Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DCF693E982F7DF6B9FDD355A47A4EC82DF7ACC37.cer
File:                     DCF693E982F7DF6B9FDD355A47A4EC82DF7ACC37.cer (raw, json)
Hash identifier:          YC8R5Y4j/Wm1HITwt+tbOzeljLkPa4rmGYryGR3qaXc=
Subject key identifier:   DC:F6:93:E9:82:F7:DF:6B:9F:DD:35:5A:47:A4:EC:82:DF:7A:CC:37
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       69C62302391FF6616683E1EBD246E721BC047F74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/DCF693E982F7DF6B9FDD355A47A4EC82DF7ACC37.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 17 Aug 2023 00:35:12 +0000
Certificate not after:    Thu 15 Aug 2024 00:40:12 +0000
Subordinate resources:    AS: 271361
                          IP: 179.0.76.0/22
                          IP: 2804:7a58::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c6:23:02:39:1f:f6:61:66:83:e1:eb:d2:46:e7:21:bc:04:7f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 17 00:35:12 2023 GMT
            Not After : Aug 15 00:40:12 2024 GMT
        Subject: CN=DCF693E982F7DF6B9FDD355A47A4EC82DF7ACC37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8f:49:1f:e9:e7:dc:65:c2:21:40:a7:82:93:
                    da:65:06:9b:8a:e5:48:bd:a7:df:7f:ab:07:d2:eb:
                    3a:0e:a3:45:a4:a2:ab:f6:b6:bc:30:a1:3b:93:99:
                    0a:1b:76:d2:41:d5:00:89:db:3b:0a:ad:4e:4e:7a:
                    30:95:a2:dc:84:b0:1f:74:f4:a9:1b:a9:e8:6e:88:
                    5a:77:20:a5:d4:dc:81:0e:ee:51:94:37:f2:7c:a5:
                    1c:72:ce:fb:c1:6f:64:44:8b:13:b0:32:a7:f8:3d:
                    b7:03:a3:d0:16:5b:44:79:57:39:0d:bf:d0:e9:9a:
                    c1:29:ea:44:ab:85:40:f6:b8:e8:70:09:12:8a:47:
                    59:67:81:03:91:95:40:ac:fd:a5:36:1d:fe:9b:b9:
                    a6:4f:bc:f6:f4:87:ee:65:99:36:ee:61:5b:45:d6:
                    fc:de:eb:57:6d:21:0e:59:fc:53:0c:ed:ff:40:cc:
                    38:10:92:3b:3c:3c:2f:05:4a:02:62:9b:59:6e:9d:
                    08:cc:ad:0a:02:87:a3:e5:a8:f6:27:dd:ff:44:e3:
                    f6:84:cc:30:64:a8:ff:b1:a8:63:b1:63:07:ec:b6:
                    86:44:63:15:09:58:82:6c:45:5f:43:8b:15:c6:63:
                    7e:1b:7e:8e:bd:75:ad:35:ea:05:5f:99:b9:a0:aa:
                    a1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:F6:93:E9:82:F7:DF:6B:9F:DD:35:5A:47:A4:EC:82:DF:7A:CC:37
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/DCF693E982F7DF6B9FDD355A47A4EC82DF7ACC37.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.76.0/22
                IPv6:
                  2804:7a58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271361

    Signature Algorithm: sha256WithRSAEncryption
         55:0b:0c:6f:01:6f:2a:2f:06:6c:10:00:98:73:dc:0e:0a:f4:
         06:33:5e:9b:33:ea:3a:d5:82:a4:8a:ac:69:9c:cd:4f:fc:92:
         63:c0:dd:e7:e7:8a:9e:52:e3:37:bb:58:60:25:5d:ed:a1:4e:
         7e:ec:25:5e:3b:62:ad:fc:57:5e:c8:a7:d5:9e:43:a4:fd:6f:
         c3:1a:be:d6:d3:33:9e:96:d8:c2:34:7b:15:82:7a:15:9b:9b:
         44:7c:9f:4a:03:45:b5:ed:70:99:a6:6b:12:7a:f2:ea:a5:a2:
         48:ce:27:c8:e9:69:dd:34:c8:f9:1c:72:56:87:96:30:4f:09:
         39:96:36:cf:fe:c3:78:d3:ff:e8:41:91:1a:1a:28:da:e5:00:
         6a:2d:5d:d3:07:a2:f9:71:74:ef:5f:b5:cb:91:d4:35:66:49:
         81:30:94:ce:7c:ad:eb:5a:4f:e2:23:71:55:7a:4f:98:04:fa:
         75:8e:c9:3f:27:ab:b9:4a:26:4f:85:de:2c:37:14:5e:fd:f1:
         ae:86:17:74:e5:23:7f:ff:b5:1e:93:20:da:e4:b1:43:38:96:
         4e:9b:d7:58:b4:30:98:41:4e:d4:50:32:a7:b0:6b:f6:62:01:
         fd:b5:c9:4c:1d:0e:3f:8a:f4:e1:bc:a8:4a:47:e2:3a:5f:20:
         40:f9:f5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org