Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DC49838DC0E82146CA3629580ACAA15681626498.cer
File:                     DC49838DC0E82146CA3629580ACAA15681626498.cer (raw, json)
Hash identifier:          4dDhJloRBbSHPrD1yJNNEQqbVj/w1qqyamLgn3v5rlg=
Subject key identifier:   DC:49:83:8D:C0:E8:21:46:CA:36:29:58:0A:CA:A1:56:81:62:64:98
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0F2A3C276345BA4FC5B43AEB2F051A7F9A3E31E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/DC49838DC0E82146CA3629580ACAA15681626498.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 20 May 2023 20:22:27 +0000
Certificate not after:    Sat 18 May 2024 20:27:27 +0000
Subordinate resources:    AS: 269149
                          IP: 45.180.204.0/22
                          IP: 2804:6028::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:2a:3c:27:63:45:ba:4f:c5:b4:3a:eb:2f:05:1a:7f:9a:3e:31:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 20 20:22:27 2023 GMT
            Not After : May 18 20:27:27 2024 GMT
        Subject: CN=DC49838DC0E82146CA3629580ACAA15681626498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:81:9e:30:88:7b:32:fa:3b:88:81:42:2e:
                    ad:61:26:2d:22:a6:c1:07:16:fe:53:bc:c1:02:5f:
                    72:93:b9:02:4a:93:46:6c:12:c8:07:26:90:39:32:
                    c3:66:d0:9c:21:06:5d:d0:0b:ae:c5:56:b0:c0:75:
                    b1:5a:85:aa:b7:21:63:bf:f2:3b:df:d4:c7:f4:62:
                    6f:cd:77:49:b6:d9:ad:19:ea:74:1f:6e:ae:f7:a9:
                    5b:6f:d5:97:37:0f:74:9b:3e:9b:4e:d1:13:76:56:
                    41:20:de:b4:fe:96:c9:66:1c:1a:5e:72:6c:d9:49:
                    08:1c:12:bd:d8:49:e3:c8:f3:cf:c7:cf:ca:79:02:
                    87:c8:52:28:30:90:56:b7:b2:53:89:7c:82:e7:6e:
                    6b:be:53:5c:14:85:9e:49:86:d3:8f:f9:4b:6c:d8:
                    45:37:88:8b:ae:ba:c6:69:f6:f5:4b:e0:5c:1d:0d:
                    21:89:ab:96:16:27:2f:53:d1:7a:a3:62:a6:aa:a9:
                    cb:8f:bf:ef:08:24:71:70:98:59:73:63:5a:7e:27:
                    f3:44:50:f8:25:1f:c5:3c:51:5f:69:12:a1:e9:b8:
                    66:ab:91:3f:87:e1:89:db:7b:2d:cb:cc:db:e9:1f:
                    4e:fe:8c:13:c6:a9:9c:7a:b1:f4:5a:5b:7e:40:34:
                    0e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:49:83:8D:C0:E8:21:46:CA:36:29:58:0A:CA:A1:56:81:62:64:98
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DXiF1jPLB2P2UnxisymfkjHHN7FUVXBBwoKKWD9SxzgN/0/DC49838DC0E82146CA3629580ACAA15681626498.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.204.0/22
                IPv6:
                  2804:6028::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269149

    Signature Algorithm: sha256WithRSAEncryption
         00:69:49:f9:41:0e:05:51:e8:70:fe:cb:aa:24:84:64:c8:40:
         b1:8f:eb:26:04:13:f9:5e:7c:2b:f8:43:27:bd:ee:bc:71:48:
         13:ce:a8:40:bc:54:49:03:fc:2d:80:b6:95:89:e8:43:77:db:
         66:b6:e8:28:d8:87:82:8c:56:5f:d2:03:a8:4f:4d:1d:da:ac:
         f5:42:95:8f:a2:15:45:92:64:5f:e4:b0:d1:81:13:78:7c:38:
         63:c7:00:2c:12:64:9f:e8:6e:3c:ac:fc:e8:98:76:77:0b:98:
         b1:da:bc:20:26:2f:11:d0:e6:0e:c5:29:78:e5:e2:ce:c8:3e:
         70:a4:93:24:7f:58:3c:38:09:66:83:35:70:72:fb:40:0e:c2:
         0a:d9:8f:bf:07:a5:62:e6:15:d7:e2:31:f8:9f:36:c1:78:c5:
         34:d3:ce:3f:ae:85:04:92:42:56:c7:ef:ea:ee:00:23:5e:61:
         ff:7a:f8:8a:bf:83:5a:72:0f:af:37:83:8c:bd:8f:d8:d0:ca:
         97:7b:b1:2f:6b:4d:00:8c:aa:c3:8e:21:ad:17:ee:15:47:eb:
         2f:75:1e:8b:a0:84:1b:05:f5:c2:08:32:17:dc:9f:c5:d5:90:
         4c:f9:4d:0b:94:9d:df:ed:13:2d:56:ff:62:8e:b3:1c:fd:e8:
         61:43:1b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org