Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DFE7F74B9B7F295D740ABA91E7106F6A68F59899.cer
File:                     DFE7F74B9B7F295D740ABA91E7106F6A68F59899.cer (raw, json)
Hash identifier:          yOYceZcU168RbmSqXvL7TOFf0eCzyiLkpmhBquJ5m3g=
Subject key identifier:   DF:E7:F7:4B:9B:7F:29:5D:74:0A:BA:91:E7:10:6F:6A:68:F5:98:99
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4901A3A8A7583E580C13A87335376D57D9DC18E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J1YQF8mpEir25pCLkU8nfGpqY1fdkro5sNYv4u7GHDZv/0/DFE7F74B9B7F295D740ABA91E7106F6A68F59899.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J1YQF8mpEir25pCLkU8nfGpqY1fdkro5sNYv4u7GHDZv/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 Mar 2023 19:49:30 +0000
Certificate not after:    Fri 29 Mar 2024 19:54:30 +0000
Subordinate resources:    AS: 268822
                          IP: 45.172.172.0/22
                          IP: 2804:5b28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:01:a3:a8:a7:58:3e:58:0c:13:a8:73:35:37:6d:57:d9:dc:18:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 31 19:49:30 2023 GMT
            Not After : Mar 29 19:54:30 2024 GMT
        Subject: CN=DFE7F74B9B7F295D740ABA91E7106F6A68F59899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:93:6f:15:d7:a6:0f:08:95:cb:cc:fb:bb:15:
                    75:28:ce:61:49:f2:5b:de:2d:82:2b:24:01:08:b7:
                    1e:8e:20:21:ee:7b:60:3e:14:5d:63:ac:6f:cd:86:
                    af:f9:9e:54:50:cd:ba:06:92:bc:50:af:d8:57:55:
                    7a:c4:bf:e7:16:24:6a:31:f5:db:1c:3c:36:4a:95:
                    4a:f2:19:fe:a8:c1:e5:d9:ea:54:c8:24:f5:26:1f:
                    97:3e:22:78:d3:a0:32:7d:fd:32:97:27:35:ec:fe:
                    b3:d2:b6:ec:a4:3c:82:63:94:dc:53:90:c0:f2:46:
                    93:12:32:97:7a:24:7b:ca:fb:cf:91:ab:f3:49:62:
                    df:86:7f:50:6b:36:63:ce:b3:aa:a5:f0:12:cf:87:
                    97:8f:1d:e8:c0:56:42:5e:c8:2d:d4:18:02:11:73:
                    52:6d:a7:df:32:a1:a9:df:28:ba:4a:4a:01:0b:e6:
                    5f:7b:0b:c1:2b:7c:95:b6:68:ec:f9:d8:78:b1:57:
                    b0:09:d8:c4:ab:80:95:be:68:04:58:85:c2:a9:7e:
                    d4:b8:7b:6c:57:72:ca:2f:d4:38:74:1b:4e:d6:30:
                    d1:c1:2b:41:7c:ba:d2:dd:00:f3:6f:52:86:ba:bb:
                    96:54:0a:96:06:92:80:da:e0:7e:55:33:0f:cc:04:
                    e7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:E7:F7:4B:9B:7F:29:5D:74:0A:BA:91:E7:10:6F:6A:68:F5:98:99
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J1YQF8mpEir25pCLkU8nfGpqY1fdkro5sNYv4u7GHDZv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J1YQF8mpEir25pCLkU8nfGpqY1fdkro5sNYv4u7GHDZv/0/DFE7F74B9B7F295D740ABA91E7106F6A68F59899.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.172.0/22
                IPv6:
                  2804:5b28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268822

    Signature Algorithm: sha256WithRSAEncryption
         45:21:28:84:b8:fa:0b:33:3f:46:08:26:4b:bf:e1:99:12:8d:
         3f:47:29:3c:4f:69:59:65:ef:01:30:f0:d1:93:31:0b:21:77:
         63:a6:30:a9:63:98:99:8d:be:50:98:d5:77:bf:f6:ae:6f:48:
         15:f0:ae:14:9b:64:93:87:f8:4a:c3:c6:f0:eb:9b:48:3e:a0:
         2a:94:cd:40:e5:b3:ac:fa:c7:8b:5e:ef:8a:cd:1b:01:e4:e1:
         ce:7d:a0:8a:ae:b5:32:9d:ac:ae:a5:1c:c6:82:b0:1a:18:f3:
         f4:6b:44:35:12:14:c9:71:4e:9d:e4:3e:a2:2c:a7:f2:c8:24:
         98:55:d2:af:34:e1:37:1a:59:41:98:18:1f:6a:9e:67:6c:21:
         02:b6:f4:ca:55:e1:39:c8:e3:d6:75:c8:0a:85:7d:0b:d7:3b:
         40:7c:68:27:db:5c:b1:4c:f3:22:7a:1a:80:af:a6:91:1a:28:
         9a:f3:80:1c:87:d2:a5:4a:fe:d9:c8:45:c8:c1:51:7a:54:e8:
         37:0c:6a:cc:6d:72:a7:54:0f:69:28:8e:29:b2:27:e6:fb:35:
         08:ee:74:3e:03:b5:9b:a1:14:2e:87:96:5c:a8:73:45:f7:dc:
         65:50:22:d3:b8:ef:76:10:a1:45:70:77:64:2b:f8:6e:3b:51:
         e1:ca:ba:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org