Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DFE5412EB2722EAA777BCCB7B63BB67F319E789A.cer
File:                     DFE5412EB2722EAA777BCCB7B63BB67F319E789A.cer (raw, json)
Hash identifier:          DdPE1EVHjOEy3YZocFaxkOQxgAVGUeF0jGs2AZvuwX4=
Subject key identifier:   DF:E5:41:2E:B2:72:2E:AA:77:7B:CC:B7:B6:3B:B6:7F:31:9E:78:9A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2C3FB5542C1952E02ECD8CFB7DA3D265A983C97F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DyAi9cNtQL1iA56ev3dwrVp7hS7xJWuj6i4zMNUZj6fc/0/DFE5412EB2722EAA777BCCB7B63BB67F319E789A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DyAi9cNtQL1iA56ev3dwrVp7hS7xJWuj6i4zMNUZj6fc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Aug 2021 20:48:18 +0000
Certificate not after:    Mon 15 Aug 2022 20:53:18 +0000
Subordinate resources:    AS: 268894
                          IP: 45.175.116.0/22
                          IP: 2804:5c34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:3f:b5:54:2c:19:52:e0:2e:cd:8c:fb:7d:a3:d2:65:a9:83:c9:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 16 20:48:18 2021 GMT
            Not After : Aug 15 20:53:18 2022 GMT
        Subject: CN=DFE5412EB2722EAA777BCCB7B63BB67F319E789A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:c2:6b:15:54:28:8b:3e:2f:73:58:4e:30:
                    80:91:33:8b:5d:ed:41:51:d7:04:87:54:3a:c0:15:
                    3f:e6:98:cc:b1:6e:7c:9b:a1:af:d1:ed:47:21:c9:
                    ec:36:b9:fb:da:38:df:00:02:34:13:62:7c:3d:4f:
                    4a:69:3b:74:e5:e1:c3:29:d4:6c:c9:7e:f8:5f:5f:
                    25:36:78:b6:c1:9e:4a:cb:ba:9e:60:73:c3:a3:3d:
                    1f:27:70:0f:e9:5a:80:06:3f:15:61:25:1d:c8:4b:
                    c4:85:a0:de:37:04:a4:f0:02:25:99:c0:55:96:7b:
                    a2:c6:39:a9:a8:23:4a:90:f1:9b:27:93:51:19:08:
                    2d:3c:ff:ab:99:57:39:37:d6:4f:56:57:38:6a:3d:
                    ad:8f:2a:01:13:86:32:3f:76:d3:f0:26:b5:89:e3:
                    ec:f6:ef:91:70:6b:7a:2d:17:fb:12:19:a9:af:12:
                    ac:c3:c4:10:41:f6:c0:f1:5e:89:c6:bd:c8:35:b4:
                    f0:df:99:ef:dc:18:39:26:bd:80:0c:ab:a5:dc:0d:
                    65:7c:6c:47:20:5c:91:ad:dc:29:64:df:b9:34:51:
                    5c:02:99:a6:4d:99:53:12:88:08:1d:2c:d1:f4:ab:
                    89:62:8d:ac:19:5a:f5:2a:b6:6b:21:55:76:d3:14:
                    b4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:E5:41:2E:B2:72:2E:AA:77:7B:CC:B7:B6:3B:B6:7F:31:9E:78:9A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DyAi9cNtQL1iA56ev3dwrVp7hS7xJWuj6i4zMNUZj6fc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DyAi9cNtQL1iA56ev3dwrVp7hS7xJWuj6i4zMNUZj6fc/0/DFE5412EB2722EAA777BCCB7B63BB67F319E789A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.116.0/22
                IPv6:
                  2804:5c34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268894

    Signature Algorithm: sha256WithRSAEncryption
         2e:84:99:80:41:b5:38:fb:0e:1d:54:2e:8c:69:9c:17:8a:4f:
         d6:36:9f:cf:7b:6c:8e:be:74:0a:8b:19:2e:55:5e:42:05:99:
         04:e7:77:49:9a:d3:d5:5b:c4:49:3b:4d:d6:05:14:70:28:fb:
         c4:c3:1d:a1:78:b1:37:f5:b5:d2:86:a7:b3:f3:8a:05:b0:0e:
         57:a7:82:79:ea:c4:f2:08:69:e2:f5:db:b4:4b:7c:34:05:f2:
         8c:f5:07:5a:6f:8c:88:37:19:a2:98:d1:97:75:c6:a5:f9:5a:
         ac:22:07:12:7d:13:1a:40:a9:5f:8e:f0:94:91:91:34:7a:65:
         34:79:10:14:ae:22:00:f7:60:1e:1b:92:8f:2d:90:c7:6b:6e:
         15:56:1e:d6:c4:2c:ed:fa:51:2b:34:c1:12:1a:3a:38:2a:88:
         dc:1e:f9:5d:e9:bd:53:91:53:8d:d7:3a:27:0b:b2:83:2d:0a:
         cb:2b:80:2a:56:b8:57:36:13:83:7a:5a:ac:eb:6a:37:5b:a2:
         16:81:5e:62:fc:10:b8:83:98:c6:f8:18:1a:61:e6:78:19:44:
         cd:bd:60:c6:44:14:b4:bd:75:1c:39:18:c2:63:73:29:88:c9:
         d8:a7:32:0d:2e:55:36:f0:2e:15:2a:31:f7:fc:1b:01:63:7f:
         fc:09:ca:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org