Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DF5FC0F181C7413AB1A37D0E6ACAB9F2D56DEB23.cer
File:                     DF5FC0F181C7413AB1A37D0E6ACAB9F2D56DEB23.cer (raw, json)
Hash identifier:          WYqbGZpSgfxZieAGiVEEG2QOm1tQv/Q2WhjPxIaTlyg=
Subject key identifier:   DF:5F:C0:F1:81:C7:41:3A:B1:A3:7D:0E:6A:CA:B9:F2:D5:6D:EB:23
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0AA48DA53627F121845DDA0E19DB0BCFA268978C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/DF5FC0F181C7413AB1A37D0E6ACAB9F2D56DEB23.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Jan 2024 16:06:56 +0000
Certificate not after:    Tue 21 Jan 2025 16:11:56 +0000
Subordinate resources:    AS: 270315
                          IP: 189.126.0.0/22
                          IP: 2804:6a24::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a4:8d:a5:36:27:f1:21:84:5d:da:0e:19:db:0b:cf:a2:68:97:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 23 16:06:56 2024 GMT
            Not After : Jan 21 16:11:56 2025 GMT
        Subject: CN=DF5FC0F181C7413AB1A37D0E6ACAB9F2D56DEB23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:02:d6:ba:a3:ce:7b:b6:76:22:a5:63:ac:a9:
                    2c:f5:e3:03:c7:16:77:5a:ac:8a:f9:29:96:a5:39:
                    08:6f:1a:f2:5d:1b:87:54:38:22:b7:04:f0:02:d7:
                    e5:4c:31:72:29:35:6b:fb:63:6d:fd:f5:30:60:77:
                    91:03:71:d2:ae:db:53:b3:6f:37:05:b3:16:ad:4d:
                    27:13:fb:28:e9:32:13:1b:47:fb:e7:18:d1:3d:33:
                    3a:e5:c3:73:b6:70:8b:c3:56:64:88:fb:bc:ca:f5:
                    0d:8a:e0:b3:1c:38:17:02:47:5b:a9:21:01:47:8f:
                    b3:40:c7:bf:75:22:5a:03:bd:2a:f9:32:e1:da:24:
                    3a:87:57:6d:9e:12:ee:0c:c2:e4:ba:d2:2c:79:bd:
                    1f:54:dd:9a:0f:71:c2:74:f3:ef:c2:b5:17:23:a9:
                    d5:fa:7a:b5:1e:5d:d6:91:4e:3c:cc:25:86:62:5a:
                    ba:b5:e9:fc:dc:e8:c3:dc:42:9d:bd:96:95:37:9e:
                    b9:82:d8:50:ec:80:3c:ba:61:8f:d1:cb:c9:41:46:
                    31:a2:72:19:66:06:7c:30:25:14:29:31:f6:7a:ca:
                    db:5a:5e:d4:60:3b:49:82:8e:48:72:d7:81:29:13:
                    2c:60:7f:4c:d6:ac:02:b5:eb:46:ea:d7:49:ff:d1:
                    b1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:5F:C0:F1:81:C7:41:3A:B1:A3:7D:0E:6A:CA:B9:F2:D5:6D:EB:23
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/DF5FC0F181C7413AB1A37D0E6ACAB9F2D56DEB23.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.0.0/22
                IPv6:
                  2804:6a24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270315

    Signature Algorithm: sha256WithRSAEncryption
         05:c2:12:c3:e0:df:44:d2:89:08:22:af:34:69:b9:64:22:73:
         9e:64:c1:68:16:15:12:65:d4:d1:06:68:60:ec:e7:8e:a1:9b:
         7a:6f:fd:d4:a9:fc:5b:df:04:29:d8:19:a5:1c:3c:b6:56:9b:
         80:87:3c:b7:1a:df:f4:0d:10:72:d0:dd:75:92:f3:da:40:69:
         43:25:c4:17:3c:b9:14:b9:76:4c:69:aa:29:9c:fc:cd:1f:65:
         9d:ea:a5:d1:da:c8:57:7b:61:3b:7e:28:51:72:71:48:36:40:
         73:c9:6d:fa:80:c9:4d:85:75:3b:a7:2c:aa:8b:69:5e:93:6a:
         ba:c5:67:00:d3:38:51:cf:c2:e0:49:23:3c:67:2c:5a:fc:dc:
         ba:7b:2d:42:c0:ba:32:a7:57:84:ec:2f:dd:65:7c:31:d8:d8:
         81:2c:aa:e2:56:ec:62:8d:cc:d6:f4:80:70:86:0d:12:29:6a:
         c8:bc:71:a1:ec:7a:c5:9e:a1:11:52:5a:b1:b2:79:c9:47:1f:
         16:35:5e:71:ef:4a:f9:66:93:a3:42:08:2d:e6:89:35:a0:37:
         e9:5c:76:0b:d2:d7:0c:5a:cf:0f:a5:7a:33:e3:3e:dd:21:34:
         1b:25:45:c5:5e:85:c4:ae:16:ea:01:11:b9:8e:12:00:fc:77:
         00:29:09:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org