Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DC13CEC07422F5CFDAC6E77424E6A1D7953E43EF.cer
File:                     DC13CEC07422F5CFDAC6E77424E6A1D7953E43EF.cer (raw, json)
Hash identifier:          Zrj+mERmBtZBFMhxGqwu53pZwe8jiF/8XMcH/8Yio7c=
Subject key identifier:   DC:13:CE:C0:74:22:F5:CF:DA:C6:E7:74:24:E6:A1:D7:95:3E:43:EF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       20641CECED173ABC70387BFE2E82F7C844EA17C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/DC13CEC07422F5CFDAC6E77424E6A1D7953E43EF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 May 2023 14:12:22 +0000
Certificate not after:    Wed 01 May 2024 14:17:22 +0000
Subordinate resources:    AS: 264092
                          IP: 143.208.148.0/22
                          IP: 2804:2ac0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:64:1c:ec:ed:17:3a:bc:70:38:7b:fe:2e:82:f7:c8:44:ea:17:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  3 14:12:22 2023 GMT
            Not After : May  1 14:17:22 2024 GMT
        Subject: CN=DC13CEC07422F5CFDAC6E77424E6A1D7953E43EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8c:27:2f:48:b2:f1:79:8e:81:a2:3d:96:ce:
                    de:15:68:74:7d:2c:51:72:02:94:6a:e5:66:45:23:
                    6f:9d:8d:cf:14:05:7c:16:04:3b:82:93:f5:11:7a:
                    2c:64:44:d2:58:00:6d:97:5f:25:3e:88:2e:29:51:
                    dd:0c:1a:d5:f5:9c:90:71:5c:6d:b3:03:33:b9:89:
                    de:ca:47:23:a8:74:f0:0d:bf:bd:2e:be:d9:41:93:
                    b2:27:04:4b:42:a6:ce:7b:c0:55:ad:07:1e:24:12:
                    f4:38:be:95:0d:1d:fb:3c:5e:ee:8b:d2:96:ad:80:
                    8c:4a:64:56:54:e9:38:0a:48:f4:80:55:49:3b:f3:
                    04:1d:e4:67:80:ae:ee:2a:cc:3f:d5:27:91:d4:42:
                    4f:1f:db:70:6a:73:be:16:6a:55:fd:0c:5a:28:c8:
                    bf:4b:3e:ed:d0:9f:77:1f:91:ad:3b:af:7f:7b:14:
                    e7:cc:e5:6d:ea:e4:14:a6:85:ff:9b:81:e7:69:83:
                    0a:08:4d:ef:7a:8d:45:1d:e3:1e:17:59:c8:c4:9e:
                    ec:3d:d2:4b:63:b2:52:8b:05:59:d4:83:f8:6b:0e:
                    8c:f3:c4:c7:f9:a2:a3:ec:1b:9f:84:d0:f2:d3:92:
                    6c:fc:55:8f:f3:6c:d2:1a:04:b0:fa:86:75:ce:77:
                    d9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:13:CE:C0:74:22:F5:CF:DA:C6:E7:74:24:E6:A1:D7:95:3E:43:EF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/DC13CEC07422F5CFDAC6E77424E6A1D7953E43EF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.148.0/22
                IPv6:
                  2804:2ac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264092

    Signature Algorithm: sha256WithRSAEncryption
         66:3a:c0:f7:e0:9d:2a:05:64:24:46:8f:75:5c:f2:26:83:78:
         69:ae:04:33:32:bd:3b:eb:9e:75:31:11:9c:d5:7e:c9:a1:8b:
         9a:99:f0:fe:e8:d4:75:55:27:da:6f:47:bc:7c:0c:c3:44:3d:
         8b:09:a4:46:9c:ce:6f:11:cf:ce:7c:03:47:9c:33:2f:8b:de:
         68:85:e2:c2:8c:b7:e0:35:54:01:a7:7c:dc:bc:a6:36:10:53:
         f8:9c:17:0b:7c:83:a1:0b:d9:88:cb:bc:82:0f:fb:1e:50:61:
         80:83:2c:10:af:b1:82:30:10:d3:0a:49:28:55:be:fa:b6:28:
         36:ed:68:af:d0:c2:ca:48:f6:87:4d:3c:cb:e3:a7:b1:38:bb:
         db:d3:f6:50:8d:c0:0e:88:02:3c:59:30:4b:1b:0b:dc:cd:cc:
         ef:d4:e4:9b:81:75:ca:f0:89:cc:b8:be:1e:9d:74:26:94:e9:
         57:88:f5:54:fe:04:b8:5a:95:b6:91:7a:8b:f0:02:ec:a5:7a:
         69:dc:50:d8:e1:4a:34:6f:09:a6:0e:98:72:99:b8:71:52:a2:
         23:21:e0:6c:76:a7:dd:6f:0d:88:31:02:8d:89:2f:01:65:2f:
         bb:c8:ae:bb:60:2a:94:c4:5e:4e:56:5d:21:bb:ab:1a:10:3a:
         5a:27:4d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org