Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DC32EE3150B27A2F08435740CF2B8037115FBB37.cer
File:                     DC32EE3150B27A2F08435740CF2B8037115FBB37.cer (raw, json)
Hash identifier:          g6a6Bfzf4g2xrBpVv+KDnvcfo8U16SRih8CBf5HFsUs=
Subject key identifier:   DC:32:EE:31:50:B2:7A:2F:08:43:57:40:CF:2B:80:37:11:5F:BB:37
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0EEFACA72CCBDE7DB3541D8AF051373C1DE6F352
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/0/DC32EE3150B27A2F08435740CF2B8037115FBB37.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 15 Nov 2023 18:49:25 +0000
Certificate not after:    Wed 13 Nov 2024 18:54:25 +0000
Subordinate resources:    AS: 270970
                          IP: 177.74.108.0/22
                          IP: 2804:7444::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ef:ac:a7:2c:cb:de:7d:b3:54:1d:8a:f0:51:37:3c:1d:e6:f3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 15 18:49:25 2023 GMT
            Not After : Nov 13 18:54:25 2024 GMT
        Subject: CN=DC32EE3150B27A2F08435740CF2B8037115FBB37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:da:c4:02:30:07:95:2b:88:14:63:b3:cf:
                    97:47:db:16:78:db:a7:e8:4f:b9:cf:ec:a9:33:df:
                    59:0d:77:01:b5:06:eb:a0:5c:52:39:c0:ee:ec:5e:
                    ce:84:59:91:91:a6:eb:6d:c1:d5:6b:5a:37:96:1f:
                    79:5b:e0:c5:21:e1:eb:c7:bc:5d:52:5a:6f:18:ab:
                    29:36:7a:30:1a:0d:a5:02:5e:b6:0d:5f:54:92:71:
                    97:97:2c:2d:e9:ff:71:96:9d:c2:12:79:53:9c:7a:
                    31:3c:c5:db:02:9a:e4:40:31:29:7e:4f:0e:a7:4b:
                    2a:79:8a:ed:98:48:02:9d:63:43:54:3b:ee:6f:56:
                    87:2a:71:21:8f:70:f8:2d:f3:d0:88:f0:c3:7c:0d:
                    8c:8a:3e:eb:a5:80:90:94:98:de:37:a5:76:98:14:
                    29:ba:7a:c4:02:d6:73:49:37:05:ac:aa:78:34:cc:
                    84:df:80:3e:f6:75:0b:28:02:17:c5:0e:7d:49:e3:
                    50:f3:eb:3b:70:73:55:16:32:45:37:9d:6c:6e:a4:
                    58:d5:18:ce:a5:b3:bc:dd:29:22:0e:b2:9c:81:35:
                    7a:0b:4b:09:56:10:f2:09:a6:1c:8b:fc:f6:1d:f0:
                    c9:57:91:9c:9a:81:55:63:56:99:ef:c5:97:91:93:
                    c6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:32:EE:31:50:B2:7A:2F:08:43:57:40:CF:2B:80:37:11:5F:BB:37
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/0/DC32EE3150B27A2F08435740CF2B8037115FBB37.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.108.0/22
                IPv6:
                  2804:7444::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270970

    Signature Algorithm: sha256WithRSAEncryption
         ae:b7:ad:b5:e8:4b:a9:31:9d:13:1a:98:c2:bf:0e:bc:70:20:
         e1:6e:34:86:4c:1b:6b:b6:63:61:1c:9a:48:2d:7e:ff:9e:b5:
         a9:a2:5e:05:58:72:ac:da:1b:16:51:f3:88:94:1f:67:3d:12:
         b6:ce:2f:6d:89:76:c3:8b:b6:53:0e:94:87:4d:2b:1c:4b:35:
         6c:12:8e:b0:d0:3a:28:e9:ff:1b:e3:dd:3f:91:e4:24:f6:83:
         f6:c4:b7:c5:c0:1b:16:37:57:1f:29:4d:89:d4:28:4f:a3:57:
         29:cf:a6:46:eb:e5:4e:16:07:06:63:fd:ff:34:13:e2:f0:7f:
         7e:97:11:28:cb:ce:63:bd:e1:f8:64:1b:ba:c8:f9:85:d0:46:
         15:88:22:0e:68:2c:e6:fe:67:fc:a2:e0:c5:75:c9:5f:52:cb:
         e3:ab:32:de:a5:94:20:59:19:40:df:c6:97:27:33:01:40:55:
         e1:bb:5a:9f:61:fd:96:9a:7b:63:84:fd:97:26:6b:fd:f2:4c:
         5e:d3:57:c7:b6:3e:b8:a5:93:9d:29:c6:21:5e:15:50:ef:f3:
         59:55:79:f7:fc:a0:52:97:b4:84:6c:ab:86:d7:2f:e1:08:89:
         fb:ee:98:2b:a5:8d:d2:d9:90:5b:6e:a6:35:bd:1d:fd:71:2e:
         fd:ec:fc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org