Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DDCBFA6FFB31FFF600710D3B53DB4CF243EC658E.cer
File:                     DDCBFA6FFB31FFF600710D3B53DB4CF243EC658E.cer (raw, json)
Hash identifier:          cNVKkSVNtaNfwCChjB4k454I/u7IeO0iqYusYU7BcS8=
Subject key identifier:   DD:CB:FA:6F:FB:31:FF:F6:00:71:0D:3B:53:DB:4C:F2:43:EC:65:8E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6A20C0E8428E0CBDBCBF9E3100BEC75B45FCCC55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/0/DDCBFA6FFB31FFF600710D3B53DB4CF243EC658E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Jul 2023 15:54:42 +0000
Certificate not after:    Fri 12 Jul 2024 15:59:42 +0000
Subordinate resources:    AS: 264128
                          IP: 138.97.52.0/22
                          IP: 170.78.240.0/22
                          IP: 2804:22e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:20:c0:e8:42:8e:0c:bd:bc:bf:9e:31:00:be:c7:5b:45:fc:cc:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 14 15:54:42 2023 GMT
            Not After : Jul 12 15:59:42 2024 GMT
        Subject: CN=DDCBFA6FFB31FFF600710D3B53DB4CF243EC658E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:85:15:55:3c:de:fb:93:68:e4:f0:26:ba:07:
                    15:76:0c:7d:59:9b:12:37:15:03:a3:5d:67:9d:88:
                    06:8c:25:52:d5:1b:a7:df:4e:e7:54:8e:f2:a1:6e:
                    6c:84:41:cf:22:96:d5:71:5b:b8:a3:0e:e4:af:9a:
                    40:dc:24:55:c5:f4:dc:22:a8:9f:ab:b3:3c:0c:ad:
                    d2:b3:9a:9c:74:3b:a3:1a:76:71:9a:49:c2:51:83:
                    5f:2c:9c:02:76:4f:ec:89:74:eb:4e:03:14:3a:15:
                    83:2d:d7:a1:2e:06:3d:ea:ab:06:6c:88:c3:bc:00:
                    55:3d:2f:8e:32:d1:68:8a:36:f4:7d:4e:1c:17:fd:
                    87:4a:fa:30:6f:fc:d6:f6:77:b0:51:d3:bf:ec:f5:
                    02:ff:80:02:bb:90:03:0e:18:dc:9e:d6:a1:98:6f:
                    04:05:15:dc:22:35:ee:48:d1:0f:1f:e2:50:81:89:
                    88:46:67:7b:58:4c:91:fa:a2:aa:35:ec:d6:82:d6:
                    fe:f6:12:84:0c:64:53:fc:dc:94:98:21:c0:1f:eb:
                    ee:8e:15:41:6a:52:d0:50:43:3f:33:f9:c0:a8:f3:
                    c3:0f:25:c2:66:88:60:b7:9c:9f:e6:15:38:a3:9d:
                    86:07:c7:e0:ce:91:4b:1d:bd:81:d1:c4:31:14:06:
                    5f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DD:CB:FA:6F:FB:31:FF:F6:00:71:0D:3B:53:DB:4C:F2:43:EC:65:8E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/0/DDCBFA6FFB31FFF600710D3B53DB4CF243EC658E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.52.0/22
                  170.78.240.0/22
                IPv6:
