267A2B0862ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:81:23:02:b5:df:ae:74:71:8b:4f:54:6d:04:
                    39:f4:f5:1c:be:74:47:54:d4:09:a1:e2:94:18:75:
                    b3:6e:0b:4c:c6:20:62:f5:ed:ef:4b:89:98:ed:a4:
                    43:7e:28:2e:d5:d7:fa:27:22:2e:01:89:82:c2:ca:
                    4b:32:5d:5e:8a:b1:36:4d:52:ce:23:bd:9b:2d:03:
                    ca:65:4e:ce:44:3c:14:1b:c5:c7:4b:09:a1:0e:ea:
                    ac:3a:9f:75:c8:9b:cf:a6:b8:0e:4c:70:10:f4:af:
                    ee:78:8b:0a:d0:af:f7:1a:18:14:a2:9b:53:d1:e1:
                    79:d3:82:06:81:fa:0a:2e:2e:d5:fd:e7:31:fd:1f:
                    03:9d:84:01:17:ff:1d:ff:24:36:e5:83:52:63:a2:
                    c9:c5:63:6a:81:68:63:03:fb:8a:0b:3d:5f:0d:5a:
                    11:21:00:0b:8d:e9:71:78:75:2a:59:00:67:ad:ae:
                    95:f4:01:31:62:2d:ba:4c:91:55:81:50:64:37:76:
                    c9:d2:15:aa:1a:ea:d6:64:9a:32:11:83:39:b4:3e:
                    5f:87:c4:45:7b:9f:fb:aa:b8:3c:9a:82:16:de:3b:
                    0d:49:f6:4d:f1:21:98:0b:cc:16:ff:fb:bd:11:ff:
                    91:6d:d5:75:49:80:3b:65:d1:05:82:54:a0:d3:85:
                    e7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:0D:8F:99:AE:F0:84:F4:41:38:32:D5:E8:12:67:A2:B0:86:2A:BA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/0/DC0D8F99AEF084F4413832D5E81267A2B0862ABA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.160.0/20
                IPv6:
                  2804:1ba8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262738

    Signature Algorithm: sha256WithRSAEncryption
         41:f3:34:b6:1e:c7:ec:f5:98:68:90:7a:89:a9:75:54:16:43:
         83:f9:5e:60:82:86:bb:e6:6c:e7:e9:da:30:b4:e7:ec:4d:8a:
         58:3a:58:9b:de:a1:ac:46:a2:c5:78:e4:da:bd:98:f3:cd:29:
         b8:d6:67:6e:0e:87:b7:7a:93:57:c6:e8:ab:1b:ff:23:64:6c:
         67:51:c6:38:4c:48:4e:12:ae:62:78:2d:c5:5a:77:26:1c:d0:
         1a:96:c4:52:cc:49:62:15:8f:58:2d:e0:a7:b1:85:95:ae:13:
         4e:10:2d:42:43:b1:8b:04:16:da:29:ce:5c:c8:c3:d7:df:c0:
         67:d3:1a:ce:21:79:0e:3e:95:f5:76:e0:67:be:da:29:ee:c6:
         e0:a2:47:cc:ca:c2:d5:74:b8:c2:1b:17:d4:1f:a3:e8:bb:e9:
         bc:9f:43:10:3c:45:23:e4:b9:c5:6f:65:64:b4:7b:fe:15:d5:
         2b:e4:88:1a:57:ce:a2:63:84:0e:e4:7a:e5:b8:80:ec:b6:bb:
         df:2c:21:07:a6:0b:b3:0b:f8:c6:67:88:e6:1a:16:4b:c3:00:
         2d:c3:d0:b5:8e:46:56:34:97:1e:a3:fc:6b:cd:7d:2a:9c:7f:
         d4:6a:c2:65:a7:72:a5:03:ce:1d:65:c8:87:9e:4e:47:a2:73:
         1d:80:f7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org