Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
File:                     DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer (raw, json)
Hash identifier:          rRa6mLaskzkye07J63GbfluNooXYgaAoY2PPyQaNUR0=
Subject key identifier:   DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5F40CB50C5D071194E00DE2B5445005CE4761F32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Apr 2024 20:01:39 +0000
Certificate not after:    Mon 07 Apr 2025 20:06:39 +0000
Subordinate resources:    AS: 28270
                          IP: 131.196.76.0/22
                          IP: 131.221.68.0/22
                          IP: 138.117.124.0/22
                          IP: 138.121.220.0/22
                          IP: 138.122.236.0/22
                          IP: 143.255.112.0/22
                          IP: 160.238.220.0/22
                          IP: 168.121.52.0/22
                          IP: 168.227.44.0/22
                          IP: 168.228.128.0/22
                          IP: 168.232.116.0/22
                          IP: 170.0.204.0/22
                          IP: 170.245.100.0/22
                          IP: 170.247.52.0/22
                          IP: 177.66.64.0/21
                          IP: 177.67.0.0/21
                          IP: 177.70.128.0/20
                          IP: 177.75.192.0/19
                          IP: 177.87.144.0/21
                          IP: 177.130.192.0/19
                          IP: 179.191.128.0/19
                          IP: 186.219.144.0/20
                          IP: 186.233.72.0/21
                          IP: 187.18.128.0/17
                          IP: 187.108.96.0/20
                          IP: 187.110.208.0/20
                          IP: 189.45.64.0/18
                          IP: 189.50.144.0/20
                          IP: 191.6.80.0/21
                          IP: 200.94.240.0/22
                          IP: 201.149.120.0/22
                          IP: 2804:880::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:40:cb:50:c5:d0:71:19:4e:00:de:2b:54:45:00:5c:e4:76:1f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  8 20:01:39 2024 GMT
            Not After : Apr  7 20:06:39 2025 GMT
        Subject: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3f:a9:df:5b:9b:53:c5:e2:96:c2:e7:35:16:
                    20:7a:eb:ad:ae:4a:df:0c:29:be:3b:21:6e:e0:ab:
                    e9:7d:32:79:9f:39:91:de:1f:2a:a4:01:e6:60:e5:
                    47:ed:df:6f:c0:52:b0:2b:71:0f:73:9c:65:82:90:
                    d9:99:bc:e1:cf:ca:62:c2:37:25:88:28:fb:5c:7e:
                    11:a5:a0:a9:3c:0d:85:75:4c:69:d7:42:4e:b6:61:
                    88:63:b4:85:55:a7:d2:a0:6b:73:02:9b:52:8d:00:
                    9c:63:15:f4:05:6e:9f:3d:86:f2:3a:b8:29:47:65:
                    c2:c0:0f:e4:6a:e9:09:fe:ab:4b:0e:aa:f5:76:5b:
                    70:9c:5b:71:cb:93:16:92:bd:50:6c:90:df:39:72:
                    5c:fd:84:0f:99:87:9d:20:9d:04:7f:9b:9a:16:9a:
                    52:d5:cd:d9:18:36:0a:1c:40:09:5e:2f:ef:55:81:
                    d8:45:88:d3:b4:41:db:0f:ef:ce:ce:5c:7c:68:56:
                    7b:78:bb:2e:10:9b:2d:c4:07:33:6e:8c:ef:56:b3:
                    ab:e6:ab:93:4e:cc:71:7c:3c:e4:a7:41:7e:5c:c6:
                    ac:d3:87:8d:28:8a:e8:67:3f:e9:3c:c2:d7:08:31:
                    c3:80:c5:8b:11:5b:ee:9b:dc:eb:14:f6:c8:1e:3e:
                    50:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.76.0/22
                  131.221.68.0/22
                  138.117.124.0/22
                  138.121.220.0/22
                  138.122.236.0/22
                  143.255.112.0/22
                  160.238.220.0/22
                  168.121.52.0/22
                  168.227.44.0/22
                  168.228.128.0/22
                  168.232.116.0/22
                  170.0.204.0/22
                  170.245.100.0/22
                  170.247.52.0/22
                  177.66.64.0/21
                  177.67.0.0/21
                  177.70.128.0/20
                  177.75.192.0/19
                  177.87.144.0/21
                  177.130.192.0/19
                  179.191.128.0/19
                  186.219.144.0/20
                  186.233.72.0/21
                  187.18.128.0/17
                  187.108.96.0/20
                  187.110.208.0/20
                  189.45.64.0/18
                  189.50.144.0/20
                  191.6.80.0/21
                  200.94.240.0/22
                  201.149.120.0/22
                IPv6:
                  2804:880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28270

    Signature Algorithm: sha256WithRSAEncryption
         01:5d:b6:96:65:c4:88:e4:3e:79:61:69:77:a6:02:32:bf:e3:
         4f:f7:48:e0:e6:4d:2f:e1:a6:24:5f:da:45:c5:cb:a7:d9:cd:
         74:85:db:4e:ba:26:f3:a3:9a:53:9b:8a:28:c1:8a:5d:e6:54:
         68:db:14:d9:4b:77:31:5b:20:5c:9a:d8:fc:cb:60:6d:88:77:
         79:0e:ab:d0:00:d1:29:44:c2:59:1e:f4:cf:08:cf:94:25:c6:
         e2:95:de:f0:e8:ae:8a:1d:f9:d5:84:d4:32:1b:ba:7f:04:a9:
         d2:a7:0d:79:f7:e0:b4:97:b0:59:c4:e1:d3:41:88:e6:f0:52:
         af:86:af:ca:b4:74:42:35:cf:50:af:89:ff:bc:36:25:98:b7:
         49:86:98:ed:75:4d:59:73:b9:24:b5:c7:27:fb:77:34:3a:58:
         9d:da:96:28:fb:f3:9a:fd:db:fd:18:f4:7d:cf:a0:78:4a:06:
         5a:fc:63:3f:0f:71:19:a4:d2:18:5b:d7:af:cc:84:ca:d4:f2:
         f0:b0:74:c2:88:a0:93:f4:ca:75:5b:6e:ff:bb:01:64:c8:4c:
         72:c6:88:5f:1c:d5:bb:76:6e:dc:78:0a:54:83:b6:dc:64:25:
         81:c0:3e:d7:37:77:a8:1f:3d:15:15:e6:e8:21:49:1c:6d:7e:
         b3:59:38:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org