                  2804:22e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264128

    Signature Algorithm: sha256WithRSAEncryption
         93:5a:63:43:66:61:67:a9:fd:75:39:47:7e:de:9d:55:af:5d:
         0a:1d:a8:95:ae:be:b6:28:c7:9b:01:ee:bb:ea:f4:fb:00:10:
         4d:12:a9:7f:5d:b7:15:4f:e3:17:b8:96:01:aa:df:12:38:d4:
         cf:4a:05:a7:10:bd:4c:6d:93:3f:9a:76:08:58:9f:5f:90:98:
         5a:e0:a8:c8:d7:6d:21:af:f1:ce:6f:6f:fd:9f:1c:43:98:7f:
         bc:88:3f:8c:9e:1d:20:4f:9c:ed:0a:f4:3e:26:21:7c:6b:7a:
         73:d4:8b:b6:b6:9d:79:d9:72:90:b0:59:05:dc:76:5b:fb:79:
         d0:51:de:2d:83:99:c0:4a:a0:4e:3d:e2:9c:41:fc:ab:4a:f7:
         31:ce:46:6d:5e:6c:fa:af:6e:66:43:62:d3:e2:7c:69:57:76:
         67:2a:26:35:b1:29:67:7d:c5:fd:8a:7e:88:f6:54:57:59:96:
         c3:f9:91:49:a8:b8:ff:32:3e:e1:6a:9d:56:16:db:22:d2:81:
         2d:ea:cd:1e:a0:22:fc:03:c0:d9:40:85:9f:51:7f:3a:e4:7a:
         22:00:68:af:f7:37:b3:b6:69:4c:56:2e:b1:3b:68:f9:da:d3:
         3e:67:03:a5:06:64:d2:e1:7e:3e:44:22:e0:60:28:80:c3:aa:
         8b:33:ce:4d
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUaiDA6EKODL28v54xAL7HW0X8zFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MTQxNTU0NDJaFw0yNDA3MTIxNTU5NDJaMDMxMTAvBgNV
BAMTKEREQ0JGQTZGRkIzMUZGRjYwMDcxMEQzQjUzREI0Q0YyNDNFQzY1OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDChRVVPN77k2jk8Ca6BxV2DH1Z
mxI3FQOjXWediAaMJVLVG6ffTudUjvKhbmyEQc8iltVxW7ijDuSvmkDcJFXF9Nwi
qJ+rszwMrdKzmpx0O6MadnGaScJRg18snAJ2T+yJdOtOAxQ6FYMt16EuBj3qqwZs
iMO8AFU9L44y0WiKNvR9ThwX/YdK+jBv/Nb2d7BR07/s9QL/gAK7kAMOGNye1qGY
bwQFFdwiNe5I0Q8f4lCBiYhGZ3tYTJH6oqo17NaC1v72EoQMZFP83JSYIcAf6+6O
FUFqUtBQQz8z+cCo88MPJcJmiGC3nJ/mFTijnYYHx+DOkUsdvYHRxDEUBl8tAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTdy/pv+zH/9gBx
DTtT20zyQ+xljjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80R29tUlJGY1RnUVZ4TGZTc2hhalFMbjF0S2JuVnE3eTI3
emNFeVJIZVhFSC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNEdvbVJSRmNUZ1FWeExmU3NoYWpRTG4xdEtiblZxN3ky
N3pjRXlSSGVYRUgvMC9ERENCRkE2RkZCMzFGRkY2MDA3MTBEM0I1M0RCNENGMjQz
RUM2NThFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKKYTQDBAKqTvAwDQQC
AAIwBwMFACgEIuAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAfAMA0GCSqGSIb3
DQEBCwUAA4IBAQCTWmNDZmFnqf11OUd+3p1Vr10KHaiVrr62KMebAe676vT7ABBN
Eql/XbcVT+MXuJYBqt8SONTPSgWnEL1MbZM/mnYIWJ9fkJha4KjI120hr/HOb2/9
nxxDmH+8iD+Mnh0gT5ztCvQ+JiF8a3pz1Iu2tp152XKQsFkF3HZb+3nQUd4tg5nA
SqBOPeKcQfyrSvcxzkZtXmz6r25mQ2LT4nxpV3ZnKiY1sSlnfcX9in6I9lRXWZbD
+ZFJqLj/Mj7hap1WFtsi0oEt6s0eoCL8A8DZQIWfUX865HoiAGiv9zeztmlMVi6x
O2j52tM+ZwOlBmTS4X4+RCLgYCiAw6qLM85N
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org