Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DC13A6C4AE68B902CF647C91547B88EF9E2B6738.cer
File:                     DC13A6C4AE68B902CF647C91547B88EF9E2B6738.cer (raw, json)
Hash identifier:          7mRByJgSi9OONyyDdExY4epRxMemHrdtdoLBkthufCc=
Subject key identifier:   DC:13:A6:C4:AE:68:B9:02:CF:64:7C:91:54:7B:88:EF:9E:2B:67:38
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       75A457276695E26FEC4BBCDEAAD6DE7B95A37857
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/DC13A6C4AE68B902CF647C91547B88EF9E2B6738.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Feb 2024 20:23:30 +0000
Certificate not after:    Wed 12 Feb 2025 20:28:30 +0000
Subordinate resources:    AS: 264193
                          IP: 138.36.84.0/22
                          IP: 138.97.184.0/22
                          IP: 2804:23f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a4:57:27:66:95:e2:6f:ec:4b:bc:de:aa:d6:de:7b:95:a3:78:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 14 20:23:30 2024 GMT
            Not After : Feb 12 20:28:30 2025 GMT
        Subject: CN=DC13A6C4AE68B902CF647C91547B88EF9E2B6738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fc:4c:37:27:27:6e:cd:ec:65:c9:41:43:df:
                    14:ed:43:72:94:08:82:47:25:93:95:c6:97:6a:49:
                    96:81:f8:13:d2:7e:6a:8c:3a:71:36:e7:8b:a3:e2:
                    d4:4b:1c:00:de:1e:e4:be:11:47:1f:6f:1b:32:3a:
                    d5:ef:ba:76:21:30:ac:cb:26:8b:c5:c9:e8:f9:8d:
                    3f:28:eb:79:e3:15:f5:b9:1b:b6:7c:a7:92:d6:88:
                    cb:48:61:ee:e6:3a:ce:5f:80:b8:5c:1f:17:42:cf:
                    e7:07:b6:7e:dc:74:84:c8:d2:a2:7e:1f:82:25:e5:
                    4b:9d:ce:0d:28:17:5e:c5:47:43:41:7c:b0:10:55:
                    8e:53:d9:13:ea:2d:b5:90:e4:c3:7c:ee:e5:69:6c:
                    cc:bb:09:98:0f:3c:de:1e:27:73:94:2b:b6:ab:60:
                    70:66:2f:88:d9:4b:4a:95:44:26:ad:7c:d0:2d:77:
                    a9:c6:34:c6:6a:3b:b2:d3:e3:00:1f:77:e9:25:ae:
                    ac:b3:9e:87:ce:2a:3c:de:8a:5c:49:9d:36:55:df:
                    bd:dc:ab:f3:88:61:25:6a:88:91:46:a9:fe:ca:25:
                    5a:38:5d:cc:fd:34:c2:2b:94:3b:80:11:e9:40:c4:
                    c8:70:18:54:dc:b2:1a:ab:9b:fa:c4:ab:92:dd:3c:
                    7b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:13:A6:C4:AE:68:B9:02:CF:64:7C:91:54:7B:88:EF:9E:2B:67:38
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/DC13A6C4AE68B902CF647C91547B88EF9E2B6738.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.84.0/22
                  138.97.184.0/22
                IPv6:
                  2804:23f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264193

    Signature Algorithm: sha256WithRSAEncryption
         91:d7:47:20:37:69:70:a4:5f:f6:c5:f7:1d:7d:84:4c:b4:b9:
         af:ed:76:66:45:e7:ac:50:c4:e2:4a:28:d7:14:05:b4:b4:ba:
         00:f0:ec:5e:b4:b7:58:c5:ec:ea:2f:c9:d9:40:3d:da:0f:11:
         f2:b4:fa:23:d7:4f:9a:5e:b0:18:f7:eb:55:16:6a:bb:5f:57:
         89:d1:db:ae:c5:85:b4:70:ad:7c:8b:29:c4:b3:4a:8b:f8:2b:
         ce:4c:25:ca:f6:ab:1f:1e:f9:c4:1c:93:46:62:12:8a:ac:ba:
         78:31:8b:6f:0b:39:97:e2:c9:0c:e7:de:2d:39:a4:42:13:94:
         57:c3:6d:12:c6:c5:d0:c4:8b:a2:c8:c7:32:10:94:eb:16:dc:
         e6:ac:3d:3f:49:3c:ac:87:ce:7b:5e:e3:0f:75:51:e5:a9:31:
         96:cd:c0:58:14:9d:8d:de:0b:bf:4e:90:3e:91:db:15:5f:03:
         2c:d9:31:3c:4a:66:ad:8f:0a:9c:06:5d:ad:16:5c:6b:9f:cc:
         26:24:0e:d0:1b:1c:7f:6b:17:7d:9b:86:a5:c4:87:33:50:ca:
         d7:45:f1:0d:e8:07:f8:b7:44:4d:92:6b:ed:23:52:bb:a5:99:
         ee:24:8d:f7:78:1b:46:17:bc:d7:fb:d3:e3:3a:1e:d9:c1:f6:
         58:d0:6f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----