Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DFB0772344704D34172C6023EB7B9BF81B589B8B.cer
File:                     DFB0772344704D34172C6023EB7B9BF81B589B8B.cer (raw, json)
Hash identifier:          q9Bfe6mdJ0ULednZidSJ9fXJgFZJsciFvRYitwaJ+q8=
Subject key identifier:   DF:B0:77:23:44:70:4D:34:17:2C:60:23:EB:7B:9B:F8:1B:58:9B:8B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       348635DEDFC6EA26E134FD80A72C9048ABF3CACF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/0/DFB0772344704D34172C6023EB7B9BF81B589B8B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 25 Nov 2022 11:26:39 +0000
Certificate not after:    Fri 24 Nov 2023 11:31:39 +0000
Subordinate resources:    AS: 272559
                          IP: 2804:8520::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:86:35:de:df:c6:ea:26:e1:34:fd:80:a7:2c:90:48:ab:f3:ca:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 25 11:26:39 2022 GMT
            Not After : Nov 24 11:31:39 2023 GMT
        Subject: CN=DFB0772344704D34172C6023EB7B9BF81B589B8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:10:94:bd:5f:6a:40:f0:79:18:b7:b2:87:57:
                    60:55:47:a9:23:a8:63:70:ff:57:96:bc:35:ae:7d:
                    9d:de:25:76:dc:89:be:db:26:52:4b:9a:cf:00:17:
                    4c:79:92:da:5c:fd:48:41:d2:73:80:de:93:c5:7b:
                    58:72:d5:16:66:6e:5c:cf:2f:0d:d4:da:3b:08:9b:
                    0b:71:1e:2a:74:9b:41:b4:8c:ed:f6:cd:0c:cf:45:
                    c1:1a:d6:22:21:4c:55:51:0e:a0:02:75:7d:5c:e4:
                    6b:bb:ef:e5:cd:6e:50:69:7b:ab:e1:1e:55:e3:ad:
                    e0:55:37:5b:2a:59:5c:dc:4c:0f:92:92:fe:08:04:
                    4d:98:74:37:d7:6f:95:0c:8b:e8:95:27:d0:a3:ba:
                    c6:7b:60:d5:39:8d:a1:20:df:e0:1e:c3:9a:d2:21:
                    42:42:a2:b3:63:30:8e:1f:46:cc:c7:8b:4c:fd:c5:
                    57:17:72:ed:68:e9:f6:6c:a9:04:7c:f8:4b:7c:a6:
                    ee:4a:61:a4:0c:83:eb:f1:80:cf:35:d3:73:99:bd:
                    8c:90:e4:53:65:8a:34:d9:6f:a7:54:8c:04:2b:5d:
                    18:66:33:94:06:7e:39:ba:7d:03:9d:be:9e:e8:8f:
                    c2:5d:56:ac:37:ca:8f:e9:58:32:5c:97:48:aa:45:
                    ad:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:B0:77:23:44:70:4D:34:17:2C:60:23:EB:7B:9B:F8:1B:58:9B:8B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/0/DFB0772344704D34172C6023EB7B9BF81B589B8B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8520::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272559

    Signature Algorithm: sha256WithRSAEncryption
         20:82:21:3b:6e:30:0b:eb:a7:e3:4e:7e:81:c9:40:e2:33:95:
         25:a4:be:1b:75:90:46:69:e4:41:43:a0:88:c9:99:08:9d:08:
         3e:a2:44:c8:68:9b:34:8a:62:1c:63:79:30:cf:92:85:18:57:
         8d:72:0d:92:6b:44:91:f8:4f:28:e3:55:4e:b3:fb:2e:31:54:
         a7:39:76:9a:86:2d:d9:0c:ba:0e:ee:c6:22:8e:dd:20:f7:a9:
         2e:53:60:34:29:b9:ec:10:71:47:2d:50:99:f1:26:a5:ba:02:
         9c:76:92:7b:5d:b2:6c:f1:3f:30:7e:72:3d:87:1f:d8:91:57:
         6f:0e:1c:1e:0c:e5:4c:23:bd:4a:8c:12:21:19:9c:cd:a1:f0:
         08:0b:cf:7f:bb:0a:4c:22:0a:1a:e3:9a:ee:29:61:37:a5:63:
         4f:ef:c1:9c:ff:d4:65:18:b0:48:a0:76:7c:ac:1a:79:9e:2a:
         43:d0:e9:e9:d8:06:ef:90:d6:29:5f:f6:b1:66:3e:51:91:19:
         91:d2:aa:b8:e0:ca:4c:c7:83:32:37:8a:e8:70:0d:50:8f:3a:
         68:71:73:96:af:4a:13:93:f4:6a:6f:1c:1d:9a:69:6e:5f:09:
         64:19:75:47:20:91:47:37:b6:f3:5e:74:42:5f:fc:24:a5:20:
         55:3b:bc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:27 2025 by rpki-client