Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DF563158661BF15D74E352702AFF21D97D2FBCCD.cer
File:                     DF563158661BF15D74E352702AFF21D97D2FBCCD.cer (raw, json)
Hash identifier:          XkL0papP8SQ0KOlgR86aWDih6imWihvAzEG2o94Mu/I=
Subject key identifier:   DF:56:31:58:66:1B:F1:5D:74:E3:52:70:2A:FF:21:D9:7D:2F:BC:CD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       59CCB02AB32DF2BBD87E330F729FE5EF11B80E24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/DF563158661BF15D74E352702AFF21D97D2FBCCD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Jan 2024 12:38:22 +0000
Certificate not after:    Thu 16 Jan 2025 12:43:22 +0000
Subordinate resources:    AS: 271148
                          IP: 179.42.100.0/22
                          IP: 2804:7700::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:cc:b0:2a:b3:2d:f2:bb:d8:7e:33:0f:72:9f:e5:ef:11:b8:0e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 12:38:22 2024 GMT
            Not After : Jan 16 12:43:22 2025 GMT
        Subject: CN=DF563158661BF15D74E352702AFF21D97D2FBCCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3c:40:53:cc:d5:93:d4:28:80:6d:5b:8f:31:
                    99:fa:20:0e:ed:6f:99:e3:29:ba:cf:ed:9a:70:16:
                    dc:bd:39:16:c6:2b:4d:ee:12:75:fb:e2:70:0b:4d:
                    95:9c:7a:e8:1b:b5:32:4a:14:fb:7f:12:f2:90:ec:
                    6e:95:03:0a:85:e8:00:8a:8e:aa:97:33:24:3d:f7:
                    f4:72:3a:af:2b:d8:36:58:02:d2:ca:de:2c:f3:0a:
                    be:34:a5:f8:63:36:37:9a:e4:62:63:7e:01:d2:cb:
                    61:9f:48:2c:94:dc:28:07:11:40:27:77:cd:91:29:
                    98:2b:de:4e:6e:29:80:1c:0c:0c:02:24:00:13:2b:
                    3b:58:e3:39:a8:55:85:c8:30:94:b5:8c:78:a8:31:
                    68:5b:62:f7:cf:57:dc:99:ce:1c:e2:c5:35:40:1b:
                    11:9d:9c:a7:3b:e2:20:f3:d1:35:e7:a6:f2:19:b9:
                    d2:47:c3:56:69:03:7c:dc:29:b0:c6:be:87:f1:b4:
                    78:b0:f9:4f:74:47:6e:3d:9f:6e:32:e8:16:ea:41:
                    e8:87:5d:f5:f1:d3:82:49:22:04:da:62:c6:8b:93:
                    04:3c:31:17:13:ef:6b:df:81:83:9d:04:4e:f9:5f:
                    a6:ed:28:53:c8:f2:58:44:eb:34:0f:a3:4c:36:43:
                    f5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:56:31:58:66:1B:F1:5D:74:E3:52:70:2A:FF:21:D9:7D:2F:BC:CD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/DF563158661BF15D74E352702AFF21D97D2FBCCD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.100.0/22
                IPv6:
                  2804:7700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271148

    Signature Algorithm: sha256WithRSAEncryption
         14:7e:90:c9:de:b7:df:92:e1:64:5b:a2:d7:49:2d:98:21:e3:
         ab:b0:ab:31:7f:fa:6a:af:81:71:b2:27:3b:08:0f:46:64:7c:
         6f:b5:c4:44:2b:48:52:60:ed:fd:a0:e2:d8:25:30:72:32:b8:
         b7:e6:7a:bf:c4:0d:19:41:4b:ea:5b:ea:cd:10:67:be:26:de:
         66:39:cd:1f:32:47:0d:db:3e:1b:05:02:1a:47:31:0a:53:18:
         df:5f:05:36:dc:aa:c4:97:13:b9:23:31:5c:47:9e:7b:9e:40:
         ac:1e:db:6d:fd:e4:22:9a:18:27:d9:61:38:37:bd:f1:12:fb:
         6b:8d:cc:d8:31:7d:f0:72:3d:c0:f8:26:ef:ad:89:ff:52:e8:
         9a:7c:99:e4:71:33:2e:ba:da:f8:eb:fc:c7:bb:b3:1a:57:6d:
         25:fc:6c:d1:d8:8c:99:76:8b:32:ce:70:dd:73:48:1a:20:b3:
         77:33:d7:7d:af:c1:52:b5:7a:64:92:6b:b6:60:eb:85:b3:53:
         9b:09:b0:e9:df:5b:a2:b3:15:08:cd:7c:11:7f:d3:64:51:90:
         ed:a2:2e:47:27:dc:f9:b3:72:04:8b:63:0d:4a:28:cf:b8:e8:
         dc:20:4b:5f:87:77:39:74:d9:7d:64:1c:8e:d0:18:50:97:ca:
         ce:64:c3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org