Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DF1ED0DE850C2D6F5BE432DCD82A3D63A3A81FD8.cer
File:                     DF1ED0DE850C2D6F5BE432DCD82A3D63A3A81FD8.cer (raw, json)
Hash identifier:          J/HbFIVfuyPx7MUZYmmxKI6R9rgIF0pphAW9Kn2kOYw=
Subject key identifier:   DF:1E:D0:DE:85:0C:2D:6F:5B:E4:32:DC:D8:2A:3D:63:A3:A8:1F:D8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C9590262B482AC1474784FD05361C6293CB55BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J4ph5zLYXG1vbPA5zm3tQMLxacLSputvik9Uo7JhZEWy/0/DF1ED0DE850C2D6F5BE432DCD82A3D63A3A81FD8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J4ph5zLYXG1vbPA5zm3tQMLxacLSputvik9Uo7JhZEWy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 31 Aug 2023 14:11:45 +0000
Certificate not after:    Thu 29 Aug 2024 14:16:45 +0000
Subordinate resources:    AS: 270808
                          IP: 200.233.36.0/22
                          IP: 2804:71bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:95:90:26:2b:48:2a:c1:47:47:84:fd:05:36:1c:62:93:cb:55:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 31 14:11:45 2023 GMT
            Not After : Aug 29 14:16:45 2024 GMT
        Subject: CN=DF1ED0DE850C2D6F5BE432DCD82A3D63A3A81FD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:b7:48:ee:e3:d5:c7:e3:64:fe:ce:2d:b0:
                    f6:d8:94:44:c3:3f:26:60:ae:00:42:bc:02:2d:10:
                    9c:90:4e:fa:7d:70:ae:91:ae:f7:fe:09:1a:24:46:
                    ee:8e:16:cf:56:a9:16:ba:21:8f:2b:6c:d8:04:4c:
                    5f:07:7c:84:e9:29:b4:ea:b8:a4:e8:af:52:73:48:
                    34:69:07:3c:f5:aa:a5:1b:62:d7:cb:c7:91:da:8b:
                    2b:22:d9:63:ce:cb:12:1c:15:b1:75:92:fc:3e:27:
                    7a:90:a1:4a:e7:98:7c:bd:db:db:43:b8:7f:91:15:
                    bb:26:a1:51:02:41:40:d7:3e:f2:68:cb:d8:cd:51:
                    78:de:4f:f4:62:fa:01:6b:2f:06:78:ec:95:d8:53:
                    25:95:2f:66:bb:34:ac:67:90:a0:b3:0b:c3:1c:74:
                    4e:ee:64:43:50:77:27:d5:cf:f1:c2:5e:74:7f:27:
                    1f:ca:91:09:57:2a:f8:2c:8b:ee:be:3d:86:d0:f5:
                    2a:4a:0e:6d:11:7f:97:0e:a3:ae:c9:b9:0f:38:b0:
                    6f:e8:05:e7:95:86:79:d3:6d:6e:9e:99:4e:88:04:
                    0a:ad:bb:09:d4:b8:a2:2d:16:60:27:86:79:db:c0:
                    43:9b:f9:69:ba:55:a2:1e:03:38:27:af:b2:a7:e4:
                    d5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:1E:D0:DE:85:0C:2D:6F:5B:E4:32:DC:D8:2A:3D:63:A3:A8:1F:D8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J4ph5zLYXG1vbPA5zm3tQMLxacLSputvik9Uo7JhZEWy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J4ph5zLYXG1vbPA5zm3tQMLxacLSputvik9Uo7JhZEWy/0/DF1ED0DE850C2D6F5BE432DCD82A3D63A3A81FD8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.36.0/22
                IPv6:
                  2804:71bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270808

    Signature Algorithm: sha256WithRSAEncryption
         2d:b3:4b:76:cd:4f:f9:b0:e8:ab:ef:3c:f1:c8:77:c3:21:92:
         c2:d2:00:fa:c1:2a:20:e5:ca:c6:ee:51:7a:b3:00:7f:92:2f:
         61:d6:98:67:b6:d0:79:7d:d1:8c:fa:b3:f3:74:7b:a5:85:69:
         01:ea:98:90:7f:2e:1a:60:1e:64:a5:e6:51:d4:8d:aa:3f:10:
         da:47:6f:43:f8:e0:9e:cc:07:b3:cf:49:72:26:b4:25:11:cb:
         e3:a7:f4:df:94:8b:fd:b7:10:bb:03:20:7c:4c:9f:22:dc:0d:
         99:b6:83:af:52:99:91:95:cf:85:db:1b:71:ac:e5:14:7c:5e:
         7e:aa:25:2a:c5:1e:51:7d:99:b3:b9:3e:6c:bf:08:9c:95:30:
         63:e0:3c:dc:19:9a:1a:ad:ac:d6:aa:69:4a:17:c4:41:83:3d:
         eb:3f:50:ac:25:4d:e2:49:b4:7b:c8:8e:f5:af:66:ac:da:23:
         8e:aa:a9:6f:81:04:da:1b:7d:c5:1b:f2:9a:1e:e6:ab:fd:07:
         df:5e:13:7d:46:cd:50:c8:b9:41:dc:fe:02:69:ea:f3:3d:13:
         ad:47:58:fc:cf:95:21:b6:ec:b4:21:8c:f7:fa:7d:c9:34:de:
         c4:5b:26:c9:12:c5:f3:e0:52:ed:89:52:9d:ea:a3:2f:91:62:
         f6:bc:47:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org