Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.cer
File:                     DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.cer (raw, json)
Hash identifier:          yKEp5RZATY4wKhm0VqFuiiB4J1hR6Y1yibkm3LgkI1s=
Subject key identifier:   DC:C8:E9:17:3F:40:90:DF:EE:9D:C2:DC:22:DD:E2:3B:8D:E2:3A:CC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5068470640088879E933A798BE3D226824095CE5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Feb 2023 19:53:11 +0000
Certificate not after:    Tue 13 Feb 2024 19:58:11 +0000
Subordinate resources:    AS: 52660
                          IP: 177.66.248.0/21
                          IP: 2804:c04::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:68:47:06:40:08:88:79:e9:33:a7:98:be:3d:22:68:24:09:5c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 14 19:53:11 2023 GMT
            Not After : Feb 13 19:58:11 2024 GMT
        Subject: CN=DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ca:02:13:9c:be:5e:f3:70:2e:d8:f1:72:a4:
                    ac:33:57:79:c0:cf:d6:3c:52:df:09:82:3b:08:b2:
                    42:98:06:78:9b:00:55:43:58:66:a2:2f:86:a4:38:
                    ae:cd:a0:7d:08:c5:0d:30:89:4c:9e:b8:46:71:94:
                    d0:ab:ae:94:dc:0d:c0:e8:55:57:b7:d1:c3:51:6e:
                    c5:3c:29:be:76:ec:14:1b:52:ea:de:5f:42:6b:04:
                    6e:37:e5:52:72:56:b2:20:01:0b:02:bd:a2:24:9c:
                    d7:14:14:1d:69:37:1b:9c:62:e2:97:2a:e8:ca:62:
                    e9:62:73:a3:6f:bd:aa:bf:f7:4b:6a:88:87:70:e8:
                    1f:88:5e:a3:54:17:d3:57:59:62:c4:5e:b7:4b:64:
                    38:96:71:b4:a0:c2:9f:21:86:df:9b:43:26:e5:4b:
                    2b:86:5e:9f:c4:f9:fa:57:ed:b6:f8:43:18:66:cd:
                    8f:39:1c:15:d4:4f:6c:7a:4d:90:0a:c4:0e:3c:ca:
                    d6:95:b6:bc:89:58:c9:3e:af:8d:38:38:80:be:7b:
                    71:92:15:84:6f:74:78:4e:94:51:5d:14:51:f3:98:
                    35:30:fc:7d:ac:28:7e:9d:d4:34:83:15:85:5a:78:
                    27:53:bc:24:6b:d7:44:af:a8:21:5f:a2:43:fb:11:
                    1d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:C8:E9:17:3F:40:90:DF:EE:9D:C2:DC:22:DD:E2:3B:8D:E2:3A:CC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.248.0/21
                IPv6:
                  2804:c04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52660

    Signature Algorithm: sha256WithRSAEncryption
         5b:e8:eb:67:39:82:c9:01:89:e0:7f:75:22:7e:cf:9f:3f:c9:
         5c:8b:61:71:ae:c0:58:db:8d:d1:6d:29:84:c3:01:f2:8b:66:
         f3:19:5a:69:a4:1c:7e:ca:54:1b:2f:e8:39:82:14:9b:fa:aa:
         62:ff:22:fc:cc:e4:77:7e:79:3b:fc:8e:73:13:33:95:ef:ea:
         8a:65:c7:f4:5e:2e:af:b4:97:a9:e5:a8:ff:af:83:6e:fe:22:
         05:24:bc:45:e6:2d:65:59:23:f8:09:4e:21:bb:15:73:e5:80:
         7f:48:9d:0e:28:af:91:dd:19:4c:de:29:5f:5d:f0:bc:69:04:
         51:55:31:ed:42:b1:66:b4:71:9b:3e:54:92:c5:b3:12:40:5d:
         1e:53:69:9b:ae:8a:37:a2:9e:4e:7f:b5:03:0c:34:0e:65:fe:
         f2:0b:02:97:8b:f2:e9:50:45:bc:a5:ed:9a:e3:2f:63:71:93:
         77:67:9f:a4:ce:5b:2f:51:62:c7:ca:50:ca:30:37:91:41:38:
         e8:89:f3:f8:c5:56:23:84:82:29:09:87:75:71:84:15:fc:e7:
         a5:b6:02:e4:e5:ae:57:57:1d:d3:af:76:ad:8c:27:e8:90:8e:
         00:9c:60:79:a3:27:23:99:1a:cd:8e:77:57:c2:96:3a:ea:e1:
         7c:c3:f7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org