Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.cer
File:                     DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.cer (raw, json)
Hash identifier:          S7tdXamZcPKsJu7x2A3CJE7EqTNSIC6QkeUeL3Ls3k0=
Subject key identifier:   DF:F9:F1:A0:A4:70:F1:C5:02:BC:C4:A6:AF:3B:F1:C4:86:D8:BB:8B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4021C5A4655BC4CD5996E027545EDBDB6E9041CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Dec 2022 13:36:17 +0000
Certificate not after:    Thu 28 Dec 2023 13:41:17 +0000
Subordinate resources:    AS: 267301
                          IP: 45.232.24.0/22
                          IP: 2804:4b5c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:21:c5:a4:65:5b:c4:cd:59:96:e0:27:54:5e:db:db:6e:90:41:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 29 13:36:17 2022 GMT
            Not After : Dec 28 13:41:17 2023 GMT
        Subject: CN=DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cc:77:40:1d:a3:22:4e:28:b9:88:4b:8c:b2:
                    8e:cf:0d:ed:a1:1a:39:f1:a9:ff:01:00:79:a2:93:
                    03:4f:d2:05:7e:58:fc:13:b1:69:b6:04:69:41:c7:
                    01:e1:65:a5:e4:b2:0a:27:59:62:54:2c:2b:4a:a1:
                    85:6c:09:3a:f7:72:02:59:ce:a9:ce:ad:3a:b0:b6:
                    19:88:70:b9:55:8e:5a:0b:07:65:36:90:e4:7c:c4:
                    9e:19:ec:c1:16:57:82:0b:ef:6b:2b:84:dc:1f:36:
                    b8:91:40:1f:43:cf:5a:9d:68:d5:9c:3f:0a:87:8d:
                    6c:02:e9:e5:df:7a:7a:8e:53:de:e1:04:37:2f:fb:
                    6c:29:ff:bd:0a:8b:1f:d2:5d:c5:c3:a6:b2:db:f8:
                    0c:1f:2b:a1:d5:90:f5:29:02:e4:15:1f:48:94:98:
                    0f:8a:be:f4:d0:4d:e9:bc:67:66:50:93:65:1f:b1:
                    47:bf:44:ba:1e:c1:fc:ad:a7:17:ae:f1:ec:52:88:
                    ee:f2:06:dc:65:4e:d6:3e:9e:ed:87:6b:04:c8:32:
                    1c:9d:f1:85:d3:92:40:ab:85:d9:11:bb:b9:24:63:
                    b5:7e:ed:44:24:cd:47:1b:fc:df:cd:3e:e3:bb:53:
                    29:bb:d4:5d:72:57:8d:65:8a:f7:02:ea:3f:dc:b8:
                    36:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:F9:F1:A0:A4:70:F1:C5:02:BC:C4:A6:AF:3B:F1:C4:86:D8:BB:8B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.24.0/22
                IPv6:
                  2804:4b5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267301

    Signature Algorithm: sha256WithRSAEncryption
         37:83:45:b6:be:98:97:f3:58:f7:d5:26:9e:99:e0:7f:b4:df:
         04:af:bc:e4:80:53:86:df:25:04:37:7a:01:0b:8c:48:d4:c8:
         8a:95:e0:30:7b:68:74:67:c0:f2:8e:69:ec:c2:15:95:d9:14:
         59:c5:bc:c1:ce:bd:f3:8c:65:9f:5a:66:1e:fd:30:e0:7c:97:
         0f:90:ff:3b:cd:1d:26:05:3f:41:28:64:1c:c5:5b:d1:b5:ea:
         84:4a:dc:8b:31:ab:8d:2f:90:21:af:3b:e1:b3:f1:93:2b:fc:
         75:ae:42:c6:23:49:2c:42:4f:f8:7f:55:49:d4:31:01:37:70:
         ab:06:d1:f7:3a:fe:2b:3b:da:0f:c7:70:da:70:59:65:a1:aa:
         0a:47:15:8f:af:63:46:af:73:60:7d:a8:3b:42:aa:97:bc:ed:
         07:e7:51:60:dd:fb:ab:c6:a8:d1:10:fd:73:c1:0e:50:b6:0b:
         41:67:13:6d:65:e6:e8:bd:83:85:41:0f:73:d0:33:49:24:b8:
         7d:89:a6:b2:d9:e5:79:23:fa:f0:52:b0:2b:3a:5c:e8:79:4d:
         27:d2:2d:77:cd:c9:3e:34:7c:2d:57:4e:76:49:07:40:f4:f1:
         67:7a:da:08:1b:11:27:1c:1c:29:01:17:6c:33:31:11:38:35:
         3c:02:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org