Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DF6E46A76D5C40E31D62DB9C29DCB0F24E150504.cer
File:                     DF6E46A76D5C40E31D62DB9C29DCB0F24E150504.cer (raw, json)
Hash identifier:          xWZt1pZUaLrLIuHXlovULrjufB5RJtHz57wGQitZT3Y=
Subject key identifier:   DF:6E:46:A7:6D:5C:40:E3:1D:62:DB:9C:29:DC:B0:F2:4E:15:05:04
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       048405A4E602E66BA0D5C94107BB477D4D65515C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/DF6E46A76D5C40E31D62DB9C29DCB0F24E150504.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Jul 2023 12:29:24 +0000
Certificate not after:    Mon 08 Jul 2024 12:34:24 +0000
Subordinate resources:    AS: 270483
                          IP: 200.73.216.0/22
                          IP: 2804:6ca8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:84:05:a4:e6:02:e6:6b:a0:d5:c9:41:07:bb:47:7d:4d:65:51:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 10 12:29:24 2023 GMT
            Not After : Jul  8 12:34:24 2024 GMT
        Subject: CN=DF6E46A76D5C40E31D62DB9C29DCB0F24E150504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a8:d0:fe:a6:f6:06:06:6a:9a:ea:e6:d4:82:
                    68:9a:ae:f8:ba:a6:be:8a:cf:27:06:6f:2e:f4:39:
                    a3:c6:d8:88:96:16:5c:a2:78:f4:aa:4e:13:b4:da:
                    59:f5:72:d9:4a:81:44:2c:c6:dd:6f:d5:d8:87:45:
                    06:44:26:8b:19:8d:4e:21:0e:cb:e2:3e:27:a5:4c:
                    9e:1d:7d:7e:53:40:bc:cf:fe:9e:41:b9:9d:d4:31:
                    43:30:00:48:f3:14:e0:44:38:73:e0:55:29:2e:2b:
                    3a:0f:f5:1e:83:3f:bb:c0:c7:5b:52:92:27:bf:e9:
                    fb:71:1e:e4:7b:eb:cd:7c:81:8e:79:b6:2f:da:57:
                    cd:e7:b0:7e:b8:13:1f:9a:da:6a:25:3b:6e:13:0f:
                    ec:79:c1:4d:12:48:d0:f8:97:28:e8:53:db:5d:ca:
                    83:65:fd:67:49:16:2c:15:74:b7:f8:9e:c0:4a:5f:
                    33:90:49:2a:02:1b:17:3c:08:7a:f5:2f:f3:8e:fe:
                    74:9d:28:70:07:bc:64:74:72:00:fa:6b:16:86:63:
                    05:07:49:b7:00:53:c7:01:92:cd:37:01:38:db:df:
                    60:ab:8b:e6:db:06:36:de:c8:65:c1:19:a8:cb:e7:
                    df:75:5d:98:88:48:66:93:80:a3:75:4e:1b:ec:14:
                    9b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:6E:46:A7:6D:5C:40:E3:1D:62:DB:9C:29:DC:B0:F2:4E:15:05:04
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/DF6E46A76D5C40E31D62DB9C29DCB0F24E150504.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.216.0/22
                IPv6:
                  2804:6ca8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270483

    Signature Algorithm: sha256WithRSAEncryption
         62:b1:82:2d:8b:de:a6:d2:da:69:a1:16:25:21:db:d0:8f:85:
         b2:a4:d8:14:dc:9e:5f:7e:eb:85:71:72:fc:76:6b:b8:fc:88:
         8e:2c:5a:f6:45:4d:d0:fc:1b:e7:aa:d2:41:7f:6e:4d:5b:4b:
         93:44:07:7f:48:9a:5e:24:8d:72:7e:7e:29:c9:65:84:1d:fa:
         50:27:44:5e:3e:91:43:1a:11:b3:71:21:64:0e:a3:fd:a6:19:
         1a:20:57:00:87:1c:ee:96:47:01:fd:cc:5d:07:d9:48:9b:52:
         81:87:6f:c9:48:fa:b5:87:a9:a8:a5:b4:00:db:a8:d4:41:5c:
         6e:ef:97:f6:3e:4a:e7:73:97:55:00:2e:4f:7d:5a:68:93:59:
         c8:2e:25:f6:68:83:ca:9a:2b:09:e6:c5:f9:16:12:61:8a:80:
         9a:86:72:0d:70:58:ba:f2:1b:63:80:98:c0:1d:61:d3:09:88:
         cc:b0:01:ec:aa:b4:2b:54:b6:89:33:36:1f:3e:32:f9:68:ba:
         38:4e:99:c3:53:33:9b:5c:f0:f3:36:46:ce:1d:3a:86:1d:75:
         3d:ad:b1:10:76:eb:fb:43:2e:44:88:c3:91:8c:0b:27:82:cf:
         68:34:87:8d:a2:c1:54:06:58:26:36:8d:38:c1:86:84:da:3b:
         70:b0:3f:d8
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUBIQFpOYC5mug1clBB7tHfU1lUVwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MTAxMjI5MjRaFw0yNDA3MDgxMjM0MjRaMDMxMTAvBgNV
BAMTKERGNkU0NkE3NkQ1QzQwRTMxRDYyREI5QzI5RENCMEYyNEUxNTA1MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfqND+pvYGBmqa6ubUgmiarvi6
pr6KzycGby70OaPG2IiWFlyiePSqThO02ln1ctlKgUQsxt1v1diHRQZEJosZjU4h
DsviPielTJ4dfX5TQLzP/p5BuZ3UMUMwAEjzFOBEOHPgVSkuKzoP9R6DP7vAx1tS
kie/6ftxHuR76818gY55ti/aV83nsH64Ex+a2molO24TD+x5wU0SSND4lyjoU9td
yoNl/WdJFiwVdLf4nsBKXzOQSSoCGxc8CHr1L/OO/nSdKHAHvGR0cgD6axaGYwUH
SbcAU8cBks03ATjb32Cri+bbBjbeyGXBGajL5991XZiISGaTgKN1ThvsFJt9AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTfbkanbVxA4x1i
25wp3LDyThUFBDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CV29QVTFIaFh1RW5QNVo2RDJLWVUxbnpQb0tOZHN5VHZk
ak1jaEE1VnQ5OC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQldvUFUxSGhYdUVuUDVaNkQyS1lVMW56UG9LTmRzeVR2
ZGpNY2hBNVZ0OTgvMC9ERjZFNDZBNzZENUM0MEUzMUQ2MkRCOUMyOURDQjBGMjRF
MTUwNTA0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALISdgwDQQCAAIwBwMF
ACgEbKgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCCTMA0GCSqGSIb3DQEBCwUA
A4IBAQBisYIti96m0tppoRYlIdvQj4WypNgU3J5ffuuFcXL8dmu4/IiOLFr2RU3Q
/BvnqtJBf25NW0uTRAd/SJpeJI1yfn4pyWWEHfpQJ0RePpFDGhGzcSFkDqP9phka
IFcAhxzulkcB/cxdB9lIm1KBh2/JSPq1h6mopbQA26jUQVxu75f2Pkrnc5dVAC5P
fVpok1nILiX2aIPKmisJ5sX5FhJhioCahnINcFi68htjgJjAHWHTCYjMsAHsqrQr
VLaJMzYfPjL5aLo4TpnDUzObXPDzNkbOHTqGHXU9rbEQduv7Qy5EiMORjAsngs9o
NIeNosFUBlgmNo04wYaE2jtwsD/Y
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org