Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DCE4F1B056921195E48958A04C7D8F04210F5397.cer
File:                     DCE4F1B056921195E48958A04C7D8F04210F5397.cer (raw, json)
Hash identifier:          nvNAxuTYbE+78llRrKlmAu22r0Ry4myCAsBQK45PkXk=
Subject key identifier:   DC:E4:F1:B0:56:92:11:95:E4:89:58:A0:4C:7D:8F:04:21:0F:53:97
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1F38C48D76F6D312D3D293E95BCB4AEA34475C1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/DCE4F1B056921195E48958A04C7D8F04210F5397.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Nov 2023 09:08:54 +0000
Certificate not after:    Wed 20 Nov 2024 09:13:54 +0000
Subordinate resources:    AS: 266438
                          IP: 170.82.48.0/22
                          IP: 2804:37d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:38:c4:8d:76:f6:d3:12:d3:d2:93:e9:5b:cb:4a:ea:34:47:5c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 22 09:08:54 2023 GMT
            Not After : Nov 20 09:13:54 2024 GMT
        Subject: CN=DCE4F1B056921195E48958A04C7D8F04210F5397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:30:e2:36:9f:92:76:9c:33:72:09:e5:15:e2:
                    e8:e3:c5:72:d3:b8:ad:3c:c1:c9:25:de:a8:82:95:
                    65:41:bd:d1:11:fc:06:d4:20:c1:cd:dd:47:26:bf:
                    23:0a:8c:0b:ec:39:ee:ac:3a:d6:58:10:d8:ac:b2:
                    c7:5a:7f:48:42:15:ba:a5:a6:10:6f:40:e5:ca:f0:
                    44:39:ff:39:ee:c7:06:de:47:62:18:36:44:95:1e:
                    51:d4:da:98:27:1e:eb:90:fb:7b:38:44:ab:54:74:
                    db:7d:9a:43:f7:78:84:99:10:44:73:27:04:89:38:
                    27:75:fe:e7:76:f6:80:b3:42:e7:4c:2e:92:fd:b3:
                    0f:9b:9e:32:c5:0f:66:c3:6e:c5:78:c6:e4:48:db:
                    5b:0d:c2:ed:60:d2:92:d7:95:14:7d:11:38:01:3c:
                    77:b6:b0:5c:72:1d:36:f2:0c:ec:38:e1:5f:65:74:
                    0a:00:a3:96:f4:25:7f:44:2c:cb:2c:c6:b2:aa:e7:
                    c7:60:38:98:fd:2c:16:fe:39:03:51:31:08:65:19:
                    0a:bd:fc:13:42:ee:7d:4f:8d:fa:2d:2d:24:c8:b1:
                    3d:85:26:da:11:dc:48:33:98:e4:39:c8:84:4e:c2:
                    15:9a:7b:2c:7a:d1:66:4f:6f:bb:28:d5:76:83:e4:
                    a3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:E4:F1:B0:56:92:11:95:E4:89:58:A0:4C:7D:8F:04:21:0F:53:97
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/DCE4F1B056921195E48958A04C7D8F04210F5397.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.48.0/22
                IPv6:
                  2804:37d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266438

    Signature Algorithm: sha256WithRSAEncryption
         20:91:fc:79:43:4b:81:58:eb:02:22:bb:cd:73:a8:2d:e2:bb:
         a1:96:39:95:b5:cc:ac:9d:0b:e4:42:86:58:20:29:5c:30:2f:
         c3:01:80:9d:40:57:c3:95:03:45:19:df:8e:a2:32:a0:9c:14:
         26:b9:6e:a7:b5:d3:a6:29:7b:ba:15:da:b0:54:59:79:24:6b:
         50:5e:f7:5b:2d:5b:20:1a:87:11:82:a3:3a:34:6e:86:93:55:
         34:f3:13:da:8f:5f:24:a3:b7:73:f3:eb:ee:f6:03:37:6d:86:
         e9:08:8c:aa:85:63:b9:85:1b:21:2c:6f:47:68:9f:60:9b:2c:
         d5:51:5c:5d:14:22:f7:a0:9b:0a:a0:ef:db:41:34:c5:6c:52:
         52:05:4f:dd:2c:f3:63:53:ad:85:73:ee:7b:2f:4a:5b:a4:cc:
         e4:bb:7b:86:91:93:4d:1c:70:ce:3d:b8:16:85:a6:f1:5c:77:
         e6:62:8d:35:5d:f2:bb:bc:e6:b9:37:b5:73:dd:f9:c7:9e:58:
         64:4f:04:72:3d:b6:ca:4c:b6:aa:f8:eb:50:79:17:16:b1:c8:
         d1:4a:5b:ee:6a:a4:ff:08:38:e6:9d:28:3f:89:42:1e:e9:38:
         dd:26:3c:bf:14:a5:33:09:23:89:2e:4f:d1:fb:e8:f3:3c:2f:
         15:ac:9a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org