Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DCB1AF2C54638B5CBAA6E221C62DB3A5EE43C432.cer
File:                     DCB1AF2C54638B5CBAA6E221C62DB3A5EE43C432.cer (raw, json)
Hash identifier:          ShF5sDbx3YD6gNUFpPEjkjbnPdDzNf/nsDAPgi5gwTA=
Subject key identifier:   DC:B1:AF:2C:54:63:8B:5C:BA:A6:E2:21:C6:2D:B3:A5:EE:43:C4:32
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F942263D65C8CF49D8FB5B9C1B83EB8C2A7E5C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/0/DCB1AF2C54638B5CBAA6E221C62DB3A5EE43C432.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Sep 2023 20:45:09 +0000
Certificate not after:    Wed 04 Sep 2024 20:50:09 +0000
Subordinate resources:    AS: 269478
                          IP: 45.187.124.0/22
                          IP: 2804:6540::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:94:22:63:d6:5c:8c:f4:9d:8f:b5:b9:c1:b8:3e:b8:c2:a7:e5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  6 20:45:09 2023 GMT
            Not After : Sep  4 20:50:09 2024 GMT
        Subject: CN=DCB1AF2C54638B5CBAA6E221C62DB3A5EE43C432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:30:4a:72:f3:86:07:19:56:18:13:f0:78:79:
                    ae:66:fd:f9:45:ed:a6:6b:c5:ec:df:4b:34:cc:f9:
                    01:dd:57:e7:ab:aa:5b:43:fe:8d:2d:c6:77:76:24:
                    cc:01:37:50:24:fb:e9:a6:e8:5e:9a:ce:70:54:1e:
                    1b:9a:90:ad:b8:66:39:b7:04:c9:32:f6:82:5a:fe:
                    28:60:84:9e:65:2a:59:1d:40:ab:06:3a:11:3d:b0:
                    27:52:cd:32:13:a5:00:b8:6c:e7:42:74:e5:b2:92:
                    f1:80:be:4a:71:84:1a:f1:91:2b:70:dc:eb:65:53:
                    c4:9f:8d:6f:1c:66:5d:62:e4:1c:47:52:fe:d3:11:
                    d1:cd:41:ad:0c:48:0c:00:78:68:28:d5:79:e8:36:
                    5d:2f:b7:0f:1f:34:fd:7e:4a:47:fe:1b:6f:fc:a8:
                    70:8c:98:17:b3:49:d1:b4:81:6a:01:38:c4:71:68:
                    67:4f:0c:a5:39:c9:78:98:f9:ec:36:14:65:40:d9:
                    30:b1:76:00:0f:d5:05:20:2c:ed:07:2c:b6:02:e8:
                    01:e8:5e:90:41:5c:37:e6:c8:58:d8:f2:5c:a4:ed:
                    cb:de:6e:99:9a:18:29:16:fe:df:75:12:a9:2b:c3:
                    67:4a:44:7c:9b:7c:1e:8a:c9:ef:d3:34:5a:cb:fe:
                    e2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:B1:AF:2C:54:63:8B:5C:BA:A6:E2:21:C6:2D:B3:A5:EE:43:C4:32
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/0/DCB1AF2C54638B5CBAA6E221C62DB3A5EE43C432.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.124.0/22
                IPv6:
                  2804:6540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269478

    Signature Algorithm: sha256WithRSAEncryption
         52:81:b1:2b:60:fb:e7:b0:fe:39:03:92:ee:c3:3a:b2:53:c7:
         79:ef:0c:03:9d:35:33:62:48:54:9b:53:94:a1:04:06:41:17:
         54:63:bd:9a:42:d6:b2:ce:f3:55:50:6d:12:a3:ba:36:0a:63:
         0c:bf:41:4e:35:c9:35:92:59:38:8b:e6:1c:d3:b9:3d:64:54:
         07:d1:73:6e:c5:0a:31:33:af:e5:fe:5e:e3:60:8b:39:4c:d6:
         cd:d1:73:64:28:95:9b:a3:3a:e5:58:1e:71:34:4b:fe:ee:ac:
         a8:12:66:30:6f:bc:1e:01:81:c1:1e:89:85:6d:9e:1f:29:ac:
         04:69:97:82:3b:47:97:2a:81:e3:9a:55:30:5d:40:f3:f3:e9:
         0a:0a:5b:a1:7c:77:27:f7:f7:78:e8:c0:4e:f3:0a:00:41:35:
         81:dd:b7:a2:b5:ad:71:af:6d:41:c4:23:05:33:e0:1c:06:29:
         5c:9c:18:c7:99:f3:2a:7b:c8:44:64:97:32:9e:ce:ff:ea:d0:
         4c:24:ae:7e:7d:30:f5:6d:1c:0a:f6:c8:e4:ae:d0:cf:ed:b7:
         b4:b6:19:2e:63:6b:fc:6d:b3:47:c5:94:33:05:b6:49:bc:9d:
         e8:08:5f:97:2b:9a:5a:6d:29:b4:a7:87:bb:68:93:0e:83:74:
         e3:66:53:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org