Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DEF10C5B308C87FC53A4B1A61C0F8350F8844650.cer
File:                     DEF10C5B308C87FC53A4B1A61C0F8350F8844650.cer (raw, json)
Hash identifier:          okpPheBjWAzMReS/8SNjCy526Rgj79+/m+nVvrGtOpc=
Subject key identifier:   DE:F1:0C:5B:30:8C:87:FC:53:A4:B1:A6:1C:0F:83:50:F8:84:46:50
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0AD554FC0B7B29018E85852414AEA0D1FBC54848
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/DEF10C5B308C87FC53A4B1A61C0F8350F8844650.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Mar 2023 13:57:36 +0000
Certificate not after:    Fri 08 Mar 2024 14:02:36 +0000
Subordinate resources:    AS: 270409
                          IP: 190.89.196.0/22
                          IP: 2804:6b94::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d5:54:fc:0b:7b:29:01:8e:85:85:24:14:ae:a0:d1:fb:c5:48:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 10 13:57:36 2023 GMT
            Not After : Mar  8 14:02:36 2024 GMT
        Subject: CN=DEF10C5B308C87FC53A4B1A61C0F8350F8844650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9e:c0:93:f4:53:58:b1:a3:c3:7b:f5:80:4e:
                    19:b8:55:cd:4e:63:25:b4:45:b4:21:37:5e:94:bb:
                    ef:4a:bd:82:4e:2c:c8:1b:70:e8:2b:be:0a:f7:d7:
                    89:80:1c:f1:3f:96:a8:90:b5:11:3d:9a:f8:00:73:
                    c5:1b:8d:17:18:25:0c:d0:b9:f2:4d:de:8e:a7:df:
                    73:59:64:08:8d:5e:c6:0c:9d:8e:8b:7c:e1:91:d2:
                    a2:27:aa:b4:26:0a:44:2d:0b:12:42:a6:a6:b6:ef:
                    2e:fc:b5:0d:d1:86:55:92:45:0c:24:c9:97:b1:8c:
                    49:7b:63:32:62:10:26:a9:d3:0f:64:26:57:87:0d:
                    7a:fa:fa:0b:8a:b7:d4:0f:3d:da:6f:7c:43:f5:94:
                    0d:fe:e2:e1:0e:69:eb:21:46:1a:fe:e4:67:c5:c2:
                    ad:e9:09:20:a4:26:f1:5f:7e:81:2a:9c:c9:89:2f:
                    f2:db:90:6a:90:a1:3c:62:76:b2:a4:11:d7:ad:78:
                    93:46:67:1b:ce:b2:9d:26:48:0c:e2:37:01:8e:45:
                    0b:98:7f:bf:bf:29:fe:8d:40:20:93:44:26:54:19:
                    80:c5:4a:fb:cc:ba:c1:90:fc:c6:8e:86:43:92:f5:
                    5e:2d:09:e9:e7:75:df:84:6e:dd:ed:89:57:5d:e8:
                    71:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:F1:0C:5B:30:8C:87:FC:53:A4:B1:A6:1C:0F:83:50:F8:84:46:50
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/DEF10C5B308C87FC53A4B1A61C0F8350F8844650.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.196.0/22
                IPv6:
                  2804:6b94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270409

    Signature Algorithm: sha256WithRSAEncryption
         3d:f7:ea:be:68:06:71:c4:84:0c:83:75:9d:c1:1f:59:63:a3:
         dd:9d:37:2d:37:cc:76:cf:52:b0:2b:54:07:ad:ca:e7:3e:e8:
         f0:b2:28:2c:66:e3:67:d8:b6:aa:8a:77:e4:8e:e7:56:59:4a:
         20:85:cd:9c:c4:2a:92:8e:b8:4a:98:e4:62:5c:bf:ba:06:03:
         6d:b7:a2:ba:9a:aa:6a:22:97:f8:1a:c7:de:26:da:b4:c5:25:
         c9:76:d5:30:1b:84:f7:87:6e:15:2c:38:79:53:ad:0e:83:c8:
         83:08:53:07:de:b1:10:6e:33:f5:a5:e9:ca:02:c0:47:4a:c0:
         d6:aa:7f:5f:fa:2e:ac:ca:a0:4f:ea:f2:67:8f:f8:3b:fc:a7:
         7e:08:8e:0b:44:c8:f6:b0:9e:9f:09:81:d3:b2:93:11:de:49:
         03:1f:fb:80:42:9d:7a:50:a6:9d:a0:55:88:65:d5:c8:0a:34:
         78:21:44:b0:ef:9c:69:23:80:ac:d1:0d:f1:af:a2:75:1a:a1:
         25:bf:5f:72:ec:dd:dc:8a:18:b2:65:cc:96:28:a2:d3:78:f4:
         88:80:ad:9a:7a:29:e8:9a:fd:98:b6:b3:98:64:82:63:53:0b:
         65:17:3b:44:bd:52:11:3a:aa:d1:3a:09:c4:f5:3c:3e:50:f6:
         5e:8f:bd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org