Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DCDF3F704AF3B7D3719CD934C3BA88561969C337.cer
File:                     DCDF3F704AF3B7D3719CD934C3BA88561969C337.cer (raw, json)
Hash identifier:          FGZTMfPfjWeCnog1g3HdKTk6ucnKgG5FH4hE5IIGYb0=
Subject key identifier:   DC:DF:3F:70:4A:F3:B7:D3:71:9C:D9:34:C3:BA:88:56:19:69:C3:37
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6C76C44A7137EAFA25695AED45257BA0A39A2F65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/DCDF3F704AF3B7D3719CD934C3BA88561969C337.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Mar 2023 12:01:36 +0000
Certificate not after:    Fri 22 Mar 2024 12:06:36 +0000
Subordinate resources:    AS: 266489
                          IP: 170.244.24.0/22
                          IP: 2804:389c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:76:c4:4a:71:37:ea:fa:25:69:5a:ed:45:25:7b:a0:a3:9a:2f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 24 12:01:36 2023 GMT
            Not After : Mar 22 12:06:36 2024 GMT
        Subject: CN=DCDF3F704AF3B7D3719CD934C3BA88561969C337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5b:11:64:d8:38:d3:21:d0:c9:98:87:54:40:
                    25:52:02:2e:f5:ae:b7:8d:f8:d2:c1:65:9a:7d:4b:
                    1e:cd:ad:9d:91:34:b6:14:7f:df:18:f8:cb:f1:cf:
                    c2:3a:cc:cf:25:a5:ad:8b:14:b0:67:c7:e5:bf:eb:
                    4f:65:ce:91:cd:31:31:61:fa:55:41:a2:f4:b6:ff:
                    43:e4:b5:16:43:e1:74:dd:85:13:56:b0:33:3c:6e:
                    1d:9c:0d:34:2e:59:3a:15:bc:ff:ef:b0:9d:70:3c:
                    e9:59:79:41:01:0a:82:b5:c8:2c:2d:fb:f8:4c:b5:
                    34:73:43:fc:52:6c:f9:e2:79:88:1a:7b:6b:d2:bd:
                    0e:55:78:21:27:30:43:c0:e4:9d:21:3a:d3:63:3a:
                    ea:67:b5:cb:1e:c1:0c:c9:a3:ab:e5:3c:ce:ed:3c:
                    59:c7:d8:42:90:3a:7f:ad:63:63:28:e1:ce:6e:a2:
                    40:ca:3a:8e:89:12:de:84:c7:f6:ce:ae:8a:d3:07:
                    84:38:f5:34:5f:b9:57:d3:9f:98:7e:da:fa:b2:19:
                    06:d4:19:7e:52:c7:14:20:2b:99:6e:63:a8:42:1d:
                    ed:91:c4:ea:9b:8f:bf:84:b4:c8:bc:f3:ed:90:1d:
                    19:55:75:92:9c:fd:6a:57:76:b3:8e:41:bd:fd:50:
                    b9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:DF:3F:70:4A:F3:B7:D3:71:9C:D9:34:C3:BA:88:56:19:69:C3:37
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DsNym3AhwDJKaistw2zB3shGSWMSA4Pfm6j94ofPU4tB/0/DCDF3F704AF3B7D3719CD934C3BA88561969C337.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.24.0/22
                IPv6:
