Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DFD288DBD9DEBEB8FFDE05E25F5036F225093421.cer
File:                     DFD288DBD9DEBEB8FFDE05E25F5036F225093421.cer (raw, json)
Hash identifier:          iaQR1jFagDa/jZPYgC7Lc3E7gpR+kY/a71JZVdGtnDE=
Subject key identifier:   DF:D2:88:DB:D9:DE:BE:B8:FF:DE:05:E2:5F:50:36:F2:25:09:34:21
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       39C68F5E4803BF7D55E500FA68238589AE276FF6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2zTGP1P58t7etbNk17brLUbaFQurude5RfeACcRfiWgu/0/DFD288DBD9DEBEB8FFDE05E25F5036F225093421.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2zTGP1P58t7etbNk17brLUbaFQurude5RfeACcRfiWgu/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 May 2023 15:35:11 +0000
Certificate not after:    Tue 07 May 2024 15:40:11 +0000
Subordinate resources:    AS: 265917
                          IP: 131.196.92.0/22
                          IP: 2804:3fd0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c6:8f:5e:48:03:bf:7d:55:e5:00:fa:68:23:85:89:ae:27:6f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  9 15:35:11 2023 GMT
            Not After : May  7 15:40:11 2024 GMT
        Subject: CN=DFD288DBD9DEBEB8FFDE05E25F5036F225093421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:dd:8f:a8:d7:62:b7:a3:60:f5:e6:ee:49:6e:
                    e7:03:94:6b:38:4c:82:fd:16:e8:76:08:c9:01:78:
                    f5:a7:d8:bf:0c:c5:77:e3:0a:66:6f:e4:d1:6b:cc:
                    25:d7:61:5c:d5:63:10:8e:88:11:23:a3:8b:7c:93:
                    b6:14:30:2a:86:13:f5:8a:7a:5c:1e:96:28:b1:ce:
                    61:f2:82:a6:2a:a9:f8:3a:d9:63:7d:d2:60:a1:df:
                    dc:54:96:0c:86:25:48:be:49:0f:a2:a3:c1:4d:b6:
                    d1:24:5e:80:ac:03:65:cb:ea:6b:00:28:d0:d8:2c:
                    ee:72:fb:9c:57:f4:40:30:bb:3b:f7:22:c7:b9:d8:
                    9f:76:fe:a5:f9:78:20:bf:92:08:4e:23:42:08:ae:
                    6a:06:b1:cc:3b:5b:1b:57:36:4f:42:57:71:9b:61:
                    9d:e6:4c:ef:69:bf:6f:d5:1e:df:05:88:f8:0b:fe:
                    cc:f5:fd:ab:d7:1b:d5:be:cb:09:4b:69:35:46:78:
                    56:bc:41:74:c4:6d:2d:f5:8b:13:8c:ab:dd:ec:66:
                    e8:10:43:01:64:cc:3d:76:94:90:b0:88:a7:72:b1:
                    17:2a:c7:66:a1:ac:a7:ee:77:38:6a:98:16:ee:be:
                    de:df:e8:25:02:b0:43:3d:64:38:0f:8d:e5:26:01:
                    85:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:D2:88:DB:D9:DE:BE:B8:FF:DE:05:E2:5F:50:36:F2:25:09:34:21
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2zTGP1P58t7etbNk17brLUbaFQurude5RfeACcRfiWgu/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2zTGP1P58t7etbNk17brLUbaFQurude5RfeACcRfiWgu/0/DFD288DBD9DEBEB8FFDE05E25F5036F225093421.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.92.0/22
                IPv6:
                  2804:3fd0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265917

    Signature Algorithm: sha256WithRSAEncryption
         23:c7:95:00:54:a0:21:5a:b2:0d:5a:47:08:92:3f:40:23:a4:
         fd:02:11:d8:03:63:7e:f7:e0:33:e5:29:1f:40:a6:30:da:ca:
         0e:33:b9:71:0c:ab:72:e3:ef:45:73:e9:a5:cb:db:dd:8b:ff:
         0a:ad:c4:9e:fe:29:63:00:37:6b:bf:f0:ae:be:bc:67:2c:1e:
         00:1b:0a:84:e6:33:f0:99:e1:1a:d2:86:b9:6b:46:21:be:0b:
         9c:0a:f7:89:1e:31:82:19:27:af:49:c6:5a:82:b4:0a:47:30:
         9c:9c:c9:f8:9e:4b:25:66:3e:84:e2:6e:6e:33:bc:bb:5b:dd:
         21:02:a8:56:3b:13:53:fa:75:c2:dc:10:22:04:17:d8:75:1b:
         63:ac:53:af:17:ec:75:12:85:8d:bd:70:0a:1c:cb:d1:1f:c4:
         2f:d2:9e:da:3e:77:8c:40:be:d6:ed:f6:2b:ad:0f:f9:ea:bd:
         58:88:57:12:3f:8b:24:9b:94:18:bc:d3:1b:36:e9:39:84:eb:
         a0:1c:c8:ce:fb:d1:50:29:22:4e:6e:b8:76:c0:e3:85:ac:b9:
         1c:49:86:e7:3b:fa:c2:ab:1e:f5:2d:bd:db:ed:7c:1e:35:f9:
         7d:1e:16:a3:8d:1c:b9:df:d8:75:37:f2:72:06:94:9f:0f:5e:
         07:82:1a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org