Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DFDF417F1FA3347AD7D01DCA6C1918478A3297B0.cer
File:                     DFDF417F1FA3347AD7D01DCA6C1918478A3297B0.cer (raw, json)
Hash identifier:          nZGvQGCwe4LidWpuWAncPlYmDKtIsZZ4wLuc7Eoq0+k=
Subject key identifier:   DF:DF:41:7F:1F:A3:34:7A:D7:D0:1D:CA:6C:19:18:47:8A:32:97:B0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       53CEE5C02672C998EBB3D9AEB4FC27C4595EDC53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/1/DFDF417F1FA3347AD7D01DCA6C1918478A3297B0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Apr 2024 19:34:22 +0000
Certificate not after:    Wed 09 Apr 2025 19:39:22 +0000
Subordinate resources:    AS: 264462
                          IP: 132.255.52.0/22
                          IP: 2804:2010::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ce:e5:c0:26:72:c9:98:eb:b3:d9:ae:b4:fc:27:c4:59:5e:dc:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 10 19:34:22 2024 GMT
            Not After : Apr  9 19:39:22 2025 GMT
        Subject: CN=DFDF417F1FA3347AD7D01DCA6C1918478A3297B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7b:8f:80:49:36:60:9d:13:02:0d:ac:b1:06:
                    a0:41:bf:21:e5:72:98:f1:b2:60:87:4e:99:78:bf:
                    32:5a:23:37:f2:17:89:b0:f8:45:68:a2:e0:d9:f6:
                    81:a3:71:7d:c4:4e:1a:b8:6d:d2:5d:db:80:43:b3:
                    05:7a:45:9b:0a:90:0e:20:45:14:97:c8:15:e3:f2:
                    48:44:cd:b4:c2:db:56:6a:46:0c:b0:4b:80:88:4b:
                    85:9f:0b:cf:c6:9d:ca:ac:87:18:51:f9:7c:dd:a2:
                    f2:f4:84:4a:10:bc:29:7e:23:6a:7f:50:27:8d:90:
                    94:b9:fd:74:f6:d1:2e:4c:4e:b9:d3:33:84:10:c9:
                    80:b5:87:bc:59:b6:28:bf:23:2b:2a:1e:87:0c:58:
                    fa:89:72:95:ce:2c:95:bc:b9:d5:a1:c0:23:8b:a7:
                    2e:a6:c3:91:a3:d9:dd:71:26:5a:8b:00:72:14:9d:
                    2f:73:19:a8:e3:8a:f6:8f:f8:45:7e:51:7f:63:0a:
                    85:d6:c3:3d:3c:a5:ba:fc:56:3d:41:22:5c:e1:8f:
                    f3:b7:8b:f2:88:92:a1:42:41:49:78:74:f6:45:72:
                    96:70:34:1e:bb:13:de:92:5b:30:90:9a:8a:49:e1:
                    fd:29:05:f3:6d:8a:18:d8:cf:61:81:4d:77:e0:eb:
                    5e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:DF:41:7F:1F:A3:34:7A:D7:D0:1D:CA:6C:19:18:47:8A:32:97:B0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/1/DFDF417F1FA3347AD7D01DCA6C1918478A3297B0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.52.0/22
                IPv6:
                  2804:2010::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264462

    Signature Algorithm: sha256WithRSAEncryption
         8c:ee:67:d6:ff:5a:c2:1e:a5:4c:db:44:e6:35:11:fa:c1:dd:
         cc:da:57:f1:0d:21:3a:c2:0a:f2:37:e6:bd:6b:31:38:af:ea:
         89:4b:d6:e5:b0:ac:74:77:02:2a:ae:76:3c:f6:ca:10:8f:a0:
         b4:a8:55:2e:c4:e6:4e:08:70:d5:0e:f8:1e:b5:3d:f2:4d:7a:
         71:9c:2c:db:92:8b:88:4f:9d:ac:f3:53:25:91:c9:9f:11:f6:
         39:89:62:89:d6:5f:ba:c3:ce:c9:a1:9a:45:04:87:6d:e3:57:
         70:7f:2e:05:21:28:1f:84:77:92:9d:a4:2b:a9:e0:0f:0d:ed:
         33:e5:c3:3b:1a:3d:b5:eb:8c:6e:e0:49:51:27:47:f9:ce:6c:
         a7:39:e8:72:90:1c:fc:d3:a0:0d:da:6b:94:7a:26:d9:b2:3e:
         e1:6e:37:ff:90:cd:7b:26:87:e4:99:10:00:eb:e7:b5:e0:e3:
         19:b5:ac:75:e7:94:4a:79:ea:65:c8:09:6d:b2:f7:25:57:44:
         43:41:47:1c:8a:46:b0:33:63:93:61:92:db:fb:75:5a:4d:1a:
         9a:75:8d:8a:b2:89:cd:79:72:23:07:c7:1a:69:42:b5:1c:d4:
         be:b2:3f:9a:4d:6e:e0:a7:27:32:90:a6:08:c6:9c:e9:6e:dc:
         54:03:f6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org