Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.cer
File:                     DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.cer (raw, json)
Hash identifier:          JvcuPFtgPWZQwyHAC5mbZYUNgT6NY2qrfrdUQ2qE2mk=
Subject key identifier:   DF:CE:A7:84:5D:3D:1B:60:E4:EA:F8:1E:99:CD:D9:FF:1D:76:55:E2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7DE1AC66F27D325563EFEA4C74F7C130B02533F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2023 14:29:38 +0000
Certificate not after:    Fri 15 Nov 2024 14:34:38 +0000
Subordinate resources:    AS: 265152
                          IP: 143.255.132.0/22
                          IP: 2804:2b68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e1:ac:66:f2:7d:32:55:63:ef:ea:4c:74:f7:c1:30:b0:25:33:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 17 14:29:38 2023 GMT
            Not After : Nov 15 14:34:38 2024 GMT
        Subject: CN=DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:53:58:30:a2:26:fe:21:b0:a7:3e:42:bc:62:
                    3f:4e:85:b7:c4:8f:09:57:78:bb:dd:5e:ea:88:d3:
                    3a:04:47:54:55:45:c3:6c:92:40:26:56:7e:49:cb:
                    c3:e2:68:a1:39:11:27:2f:18:d4:95:a8:ac:8e:58:
                    17:0a:e2:04:94:aa:07:3e:8d:cd:af:0c:9a:7b:13:
                    3e:4f:7e:bc:05:16:5c:28:d3:47:6a:db:2a:a1:6d:
                    f3:76:da:7f:2c:30:e0:fb:31:86:b3:9d:1b:1e:83:
                    17:76:8c:77:36:26:b1:81:0f:c8:d4:d1:a8:4f:d4:
                    4c:58:c6:e7:9b:1d:4e:b0:1e:e8:e3:b2:ef:c6:29:
                    d5:94:49:35:09:e9:a8:f0:97:8e:46:b5:00:f9:b7:
                    ad:6a:3c:9b:ef:4c:e2:ee:1d:d9:5f:dc:20:b6:c6:
                    9a:e6:4b:c4:e2:e6:a9:54:ac:8b:18:a1:3f:22:cf:
                    2d:3e:f9:88:55:f3:29:fe:cf:13:60:c0:d7:da:24:
                    c7:7a:47:84:72:55:1d:13:3a:27:d5:99:b2:77:f7:
                    4f:f0:d3:d5:38:43:92:c3:a7:30:2d:86:d4:cd:15:
                    ab:aa:22:a9:8e:ef:74:6b:cd:60:df:01:dd:4a:48:
                    cb:7c:10:e8:46:65:a7:52:1c:b8:77:b6:d8:11:ac:
                    52:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:CE:A7:84:5D:3D:1B:60:E4:EA:F8:1E:99:CD:D9:FF:1D:76:55:E2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.132.0/22
                IPv6:
                  2804:2b68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265152

    Signature Algorithm: sha256WithRSAEncryption
         4a:fc:b5:6e:cc:95:42:8e:bf:72:97:78:dc:a7:4f:87:88:b2:
         33:4a:78:44:8b:ea:65:2f:ec:56:34:ad:3a:ec:d5:b8:de:97:
         3c:66:ab:82:97:04:c0:aa:e8:06:35:b1:b3:23:7c:57:88:e8:
         b6:0a:14:7f:66:dd:c0:94:73:6e:a8:a1:da:59:3d:f3:e1:23:
         20:f2:44:49:ac:bd:f6:08:20:cb:a6:19:e5:9f:e3:b7:5a:f9:
         d7:5b:ea:a8:d6:ac:b3:93:ce:9f:06:fc:b0:26:4f:e6:68:87:
         eb:7e:2a:ba:25:a1:ec:ab:b8:9f:d5:57:cb:c7:e2:5e:4e:b9:
         96:a7:4f:26:01:66:af:58:b0:9a:dd:f7:36:a1:a6:ce:bf:93:
         4a:ab:f0:ff:fd:94:3b:c5:d7:0b:42:87:c9:01:dc:56:9f:7e:
         57:1e:33:a7:8c:00:15:a2:05:93:0a:d2:dd:c7:2a:35:67:33:
         d3:36:cf:f7:b8:af:65:d4:8a:a7:94:02:4f:7d:e6:1a:49:89:
         08:41:c8:9d:f5:4a:70:e5:4b:62:22:8a:91:b8:70:28:8c:65:
         1c:34:76:5c:2d:65:7b:87:c8:a0:48:ff:35:fe:ab:f8:69:b3:
         fb:a2:d8:72:97:2c:2c:46:ef:0b:6c:52:4f:68:c2:9d:52:20:
         ec:72:f9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org