Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DC357FEDFFB446880B11B0B151C1736AD4C40D96.cer
File:                     DC357FEDFFB446880B11B0B151C1736AD4C40D96.cer (raw, json)
Hash identifier:          0jT8I7uI/YsUlqnm0a5tD/TzONl6TOdusrEYOw58QhA=
Subject key identifier:   DC:35:7F:ED:FF:B4:46:88:0B:11:B0:B1:51:C1:73:6A:D4:C4:0D:96
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       13373ECCB10EC299E0DB823F75E08072E85C16C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/DC357FEDFFB446880B11B0B151C1736AD4C40D96.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Oct 2023 17:36:25 +0000
Certificate not after:    Tue 15 Oct 2024 17:41:25 +0000
Subordinate resources:    AS: 266591
                          IP: 45.7.172.0/22
                          IP: 2804:3e5c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:37:3e:cc:b1:0e:c2:99:e0:db:82:3f:75:e0:80:72:e8:5c:16:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 17 17:36:25 2023 GMT
            Not After : Oct 15 17:41:25 2024 GMT
        Subject: CN=DC357FEDFFB446880B11B0B151C1736AD4C40D96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b2:c4:1a:db:52:30:db:8c:e2:1f:14:0a:71:
                    4c:67:d1:1c:12:65:e1:3c:88:12:23:c9:ab:29:cf:
                    0f:e5:57:f1:b5:fc:7a:e0:9e:18:c6:53:a3:5a:68:
                    1b:ac:24:87:33:37:5f:79:a5:a5:8f:57:18:8e:48:
                    e8:00:ff:ee:fa:64:61:b6:af:4b:60:82:f3:ba:93:
                    e1:1a:fe:fb:86:d2:b9:f4:f3:1e:d0:8d:ae:90:49:
                    a7:24:dd:4a:f7:ca:2a:75:97:a5:df:55:fe:de:a5:
                    19:a1:d9:87:bd:2c:98:d0:15:8d:2d:b9:a1:34:62:
                    6f:44:62:33:b9:3c:08:c1:43:98:ee:a7:c8:3a:e1:
                    c5:c4:e2:a2:58:03:87:a6:76:51:e2:0c:26:f2:52:
                    8a:91:ec:b2:3b:cc:01:b1:c6:07:63:2b:56:98:24:
                    f4:19:99:99:2c:af:3a:d7:a9:36:39:3f:20:62:13:
                    5e:c0:b2:02:f9:da:fa:7a:97:d2:16:84:1f:57:47:
                    45:d7:3f:1b:e2:5a:e6:95:5e:9c:d2:d0:df:c6:a9:
                    92:5d:5d:68:6d:f6:09:8b:17:fb:91:a2:97:fd:71:
                    06:96:41:df:62:06:fe:51:36:9d:05:12:d7:a6:de:
                    a2:0b:af:ed:c9:05:b7:1c:7c:49:2d:16:10:d5:b3:
                    a1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:35:7F:ED:FF:B4:46:88:0B:11:B0:B1:51:C1:73:6A:D4:C4:0D:96
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/DC357FEDFFB446880B11B0B151C1736AD4C40D96.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.172.0/22
                IPv6:
                  2804:3e5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266591

    Signature Algorithm: sha256WithRSAEncryption
         57:e0:6b:2d:d6:1c:46:b3:e8:39:a1:0a:df:50:80:b0:0e:72:
         73:b9:28:69:56:63:00:a3:d7:7d:7f:be:77:7e:03:c3:3c:cf:
         30:81:09:8c:39:0f:83:39:f7:a5:66:27:eb:6d:fc:3c:1b:2c:
         47:2a:73:e1:8e:4d:e3:47:5f:a7:77:ac:61:ec:92:ac:c2:33:
         a3:77:9b:e3:a7:c7:bc:ad:60:2d:f2:86:5d:b5:e5:3b:aa:dd:
         7a:32:0a:59:a8:db:8b:bc:19:95:91:de:e9:87:d7:8c:04:da:
         d0:62:dd:ad:c3:48:20:80:46:e7:32:ee:53:00:c5:b2:28:c4:
         e1:10:0e:27:0b:76:0c:10:d7:1a:3d:cd:50:44:57:53:fd:13:
         86:15:47:45:06:a8:1f:fb:58:9e:b3:7f:66:2c:16:5a:e4:a1:
         ac:18:26:92:b0:9d:c5:68:ae:41:e8:6d:6b:d0:fa:b7:e3:f3:
         f5:4c:a6:00:ee:bb:49:6a:56:e9:86:f3:e2:96:a8:e8:25:d2:
         f3:91:d4:17:54:54:1f:71:96:e4:06:29:af:db:71:b1:96:dd:
         28:46:ec:d8:ec:36:6c:df:21:cc:e7:00:5a:dd:8b:17:b1:1b:
         c7:7b:dc:80:25:42:97:d2:13:38:64:11:7d:0f:8d:b2:98:19:
         a0:1d:27:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org