Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D.cer
File:                     DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D.cer (raw, json)
Hash identifier:          yU9s4GLzgzoZEMVI/OfUdkCwLiIgJMKxlBfRKitDN7g=
Subject key identifier:   DF:5D:91:96:94:7A:22:D5:30:6A:EC:A8:BF:48:DC:C6:C7:B5:4C:7D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0318D0AA7BA7829CD3C8B0A4801A618CE40DA084
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Jul 2023 14:36:02 +0000
Certificate not after:    Thu 04 Jul 2024 14:41:02 +0000
Subordinate resources:    AS: 262819
                          IP: 143.202.68.0/22
                          IP: 168.196.108.0/22
                          IP: 177.8.208.0/21
                          IP: 186.250.208.0/21
                          IP: 2804:2a50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:18:d0:aa:7b:a7:82:9c:d3:c8:b0:a4:80:1a:61:8c:e4:0d:a0:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  6 14:36:02 2023 GMT
            Not After : Jul  4 14:41:02 2024 GMT
        Subject: CN=DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:06:c5:4e:37:3e:32:74:44:81:35:43:88:43:
                    32:b6:ec:0d:ee:b9:53:e2:f7:0a:4d:79:be:69:fd:
                    34:0a:f4:0b:92:12:a5:91:03:71:cb:8e:14:a7:11:
                    af:57:ad:76:8d:e9:1a:e1:1e:b0:60:6f:76:79:65:
                    80:74:c1:5f:1e:19:10:3d:3a:8e:eb:79:f8:a6:d2:
                    c4:3b:6e:50:49:66:11:4d:06:2f:94:22:cf:96:35:
                    38:38:49:04:9f:31:95:a3:0c:10:7c:8f:28:26:8f:
                    0f:27:aa:b8:b7:f7:43:a4:c3:e9:97:a0:3a:f0:19:
                    42:b8:5c:32:f7:71:8b:45:6c:67:1d:d9:f7:f3:67:
                    16:1a:00:1e:2b:b7:3d:a0:85:57:09:b0:8e:21:1c:
                    45:53:38:8b:11:b8:11:18:79:ca:f5:dc:44:c5:c1:
                    48:a8:8e:26:87:67:e2:32:2f:81:97:9e:ab:f1:85:
                    15:ad:40:71:0c:a0:83:d6:a1:df:9b:65:a1:ea:d3:
                    d1:53:6d:06:28:97:f3:9f:2c:dc:3c:b1:0b:70:88:
                    07:a2:d1:fb:19:f3:84:79:09:91:36:43:3e:65:9c:
                    82:9f:e7:bd:03:3a:8b:77:39:2a:32:bb:d9:04:ab:
                    e0:81:0d:15:ce:40:69:9e:b2:c9:b3:6f:d5:cf:04:
                    3d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:5D:91:96:94:7A:22:D5:30:6A:EC:A8:BF:48:DC:C6:C7:B5:4C:7D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.68.0/22
                  168.196.108.0/22
                  177.8.208.0/21
                  186.250.208.0/21
                IPv6:
                  2804:2a50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262819

    Signature Algorithm: sha256WithRSAEncryption
         a1:14:34:c2:6e:43:e7:50:95:7a:39:df:d3:75:df:98:86:ab:
         b4:5f:1f:18:66:07:56:6f:21:c0:1c:0b:a5:0b:a5:27:d5:99:
         f4:10:66:52:d0:a9:3b:75:c8:92:bf:75:aa:22:50:db:d7:16:
         a9:c6:ac:22:01:6d:99:f3:4f:38:45:cb:e7:54:b5:75:74:6b:
         75:05:d2:d8:61:d9:60:64:a3:cf:86:79:3f:e6:09:f1:71:7d:
         03:43:51:aa:cc:f4:a7:90:56:13:09:d6:26:8e:60:fb:c2:5d:
         d0:16:b3:cc:c5:ab:42:34:56:c1:54:10:7d:e7:64:5a:f1:2b:
         91:2d:49:85:5a:d5:12:4b:cf:1f:13:af:2e:a9:35:83:8b:24:
         4e:41:14:c9:2f:e6:3e:9b:98:fe:5e:9b:1d:c6:94:ae:c2:70:
         f3:fc:29:7b:74:27:e3:6e:b4:b5:d8:5a:41:aa:89:0d:01:b4:
         40:5a:05:22:38:a0:57:8e:15:27:34:bd:eb:5b:88:01:29:a6:
         32:d8:9c:5f:e5:1b:03:33:c7:c3:d9:a1:1a:bc:3d:90:97:5a:
         99:0f:73:2f:cc:38:23:f4:d5:e9:02:59:b0:f3:32:c2:14:d3:
         31:58:0a:80:d3:3b:bd:17:5c:10:7e:11:70:c3:62:b9:bd:66:
         4e:79:cf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org