Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DF63CF85AA18CA5758A42F5F11F048173776F6B0.cer
File:                     DF63CF85AA18CA5758A42F5F11F048173776F6B0.cer (raw, json)
Hash identifier:          Y2SE5TnNOAS+Rw234t2k8vzLFYOMVthGupOl0oeuYHU=
Subject key identifier:   DF:63:CF:85:AA:18:CA:57:58:A4:2F:5F:11:F0:48:17:37:76:F6:B0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5136130DD2C27E9181F6D4EC5EBEB91CB68BB00F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/0/DF63CF85AA18CA5758A42F5F11F048173776F6B0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 12 Aug 2023 02:09:44 +0000
Certificate not after:    Sat 10 Aug 2024 02:14:44 +0000
Subordinate resources:    AS: 272530
                          IP: 2804:82a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:36:13:0d:d2:c2:7e:91:81:f6:d4:ec:5e:be:b9:1c:b6:8b:b0:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 12 02:09:44 2023 GMT
            Not After : Aug 10 02:14:44 2024 GMT
        Subject: CN=DF63CF85AA18CA5758A42F5F11F048173776F6B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:09:97:45:0a:0d:c8:74:c3:b6:51:ba:c1:
                    81:ed:99:18:e6:eb:ae:41:f9:6e:58:73:0a:28:33:
                    50:23:d4:95:7a:17:6b:28:f2:b0:ca:7a:24:a0:e7:
                    fe:3e:c1:a6:1c:05:f6:0a:3a:fc:68:34:1d:ea:e3:
                    9f:23:55:72:a3:b2:7f:21:ae:a8:38:2a:02:86:e9:
                    89:ce:44:70:fd:34:d3:6e:26:90:4f:6f:a0:36:61:
                    16:b0:5d:83:f3:9f:43:87:71:54:c8:7b:31:ee:ad:
                    e6:d1:ec:a4:f8:83:fd:98:22:72:d1:0e:c9:52:8b:
                    8d:a5:19:4f:3d:78:30:06:21:e6:a0:5a:cb:74:b2:
                    4f:93:4d:c2:67:36:e6:76:b9:a0:2b:f9:fa:dc:b7:
                    55:df:28:8e:58:cb:ed:12:a1:51:1d:f9:17:b7:72:
                    16:c9:7d:f3:65:39:05:af:ee:d1:fd:e2:54:34:a9:
                    1d:9c:5a:55:7e:b4:4f:c2:5b:a6:b5:7a:17:06:24:
                    91:13:32:41:94:bd:37:91:65:a8:98:b2:dc:4e:f6:
                    90:cb:25:f0:71:3c:68:eb:ad:96:ec:b7:a9:ba:ad:
                    e5:b3:e0:fe:8f:a1:a0:19:d1:22:a5:27:4c:01:1b:
                    63:ab:d0:b8:c9:aa:34:29:68:a9:c9:3e:ab:32:ec:
                    14:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:63:CF:85:AA:18:CA:57:58:A4:2F:5F:11:F0:48:17:37:76:F6:B0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/0/DF63CF85AA18CA5758A42F5F11F048173776F6B0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272530

    Signature Algorithm: sha256WithRSAEncryption
         94:db:a5:7b:79:c1:f9:1c:a3:eb:1b:7b:15:f6:f6:19:37:fb:
         6a:f7:b9:4f:16:e5:fa:cb:f9:a7:72:db:be:1b:94:4a:b7:fb:
         88:06:07:35:78:fb:3d:9a:d3:7d:dc:52:53:d6:88:0c:ef:5b:
         cd:e7:e1:75:d9:94:69:64:ab:33:55:87:01:6a:c3:f4:8d:99:
         03:e2:2d:02:aa:68:90:7a:41:2d:75:ad:61:f1:f4:ff:b0:74:
         f9:88:3f:60:a0:1b:ba:a3:fa:84:ee:4e:5f:60:cc:0b:ee:be:
         d9:97:a1:8f:8a:2e:60:cf:8e:d9:5e:4c:df:5d:51:a3:32:c4:
         94:21:bf:3e:38:7a:e8:68:69:44:dc:90:83:b2:de:9c:f6:39:
         ef:0a:98:f5:8c:32:84:f3:64:82:31:73:a2:ff:52:4c:6c:2f:
         57:46:0f:1c:71:d5:1e:47:75:e3:f1:16:a7:66:7c:d8:8f:03:
         f3:a0:4f:a0:a2:30:b7:9c:05:ae:f5:d0:86:ea:a3:8a:5c:aa:
         92:b5:40:53:61:f2:79:c0:cb:7a:95:91:4a:c6:4a:e5:99:76:
         31:3c:db:b0:16:f6:fc:8f:74:c0:b4:d3:0d:7d:b0:37:e6:70:
         aa:74:b7:2a:8e:f8:77:07:9f:f2:32:ec:e9:8c:fa:a8:07:b5:
         b2:06:46:cc
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgIUUTYTDdLCfpGB9tTsXr65HLaLsA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MTIwMjA5NDRaFw0yNDA4MTAwMjE0NDRaMDMxMTAvBgNV
BAMTKERGNjNDRjg1QUExOENBNTc1OEE0MkY1RjExRjA0ODE3Mzc3NkY2QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpNwmXRQoNyHTDtlG6wYHtmRjm
665B+W5YcwooM1Aj1JV6F2so8rDKeiSg5/4+waYcBfYKOvxoNB3q458jVXKjsn8h
rqg4KgKG6YnORHD9NNNuJpBPb6A2YRawXYPzn0OHcVTIezHurebR7KT4g/2YInLR
DslSi42lGU89eDAGIeagWst0sk+TTcJnNuZ2uaAr+frct1XfKI5Yy+0SoVEd+Re3
chbJffNlOQWv7tH94lQ0qR2cWlV+tE/CW6a1ehcGJJETMkGUvTeRZaiYstxO9pDL
JfBxPGjrrZbst6m6reWz4P6PoaAZ0SKlJ0wBG2Or0LjJqjQpaKnJPqsy7BQrAgMB
AAGjggMNMIIDCTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTfY8+FqhjKV1ik
L18R8EgXN3b2sDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DVm9lTUNNUUJkZ0xNUU56OWNrRW12eURWUmJCOTJzZ0Uy
ZnZ0TEd3WWpmZC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQ1ZvZU1DTVFCZGdMTVFOejlja0VtdnlEVlJiQjkyc2dF
MmZ2dExHd1lqZmQvMC9ERjYzQ0Y4NUFBMThDQTU3NThBNDJGNUYxMUYwNDgxNzM3
NzZGNkIwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBIKgMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwQokjANBgkqhkiG9w0BAQsFAAOCAQEAlNule3nB+Ryj
6xt7Ffb2GTf7ave5Txbl+sv5p3LbvhuUSrf7iAYHNXj7PZrTfdxSU9aIDO9bzefh
ddmUaWSrM1WHAWrD9I2ZA+ItAqpokHpBLXWtYfH0/7B0+Yg/YKAbuqP6hO5OX2DM
C+6+2Zehj4ouYM+O2V5M311RozLElCG/Pjh66GhpRNyQg7LenPY57wqY9YwyhPNk
gjFzov9STGwvV0YPHHHVHkd14/EWp2Z82I8D86BPoKIwt5wFrvXQhuqjilyqkrVA
U2HyecDLepWRSsZK5Zl2MTzbsBb2/I90wLTTDX2wN+ZwqnS3Ko74dwef8jLs6Yz6
qAe1sgZGzA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org