Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241.cer
File:                     DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241.cer (raw, json)
Hash identifier:          HkmT6ufr5wI4WUoEL4/AgkH1kOgGvelzE6HLkyfyCYQ=
Subject key identifier:   DE:3B:24:29:AF:80:02:A6:DA:4D:D0:55:3A:09:E2:C9:A4:8E:F2:41
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       689542E7264A8D910C9A33518F1B787746878E53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/0/DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 09:20:20 +0000
Certificate not after:    Tue 21 May 2024 09:25:20 +0000
Subordinate resources:    AS: 263601
                          IP: 177.10.172.0/22
                          IP: 2804:fc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:95:42:e7:26:4a:8d:91:0c:9a:33:51:8f:1b:78:77:46:87:8e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 09:20:20 2023 GMT
            Not After : May 21 09:25:20 2024 GMT
        Subject: CN=DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:33:65:1e:3c:37:49:37:45:54:7d:a7:35:a4:
                    27:53:e9:97:1a:d2:39:55:d9:1d:2d:27:2f:30:dc:
                    95:00:42:a5:9a:d4:38:51:21:35:0b:fd:4a:8e:ae:
                    77:1b:47:55:01:20:b8:d1:69:b5:54:81:e2:bb:34:
                    d8:c1:4c:a7:ec:b5:83:a5:3b:4b:91:44:12:91:d9:
                    8a:3e:fa:e5:1a:21:d0:1c:5a:b8:f2:ac:a6:31:18:
                    38:03:95:68:d3:90:fe:72:19:c9:41:bf:a8:4a:bc:
                    9d:08:0f:79:07:d9:93:d5:37:c8:75:ac:1f:ec:0e:
                    d8:81:6d:81:fd:d8:89:f9:a9:c4:f0:4e:45:ab:dd:
                    d0:87:8f:32:23:6c:5e:54:9e:90:54:75:41:4e:7a:
                    b7:54:10:00:cc:85:3c:3e:ae:a6:62:6f:53:ad:f4:
                    f5:ec:56:49:ed:60:50:77:87:64:f7:49:13:0e:15:
                    b7:f4:52:90:e7:55:3d:6a:c4:6d:db:05:bc:e5:cd:
                    04:3d:b5:77:c1:5b:43:0e:44:5c:b5:38:83:16:52:
                    7b:a9:c4:df:bf:84:76:d3:d9:7b:a2:83:8a:ac:16:
                    1c:a9:69:3a:95:58:df:c3:fe:7d:19:49:34:da:fa:
                    61:a7:15:67:45:91:ab:2f:d7:72:d0:4a:19:94:cf:
                    d1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:3B:24:29:AF:80:02:A6:DA:4D:D0:55:3A:09:E2:C9:A4:8E:F2:41
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/0/DE3B2429AF8002A6DA4DD0553A09E2C9A48EF241.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.172.0/22
                IPv6:
                  2804:fc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263601

    Signature Algorithm: sha256WithRSAEncryption
         47:3d:a9:2d:f0:df:e1:ad:96:92:8e:d6:1a:74:ed:a7:25:60:
         fd:29:96:70:80:e4:0f:08:dc:09:17:60:e8:20:6c:c2:46:f1:
         13:ce:29:12:44:01:cd:b8:0e:94:55:ff:cf:21:23:c9:78:63:
         38:bd:d2:0d:27:c3:36:9e:5c:7a:42:0d:c3:64:d2:da:a6:75:
         eb:e6:97:5e:37:24:be:d5:96:52:3a:4a:67:84:5a:ca:94:da:
         f8:80:00:28:ed:45:1f:22:66:3c:9a:f9:2d:67:9a:d8:da:ec:
         f7:05:7a:45:6d:0e:11:c0:00:5e:b2:c6:05:cd:94:10:2c:52:
         8b:c1:23:55:23:ff:fc:6d:55:fd:15:84:ab:1b:34:44:36:c3:
         67:37:2b:51:cd:00:65:70:a3:ba:24:1a:71:c6:fe:4b:57:37:
         9d:2b:fe:48:45:c8:87:91:b1:6e:ad:95:d1:0c:84:e2:17:c5:
         66:d5:93:44:94:95:64:7b:87:cf:b4:b8:e5:cb:34:98:82:e2:
         13:ad:05:b5:98:e3:3f:ea:06:b6:c7:55:11:7a:4e:84:57:e8:
         6d:9c:1e:d2:d1:9d:57:dd:f6:42:3d:f1:2c:43:64:e2:97:58:
         3d:08:33:69:e5:49:26:d1:aa:38:d1:02:97:88:e0:bb:45:d8:
         e7:f8:55:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org