Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer
File:                     DCA8042978431D2B4D15E54233868E8EBA0D1446.cer (raw, json)
Hash identifier:          1Iq8+UCqjtkHhrQsXMPrGmgDLbo8Wz403msU3HaPFZw=
Subject key identifier:   DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       296B96A701709131A15842FFFAA26513787578DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/DCA8042978431D2B4D15E54233868E8EBA0D1446.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 14 Aug 2023 15:53:32 +0000
Certificate not after:    Mon 12 Aug 2024 15:58:32 +0000
Subordinate resources:    AS: 268192
                          IP: 45.233.82.0/23
                          IP: 45.235.180.0/22
                          IP: 168.181.36.0/22
                          IP: 2804:4d5c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6b:96:a7:01:70:91:31:a1:58:42:ff:fa:a2:65:13:78:75:78:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 14 15:53:32 2023 GMT
            Not After : Aug 12 15:58:32 2024 GMT
        Subject: CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:03:e7:c7:11:ad:c0:80:3e:6c:5d:22:19:90:
                    84:e6:b9:94:e3:60:ee:4c:67:73:e4:97:39:d8:25:
                    2f:af:82:08:c9:ed:e9:27:58:b7:c9:fb:86:a5:7c:
                    9b:17:02:93:a5:20:90:d7:06:15:9d:00:f7:a3:0e:
                    4c:41:34:67:0e:56:f8:79:b2:c7:f1:06:cb:58:93:
                    6d:c6:b9:a8:f2:1e:cf:9c:b8:d3:0d:88:de:e7:a3:
                    6b:38:2d:3b:c7:ff:6e:96:7e:00:42:32:92:39:62:
                    70:4a:2b:52:55:7c:56:be:da:cb:eb:83:59:c4:ed:
                    a3:22:6b:41:4d:49:58:b7:0b:cd:2a:b6:1c:07:7b:
                    c6:ed:25:e1:9c:1c:fc:ae:1c:f0:2d:56:2b:c5:d7:
                    d7:1e:4a:37:74:0f:74:83:fe:9f:d4:9d:ab:27:be:
                    3f:d1:43:55:69:ee:a8:2b:f5:c9:11:9c:ea:f4:63:
                    7f:cd:3f:a2:62:15:16:56:f1:81:52:05:a0:6e:51:
                    19:5d:12:e7:ee:b7:d9:81:ed:42:88:05:46:31:58:
                    48:9d:a0:b8:25:28:26:58:e4:7b:07:27:7b:bf:cb:
                    92:b8:15:5e:db:8b:93:ce:f0:0b:f0:21:8c:d3:99:
                    47:e8:5c:7a:8e:7a:b3:06:e3:dc:a1:66:43:e3:58:
                    1c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/DCA8042978431D2B4D15E54233868E8EBA0D1446.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.82.0/23
                  45.235.180.0/22
                  168.181.36.0/22
                IPv6:
                  2804:4d5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268192

    Signature Algorithm: sha256WithRSAEncryption
         b3:00:89:57:90:49:c0:09:b8:65:b3:1d:41:cf:41:62:88:83:
         1c:ad:5e:29:8f:4b:e4:18:9d:f2:ac:88:66:46:0b:50:e4:dd:
         e3:71:f6:25:45:31:94:bc:ac:3b:6d:c9:a9:54:cd:c5:9a:94:
         ef:ea:7d:4e:22:b0:2d:a5:62:69:5d:8b:e5:71:41:a0:25:73:
         cf:85:c1:f5:bf:25:d6:ea:4c:78:16:71:f0:b5:2a:be:4b:97:
         90:0c:70:e5:5c:00:5b:d2:95:35:86:22:64:9e:ee:89:12:b0:
         de:e3:5f:13:f2:97:2c:3c:b7:aa:af:4c:d4:b1:9a:ee:2a:60:
         90:8d:42:1a:fa:17:c8:37:1d:ee:1f:1d:ab:62:e8:64:e1:29:
         85:a8:c5:f0:e9:74:4b:8e:2d:58:03:e1:72:19:46:92:6e:26:
         77:35:ca:f2:55:4a:45:52:d2:9f:62:a2:f1:76:b2:a2:30:23:
         1a:8a:ae:5d:1c:2d:f9:f3:8a:d0:a3:15:86:97:f4:4f:8b:20:
         2e:ab:34:54:a0:77:54:a9:de:f0:8e:e9:12:b0:0a:33:9c:fb:
         80:2c:bd:62:9b:be:2f:76:11:31:1d:33:0e:dd:c3:46:db:8c:
         f2:f9:eb:8e:65:81:1c:4d:6c:a9:34:67:79:e7:d2:bf:af:71:
         9a:d3:63:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org