Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DC7AAFB80904AFEEF9CE19A5091BDFD6E0D184F7.cer
File:                     DC7AAFB80904AFEEF9CE19A5091BDFD6E0D184F7.cer (raw, json)
Hash identifier:          5Yo4pmx/+aBdJJOYjt17svVYNAtyBV7bKxi8bvy9peE=
Subject key identifier:   DC:7A:AF:B8:09:04:AF:EE:F9:CE:19:A5:09:1B:DF:D6:E0:D1:84:F7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7DA588F4890909F4C118359488BED88C8C88DD8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/DC7AAFB80904AFEEF9CE19A5091BDFD6E0D184F7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jul 2023 20:39:27 +0000
Certificate not after:    Thu 18 Jul 2024 20:44:27 +0000
Subordinate resources:    AS: 52539
                          IP: 179.106.176.0/20
                          IP: 2804:3404::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a5:88:f4:89:09:09:f4:c1:18:35:94:88:be:d8:8c:8c:88:dd:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 20 20:39:27 2023 GMT
            Not After : Jul 18 20:44:27 2024 GMT
        Subject: CN=DC7AAFB80904AFEEF9CE19A5091BDFD6E0D184F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6a:8a:00:d5:26:56:4e:e8:87:2d:b8:5c:52:
                    1f:1d:b2:dd:81:46:6c:ca:ae:6e:ce:a3:90:27:f7:
                    85:0c:98:60:2c:1e:a2:93:03:09:78:3f:0d:d4:06:
                    a0:ba:f5:e5:65:fc:74:cf:e8:e0:35:78:b4:fa:2f:
                    a1:20:7a:1c:07:f6:df:c8:f7:7d:a8:0a:15:5a:48:
                    00:d8:3d:2b:34:0a:4f:12:b8:98:7c:8f:61:53:dc:
                    c0:f6:16:fe:e0:a2:7c:ce:90:a2:8b:f2:96:09:43:
                    74:ae:75:74:75:6f:6a:ed:ad:90:c0:39:d4:1b:3e:
                    55:84:28:2f:ca:24:62:11:8a:e7:49:cc:c5:72:cd:
                    e1:ad:62:f5:58:7b:77:5e:0a:2a:01:ab:ae:a0:7b:
                    ad:b8:07:74:0a:0a:d5:ec:81:c0:76:c1:cf:34:a1:
                    7e:2d:da:ab:23:92:d1:da:2d:8a:fc:1f:5c:6a:cb:
                    27:d9:e7:b5:8a:b8:b9:e1:66:2b:2a:03:fc:e2:07:
                    45:a2:6f:f1:e7:17:94:fd:87:5c:15:f3:b0:a3:50:
                    68:2c:49:14:48:f0:3e:a5:35:07:f6:b5:45:cf:06:
                    75:e5:cf:8a:e1:1a:d6:ec:71:e5:f2:4f:fa:13:a9:
                    56:fa:10:43:4b:d8:7b:3a:93:2c:14:c9:44:87:20:
                    5e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:7A:AF:B8:09:04:AF:EE:F9:CE:19:A5:09:1B:DF:D6:E0:D1:84:F7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/DC7AAFB80904AFEEF9CE19A5091BDFD6E0D184F7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.176.0/20
                IPv6:
                  2804:3404::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52539

    Signature Algorithm: sha256WithRSAEncryption
         af:83:5f:eb:d9:53:7d:20:c1:51:a6:26:7d:81:f1:65:1c:65:
         2e:72:cd:a8:00:25:67:d7:60:95:30:58:d7:09:c7:99:d8:8f:
         29:43:14:fe:81:6d:b5:f8:f7:54:15:51:e3:0a:cf:7f:78:a1:
         b5:47:52:8c:97:de:66:53:5a:07:bb:e0:c1:a4:ff:cb:49:69:
         9d:2e:77:cc:5f:96:54:11:d6:de:f4:1c:ff:08:83:06:68:c1:
         c2:b6:90:c8:f8:81:c0:f8:aa:bc:60:e3:8d:1a:28:65:da:f1:
         6f:3f:fb:df:01:d3:f3:7e:f8:5a:8a:88:4c:db:52:7f:30:45:
         8b:7d:cd:8e:df:0f:6c:cb:a3:72:16:ae:00:fd:f5:2b:18:21:
         5f:22:a1:37:51:9a:17:d5:59:8b:68:71:e0:23:85:1d:42:76:
         7e:28:a0:bb:8d:73:0f:c2:36:fa:f8:3d:28:6c:39:31:fe:0b:
         a3:9e:7b:b5:a7:f7:44:46:dd:aa:09:2f:07:ad:a8:13:3d:b9:
         c8:e2:55:8e:c0:6a:58:f3:54:35:5d:f3:ea:39:c7:6f:3c:cf:
         ba:cd:30:f3:10:a6:a4:1e:72:64:d7:98:9c:0f:96:c8:20:3b:
         3f:05:c2:bb:5b:b4:6a:7c:ab:d9:e4:c2:fe:ce:d4:3d:17:1b:
         e9:fc:02:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org