Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DF1BF4C8AF5714489FC67733E3835BAE3260825C.cer
File:                     DF1BF4C8AF5714489FC67733E3835BAE3260825C.cer (raw, json)
Hash identifier:          AZz1zTAuZwEb7RAyObxyalqRE8dTqrD61JXQrcB9ub0=
Subject key identifier:   DF:1B:F4:C8:AF:57:14:48:9F:C6:77:33:E3:83:5B:AE:32:60:82:5C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       20356250F2D8D69E7DFF42B7933D078E02710EDB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/DF1BF4C8AF5714489FC67733E3835BAE3260825C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 22:15:12 +0000
Certificate not after:    Thu 11 Jul 2024 22:20:12 +0000
Subordinate resources:    AS: 271304
                          IP: 200.53.68.0/22
                          IP: 2804:796c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:35:62:50:f2:d8:d6:9e:7d:ff:42:b7:93:3d:07:8e:02:71:0e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 22:15:12 2023 GMT
            Not After : Jul 11 22:20:12 2024 GMT
        Subject: CN=DF1BF4C8AF5714489FC67733E3835BAE3260825C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:7e:7d:c1:e1:50:d3:ec:47:8f:db:c2:5e:
                    2b:d9:22:33:70:1c:3e:af:c3:38:f8:dd:55:09:05:
                    65:d7:d2:4c:f0:96:12:e3:e6:ab:b1:68:67:24:e0:
                    28:69:55:3e:d8:2f:3a:59:83:36:cd:fc:45:b8:36:
                    a1:37:d5:c6:70:4a:73:f3:ec:63:98:78:cb:6c:35:
                    26:20:2f:5b:f4:7e:85:4a:92:f9:48:34:e2:66:d9:
                    d6:7b:d8:39:91:52:8a:d0:e3:77:20:99:6c:05:55:
                    ef:24:28:7e:27:11:3e:1b:fc:e5:06:95:25:ad:02:
                    48:c4:2d:5e:14:8d:82:b3:54:4e:cb:73:a7:0c:a6:
                    6d:63:c6:d7:9d:38:12:7a:32:8c:4c:95:7d:01:fb:
                    3e:cb:cd:a4:6b:0d:73:84:8f:7c:0a:54:f5:8c:4f:
                    a6:b1:06:65:cb:d8:71:63:d7:1a:19:a3:40:bd:f4:
                    9a:ca:3a:3f:0d:18:f0:6f:a2:5c:69:46:e8:c9:4b:
                    c7:61:38:c4:31:d8:f1:d2:9f:d0:92:8c:7a:48:db:
                    23:4c:af:03:dc:a0:58:81:10:6d:48:bb:17:55:24:
                    30:18:f3:0c:2f:f1:91:76:bf:aa:12:0b:26:db:4f:
                    31:76:9c:fb:a4:7f:4d:18:af:db:49:c9:cb:8b:1e:
                    78:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:1B:F4:C8:AF:57:14:48:9F:C6:77:33:E3:83:5B:AE:32:60:82:5C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/DF1BF4C8AF5714489FC67733E3835BAE3260825C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.68.0/22
                IPv6:
                  2804:796c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271304

    Signature Algorithm: sha256WithRSAEncryption
         41:1f:f6:3d:42:9a:f9:b2:d7:6c:e7:e4:44:02:ba:a7:d1:a2:
         7d:2e:65:b0:c8:1e:f3:39:55:fa:ef:55:4a:03:15:a0:25:8e:
         78:6c:de:1b:3f:40:10:e4:5c:c7:0e:c6:07:91:e7:5c:9d:44:
         10:84:2e:32:b3:4f:91:96:96:db:f9:f4:bf:cf:13:74:9c:98:
         89:d6:e0:39:b3:fc:aa:79:7b:a7:90:2c:92:c1:88:e2:e6:fa:
         0c:9f:a0:fd:65:b6:8c:c0:5e:4d:fd:06:ae:b5:8e:93:52:62:
         91:11:49:cb:45:52:cd:67:60:db:dc:72:e6:9c:f7:4b:8c:82:
         ec:e5:83:2a:00:16:be:ff:95:36:89:c9:c0:17:7a:de:85:8c:
         32:ef:d4:31:7b:9c:5e:69:25:d5:a2:ea:65:df:a6:03:37:fd:
         07:31:89:d4:f4:68:d5:b4:24:12:e6:25:ef:30:18:40:88:57:
         f7:89:e0:f2:05:ea:ff:9f:a5:40:fb:3f:54:0a:3e:e8:03:a1:
         34:cc:a1:9d:15:a7:79:28:24:6a:c4:7c:a5:9a:b2:ff:6a:43:
         e1:8b:76:e0:77:c5:b1:7f:2d:60:bd:64:02:ec:4b:11:37:d1:
         cf:57:91:67:6f:98:95:34:0d:bb:d8:7b:d0:e6:5e:71:01:0d:
         67:39:f4:ab
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUIDViUPLY1p59/0K3kz0HjgJxDtswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MTMyMjE1MTJaFw0yNDA3MTEyMjIwMTJaMDMxMTAvBgNV
BAMTKERGMUJGNEM4QUY1NzE0NDg5RkM2NzczM0UzODM1QkFFMzI2MDgyNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr9H59weFQ0+xHj9vCXivZIjNw
HD6vwzj43VUJBWXX0kzwlhLj5quxaGck4ChpVT7YLzpZgzbN/EW4NqE31cZwSnPz
7GOYeMtsNSYgL1v0foVKkvlINOJm2dZ72DmRUorQ43cgmWwFVe8kKH4nET4b/OUG
lSWtAkjELV4UjYKzVE7Lc6cMpm1jxtedOBJ6MoxMlX0B+z7LzaRrDXOEj3wKVPWM
T6axBmXL2HFj1xoZo0C99JrKOj8NGPBvolxpRujJS8dhOMQx2PHSn9CSjHpI2yNM
rwPcoFiBEG1IuxdVJDAY8wwv8ZF2v6oSCybbTzF2nPukf00Yr9tJycuLHnjPAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTfG/TIr1cUSJ/G
dzPjg1uuMmCCXDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GeXE1UGQ1U0hvd21Fd21xZE40aXZCSlRaQkx2MTR5YXpS
a1dScTZCbXpWZS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRnlxNVBkNVNIb3dtRXdtcWRONGl2QkpUWkJMdjE0eWF6
UmtXUnE2Qm16VmUvMC9ERjFCRjRDOEFGNTcxNDQ4OUZDNjc3MzNFMzgzNUJBRTMy
NjA4MjVDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALINUQwDQQCAAIwBwMF
ACgEeWwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCPIMA0GCSqGSIb3DQEBCwUA
A4IBAQBBH/Y9Qpr5stds5+REArqn0aJ9LmWwyB7zOVX671VKAxWgJY54bN4bP0AQ
5FzHDsYHkedcnUQQhC4ys0+Rlpbb+fS/zxN0nJiJ1uA5s/yqeXunkCySwYji5voM
n6D9ZbaMwF5N/QautY6TUmKREUnLRVLNZ2Db3HLmnPdLjILs5YMqABa+/5U2icnA
F3rehYwy79Qxe5xeaSXVoupl36YDN/0HMYnU9GjVtCQS5iXvMBhAiFf3ieDyBer/
n6VA+z9UCj7oA6E0zKGdFad5KCRqxHylmrL/akPhi3bgd8Wxfy1gvWQC7EsRN9HP
V5Fnb5iVNA272HvQ5l5xAQ1nOfSr
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org