                  2804:389c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266489

    Signature Algorithm: sha256WithRSAEncryption
         b2:10:cc:fe:55:f8:ba:64:9f:92:4b:40:55:8e:be:41:a6:69:
         81:d2:bb:06:f2:d9:61:1f:18:90:77:9d:4a:c7:8d:79:fa:e9:
         99:a8:d1:2f:c3:00:5c:e5:f9:d4:dc:a5:39:a4:91:8c:00:2c:
         f6:6e:0c:c8:28:c2:d1:84:33:ae:f0:49:f2:89:18:7b:0a:6b:
         bd:81:61:c0:d3:22:60:12:10:f5:fc:8e:70:e1:55:43:84:a0:
         7b:f2:54:38:23:28:de:93:0d:47:f1:db:a3:f4:75:8d:f6:f3:
         c0:b8:4d:46:61:f6:98:7c:e6:b8:f8:e0:b5:e3:04:80:0b:e7:
         9e:7c:78:50:e1:75:68:e3:4f:c0:3a:1d:8b:14:9d:50:83:5f:
         0e:76:c0:8b:dd:c1:00:77:58:2e:59:eb:a1:62:27:4b:05:63:
         eb:10:79:44:b5:c4:80:05:ae:64:b0:62:4e:c1:ce:7c:d4:fb:
         84:bb:c7:2f:7c:bc:1e:fb:e2:c2:88:84:a1:57:66:0d:aa:6d:
         eb:3a:aa:80:26:ec:88:11:d0:6d:22:04:e8:60:f2:7f:e7:61:
         ca:e7:35:0b:4f:d2:48:f5:d8:4e:96:76:85:98:7f:94:a5:b0:
         56:95:b8:17:f3:b1:a1:44:be:12:57:d8:cc:e7:77:84:80:f7:
         cf:03:49:ad
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUbHbESnE36volaVrtRSV7oKOaL2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMjQxMjAxMzZaFw0yNDAzMjIxMjA2MzZaMDMxMTAvBgNV
BAMTKERDREYzRjcwNEFGM0I3RDM3MTlDRDkzNEMzQkE4ODU2MTk2OUMzMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTWxFk2DjTIdDJmIdUQCVSAi71
rreN+NLBZZp9Sx7NrZ2RNLYUf98Y+Mvxz8I6zM8lpa2LFLBnx+W/609lzpHNMTFh
+lVBovS2/0PktRZD4XTdhRNWsDM8bh2cDTQuWToVvP/vsJ1wPOlZeUEBCoK1yCwt
+/hMtTRzQ/xSbPnieYgae2vSvQ5VeCEnMEPA5J0hOtNjOupntcsewQzJo6vlPM7t
PFnH2EKQOn+tY2Mo4c5uokDKOo6JEt6Ex/bOrorTB4Q49TRfuVfTn5h+2vqyGQbU
GX5SxxQgK5luY6hCHe2RxOqbj7+EtMi88+2QHRlVdZKc/WpXdrOOQb39ULlhAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTc3z9wSvO303Gc
2TTDuohWGWnDNzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Ec055bTNBaHdESkthaXN0dzJ6QjNzaEdTV01TQTRQZm02
ajk0b2ZQVTR0Qi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Ec055bTNBaHdESkthaXN0dzJ6QjNzaEdTV01TQTRQZm02
ajk0b2ZQVTR0Qi8wL0RDREYzRjcwNEFGM0I3RDM3MTlDRDkzNEMzQkE4ODU2MTk2
OUMzMzcubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqr0GDANBAIAAjAHAwUA
KAQ4nDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEPkwDQYJKoZIhvcNAQELBQAD
ggEBALIQzP5V+Lpkn5JLQFWOvkGmaYHSuwby2WEfGJB3nUrHjXn66Zmo0S/DAFzl
+dTcpTmkkYwALPZuDMgowtGEM67wSfKJGHsKa72BYcDTImASEPX8jnDhVUOEoHvy
VDgjKN6TDUfx26P0dY3288C4TUZh9ph85rj44LXjBIAL5558eFDhdWjjT8A6HYsU
nVCDXw52wIvdwQB3WC5Z66FiJ0sFY+sQeUS1xIAFrmSwYk7BznzU+4S7xy98vB77
4sKIhKFXZg2qbes6qoAm7IgR0G0iBOhg8n/nYcrnNQtP0kj12E6WdoWYf5SlsFaV
uBfzsaFEvhJX2Mznd4SA988DSa0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org