Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.cer
File:                     DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.cer (raw, json)
Hash identifier:          kkADUmLsyeahggOXJ330eoGxjox98FvTn/N7izVeTFI=
Subject key identifier:   DC:33:80:34:AC:CA:06:D2:BA:9F:C6:BE:39:61:60:6E:E3:DE:1F:EA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       51BF49786D3887B12008350302452383FADA048A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Nov 2023 21:05:10 +0000
Certificate not after:    Fri 22 Nov 2024 21:10:10 +0000
Subordinate resources:    AS: 266614
                          IP: 45.7.200.0/22
                          IP: 2804:3eac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:bf:49:78:6d:38:87:b1:20:08:35:03:02:45:23:83:fa:da:04:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 24 21:05:10 2023 GMT
            Not After : Nov 22 21:10:10 2024 GMT
        Subject: CN=DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:52:26:85:f7:a9:c5:5e:3a:94:bd:44:71:
                    72:cf:fd:30:73:6a:e1:9f:cb:7a:36:5b:3f:5d:4e:
                    44:0a:ae:be:1b:99:95:2e:09:c1:e3:ab:09:88:a9:
                    8a:57:d8:c7:e4:ad:24:d2:bd:99:8d:b2:54:a7:e3:
                    d3:e8:d2:d3:a7:96:3a:c8:8e:0d:a4:21:73:e4:e6:
                    8d:e2:e0:bb:49:6d:12:f1:a0:87:ed:fb:bb:42:b4:
                    f3:36:a2:ee:10:28:6e:f9:4d:77:5c:07:fc:37:64:
                    01:06:83:b2:24:7c:4a:b2:15:ae:45:21:85:e2:b6:
                    79:30:21:2c:a5:8d:54:e4:36:ff:39:fa:2c:f1:5a:
                    14:43:f5:e8:b6:9f:a0:0d:aa:2b:17:3a:9e:2b:4d:
                    36:31:ac:83:75:84:89:d9:ac:03:0b:f2:d5:1c:4d:
                    08:4e:e0:ae:c7:9c:d3:a9:d2:dc:d3:fe:19:e0:a9:
                    fb:a1:d5:9d:f1:0b:23:a3:cd:6d:0f:1c:3a:ac:8b:
                    a1:ee:0f:72:dd:ca:da:bf:ff:79:0e:5e:62:9e:db:
                    c2:87:be:81:a6:c8:a0:d0:ba:3e:ad:16:60:27:59:
                    1f:80:e6:8b:4f:12:c3:27:88:74:ba:90:f4:33:f8:
                    c2:12:04:56:dc:99:50:e2:f3:c9:ac:19:4f:ca:85:
                    29:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:33:80:34:AC:CA:06:D2:BA:9F:C6:BE:39:61:60:6E:E3:DE:1F:EA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/DC338034ACCA06D2BA9FC6BE3961606EE3DE1FEA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.200.0/22
                IPv6:
                  2804:3eac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266614

    Signature Algorithm: sha256WithRSAEncryption
         35:e1:9c:6f:1f:08:b3:25:90:fd:8c:7c:82:39:0d:7b:1c:13:
         c0:bd:3d:1b:01:85:df:d7:db:b6:41:3b:31:3a:4e:4b:f1:cf:
         a8:54:d3:ce:c6:f3:8a:42:a5:5b:2c:a9:7e:19:2b:3d:8b:75:
         b8:5d:21:5e:09:df:c2:96:21:a1:a1:fe:a8:cd:47:ae:e7:b4:
         09:b9:f4:49:28:09:c6:45:39:d2:27:90:f3:0a:c5:11:49:69:
         2a:24:ae:23:be:d3:1e:9d:f3:65:2b:e6:85:a8:0b:13:9f:0b:
         21:96:10:11:2e:ea:38:22:5b:9d:a6:75:e4:42:bc:c7:97:13:
         5e:cc:2d:57:27:24:b5:1e:c0:06:8e:b5:53:d8:9d:d4:2b:be:
         47:21:d6:95:73:d1:d3:f3:05:ad:6a:dc:ec:2e:09:eb:b4:98:
         11:38:22:00:26:b4:a6:1b:de:22:7a:87:0a:d8:3e:4d:6b:97:
         72:c2:e5:17:3e:e6:a1:ed:7d:ff:c5:c5:a3:95:7a:ec:c2:7c:
         6d:13:81:73:ec:5b:00:ec:ce:03:7d:ca:e2:65:13:26:18:77:
         d9:74:c0:05:e7:30:dd:62:04:b3:dc:8e:0a:68:c1:aa:00:67:
         0b:1f:8d:60:80:5f:37:c0:8c:34:0f:f7:50:12:16:61:ec:fb:
         82:14:53:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org