Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer
File:                     DC8F89483241F7F657DE6846CBDB2BA044387F98.cer (raw, json)
Hash identifier:          DHfc4ZsBir0+D3HvxWAwFfFG4aJBarWm4n7JOsM3eyc=
Subject key identifier:   DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       36459751B55EA7EE10021B661F2EE661DFDF78B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Jan 2024 15:37:28 +0000
Certificate not after:    Fri 17 Jan 2025 15:42:28 +0000
Subordinate resources:    AS: 266267
                          IP: 45.65.192.0/22
                          IP: 2804:3d50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:45:97:51:b5:5e:a7:ee:10:02:1b:66:1f:2e:e6:61:df:df:78:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 19 15:37:28 2024 GMT
            Not After : Jan 17 15:42:28 2025 GMT
        Subject: CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:01:d7:3b:26:08:09:1e:40:f6:75:8c:3a:95:
                    07:88:6e:a8:b2:83:f8:9f:d8:a8:dd:17:95:a9:11:
                    75:4a:45:90:65:46:be:75:35:97:d1:15:cb:5b:c2:
                    e4:cc:3c:32:8b:b3:b4:92:45:7e:23:19:46:f4:e8:
                    e2:31:53:2e:cd:b9:ec:43:8a:49:75:c0:2f:a8:5d:
                    4a:03:88:64:17:1c:8c:bc:4a:bf:b9:a9:56:d9:55:
                    ea:ba:2e:72:08:f3:13:ad:4d:48:1e:a8:86:4d:ef:
                    82:5e:fc:c9:e5:c6:5b:36:c0:8d:7c:f9:12:d4:63:
                    f2:e8:39:fe:88:11:22:b1:f2:77:39:a4:97:3e:f8:
                    f6:6e:b9:a1:f1:e5:41:d5:88:55:1e:f4:08:53:af:
                    9e:cf:40:ae:05:8d:11:1d:ee:de:a8:9e:22:ed:43:
                    8f:38:4b:ed:4b:a6:33:a2:c5:03:17:7f:f9:50:9d:
                    6d:82:b6:20:cf:fe:0e:dd:35:77:bb:c2:82:9e:f3:
                    00:de:3c:19:06:c8:74:d9:19:b5:6e:3a:17:19:f5:
                    f6:42:78:6f:f3:f9:f6:c4:0b:2c:9c:2e:e4:92:6d:
                    32:2a:72:88:e8:7f:bf:e8:9b:e4:28:7b:f0:e9:d1:
                    8e:0c:0f:a0:cb:18:cd:b2:89:34:e8:28:cc:fb:e0:
                    31:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.192.0/22
                IPv6:
                  2804:3d50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266267

    Signature Algorithm: sha256WithRSAEncryption
         89:b5:75:12:93:c9:a8:dd:b5:47:45:68:71:76:fd:73:44:d4:
         dc:28:30:df:ad:ff:5e:43:11:43:f3:df:3b:c7:d5:2f:57:b2:
         83:6a:33:14:a2:5f:f4:30:82:fc:1f:73:f8:9f:5f:af:6c:42:
         21:ab:4c:bf:e9:3a:e7:9f:77:81:19:fd:bd:ab:5a:e5:6a:f6:
         44:8f:1f:d0:be:c3:17:06:06:90:43:e3:6f:51:8f:83:43:0c:
         3a:74:71:94:63:7b:f4:08:80:b3:77:25:0c:8a:1b:53:37:35:
         f3:7d:2b:5f:06:e7:9d:d1:6b:59:d2:19:27:1c:a7:8f:83:f7:
         6a:d9:a3:f1:c3:7e:73:09:2b:0f:84:d6:28:d5:ed:2f:ac:2c:
         ae:0f:eb:94:b6:6d:db:34:67:59:1a:fc:02:1a:31:e7:4a:7e:
         8e:41:78:9e:b2:ec:48:b6:99:48:3c:25:90:4e:ad:3b:b9:c3:
         3c:05:0b:e0:eb:4f:47:85:8d:c8:f4:88:63:cc:16:bf:75:d1:
         06:fe:11:57:f9:aa:03:c3:80:b2:10:6b:21:cf:c3:19:9e:08:
         f0:83:91:a7:9f:34:b8:4c:17:30:7e:a8:9d:d1:da:82:b5:62:
         e3:94:f5:75:04:46:28:40:07:7e:04:7e:e1:7e:1b:4c:24:bd:
         e4:8e:8d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org