Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DCCDF84EFE1155FA05FC54F9B403B0C760EC57DD.cer
File:                     DCCDF84EFE1155FA05FC54F9B403B0C760EC57DD.cer (raw, json)
Hash identifier:          +JURRoMFKemeJKWloYUnVbPUYAEkyvX/hHTseg7XYQU=
Subject key identifier:   DC:CD:F8:4E:FE:11:55:FA:05:FC:54:F9:B4:03:B0:C7:60:EC:57:DD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1FBA286645F45C6DD639EB62D7448EC17E93148D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/1/DCCDF84EFE1155FA05FC54F9B403B0C760EC57DD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Nov 2023 13:35:15 +0000
Certificate not after:    Fri 22 Nov 2024 13:40:15 +0000
Subordinate resources:    AS: 61830
                          IP: 201.140.240.0/22
                          IP: 2804:19fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ba:28:66:45:f4:5c:6d:d6:39:eb:62:d7:44:8e:c1:7e:93:14:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 24 13:35:15 2023 GMT
            Not After : Nov 22 13:40:15 2024 GMT
        Subject: CN=DCCDF84EFE1155FA05FC54F9B403B0C760EC57DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:c0:d7:d1:04:29:ac:88:1a:94:b5:cb:fd:
                    da:41:b1:78:5d:d2:b5:14:99:07:08:6a:53:51:16:
                    e1:ba:10:a0:b1:7c:26:ac:58:ec:c7:30:bd:37:86:
                    89:29:ed:83:d3:22:89:0a:45:6a:40:6c:e7:28:8e:
                    11:4c:3c:81:83:99:ca:96:67:dd:eb:b2:60:65:43:
                    37:71:b4:b0:c6:8b:21:73:b2:35:eb:2e:53:bb:bf:
                    39:43:ee:e7:d5:63:9c:a0:fb:33:86:0d:6f:f9:51:
                    e0:cb:94:b4:1f:78:6e:b4:f4:3a:f1:19:18:b2:e7:
                    42:48:c3:83:91:f7:d3:88:fa:94:21:db:c2:e3:09:
                    6d:63:6b:0e:d0:af:7f:cf:e9:19:af:b2:e0:ed:77:
                    26:b7:93:0c:c4:19:10:22:8e:ea:f2:3b:a2:65:c7:
                    8f:69:0f:77:c9:5e:ee:9f:b0:c6:8d:c0:3e:5a:14:
                    2f:7e:a8:dc:d0:49:c0:ea:18:76:3b:df:d7:b8:f7:
                    99:97:6d:18:2d:28:9a:41:ee:50:6f:da:27:e8:21:
                    26:47:28:69:c8:26:2d:30:bc:17:a6:c0:5d:a1:ce:
                    0f:5f:9a:45:36:ca:34:93:30:fd:1e:fe:cd:92:91:
                    a7:23:85:5b:4f:9e:38:83:c2:7b:89:cd:34:aa:88:
                    03:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:CD:F8:4E:FE:11:55:FA:05:FC:54:F9:B4:03:B0:C7:60:EC:57:DD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/1/DCCDF84EFE1155FA05FC54F9B403B0C760EC57DD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.240.0/22
                IPv6:
                  2804:19fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61830

    Signature Algorithm: sha256WithRSAEncryption
         51:94:7c:07:a8:2f:09:99:dd:df:bd:24:17:1b:f9:ae:c9:ff:
         fd:d2:60:c2:65:0d:bf:99:b2:1b:05:da:93:89:60:18:88:62:
         c2:f7:37:ce:eb:33:80:df:d5:c9:af:8b:18:25:f2:34:e1:df:
         8a:60:97:72:3e:3d:72:66:39:de:d9:e1:ec:c9:79:f8:f4:1b:
         03:35:26:6c:91:dc:6f:b8:78:64:67:b4:11:f5:dc:62:11:fe:
         2e:91:85:97:7a:db:30:68:02:4f:38:34:58:22:2a:1e:c0:02:
         f5:4f:14:06:c7:fa:e1:23:fa:02:25:36:18:c8:0a:55:c3:5c:
         6a:81:bf:e6:e5:ec:be:82:87:fc:9b:0c:ee:25:83:71:64:c4:
         a2:fd:34:6a:ac:7d:67:4c:23:dd:bf:ac:f1:df:52:07:81:27:
         6c:06:40:0d:0e:28:85:c4:c8:45:2f:56:91:05:03:12:d6:77:
         b4:c8:31:df:c7:19:ba:a6:93:df:9f:e4:12:91:47:d5:41:eb:
         e0:73:df:6f:10:5b:7a:69:1a:4c:c2:dd:5e:80:b5:e4:96:62:
         9e:e6:1d:53:2b:23:99:b2:5f:f9:71:1a:f3:be:cf:f5:a0:3e:
         e9:b0:41:07:a2:6a:97:00:ff:fd:6b:3a:fb:30:ce:54:93:61:
         be:1c:ea:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org