Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DFA638A6E41F7AF7978357E8B8434B2B95C908EF.cer
File:                     DFA638A6E41F7AF7978357E8B8434B2B95C908EF.cer (raw, json)
Hash identifier:          bDLpnllrRQic4JSiYnZ2NArv0soCT7B5gW4YYFQiPpE=
Subject key identifier:   DF:A6:38:A6:E4:1F:7A:F7:97:83:57:E8:B8:43:4B:2B:95:C9:08:EF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6E112972A6B5F24022E6CB770C0C22589B654C29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/DFA638A6E41F7AF7978357E8B8434B2B95C908EF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Feb 2024 15:11:19 +0000
Certificate not after:    Tue 25 Feb 2025 15:16:19 +0000
Subordinate resources:    AS: 61885
                          IP: 131.0.140.0/22
                          IP: 2804:1ac8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:11:29:72:a6:b5:f2:40:22:e6:cb:77:0c:0c:22:58:9b:65:4c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 27 15:11:19 2024 GMT
            Not After : Feb 25 15:16:19 2025 GMT
        Subject: CN=DFA638A6E41F7AF7978357E8B8434B2B95C908EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:68:00:af:c8:41:fb:77:ec:00:8e:70:09:9b:
                    30:b4:3c:91:4f:86:fe:c0:b6:02:56:8c:2b:d0:0d:
                    1a:1b:e5:5c:1d:d3:21:db:04:04:95:1b:2c:70:7e:
                    c2:3c:67:1a:12:04:a9:4a:b2:04:5b:be:e7:53:ec:
                    e3:6e:9f:c7:c5:ef:a7:50:82:a0:e9:0a:d1:6d:c3:
                    09:a1:25:fc:eb:c4:10:36:8b:7c:78:10:e4:be:85:
                    50:2b:9c:c4:b7:b3:74:cc:8f:74:01:f5:24:10:32:
                    39:d5:5b:28:f9:a0:39:ac:e5:82:48:1e:52:a8:bb:
                    80:b7:2b:cf:22:6b:19:8b:a5:3b:28:37:67:86:2c:
                    12:24:f1:cb:f8:c0:1e:d9:34:e2:dd:40:63:60:9b:
                    53:8b:1d:90:9e:80:04:f7:a3:cb:44:53:c6:5c:e0:
                    30:c9:db:9d:d4:c2:09:55:69:fb:ad:f4:17:a5:38:
                    57:7e:fa:b8:f0:df:54:20:98:97:12:8a:b8:66:e0:
                    e5:ef:c2:f5:71:a8:85:de:a2:0f:17:e9:02:90:57:
                    eb:d7:fa:66:de:91:64:c8:cd:18:6a:b9:f0:66:71:
                    91:6f:75:76:d2:2f:b8:9a:8e:a3:16:41:59:c3:aa:
                    1d:cf:19:8f:d5:dc:e9:3c:6f:28:8d:c1:0a:20:22:
                    81:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:A6:38:A6:E4:1F:7A:F7:97:83:57:E8:B8:43:4B:2B:95:C9:08:EF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/DFA638A6E41F7AF7978357E8B8434B2B95C908EF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.140.0/22
                IPv6:
                  2804:1ac8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61885

    Signature Algorithm: sha256WithRSAEncryption
         88:d4:38:26:fb:45:7b:31:2d:4b:21:54:d8:34:a4:10:17:36:
         70:39:89:95:f3:fe:0e:24:bb:cb:3c:b9:1e:fb:42:e5:c6:6d:
         db:7f:8e:4c:da:3c:1a:cc:4e:97:37:3c:60:50:e7:52:c2:9a:
         51:b1:90:43:b7:b2:d3:f4:d3:3b:a0:bb:68:b6:93:ac:c8:59:
         06:2a:0b:7c:e1:3d:dd:49:0a:9e:09:1c:11:41:27:c8:21:01:
         3b:ae:e9:21:0b:f3:1d:60:12:77:21:53:d3:fa:27:fd:79:fd:
         21:c5:ed:13:8d:56:28:7f:56:9f:bc:97:fa:b8:ec:38:88:d0:
         a8:a0:1a:d9:c9:81:5c:92:df:76:01:98:39:a2:ef:c4:33:ec:
         26:19:e6:d3:8f:40:9d:9b:c5:55:84:5c:3c:47:7b:45:08:12:
         8a:ad:e8:33:cd:69:12:8c:8e:4f:4f:c8:1e:25:52:31:be:59:
         27:0c:53:2e:a6:cf:3c:3b:33:da:42:59:0a:78:e4:a9:fd:e8:
         39:34:ea:01:dc:ff:4d:72:46:fc:af:e4:91:94:84:df:cf:ee:
         48:88:2a:27:1b:c9:85:bb:17:72:f7:ad:c8:c3:ce:a6:90:fe:
         c4:bf:27:bb:54:14:fc:11:53:b0:7f:a7:63:8d:4f:81:0f:46:
         8f:ae:66:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org