Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.cer
File:                     0305A54375BDB3F5E631FB8274B561AB2511B90A.cer (raw, json)
Hash identifier:          Yi4R/6y5Qxx4YVQ/O/pNa2qzmDIPzZfggY9hSIPJ8JM=
Subject key identifier:   03:05:A5:43:75:BD:B3:F5:E6:31:FB:82:74:B5:61:AB:25:11:B9:0A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       30E83DA8DF109D0D5662D32C75A3DD804DA54BDB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Aug 2023 13:07:15 +0000
Certificate not after:    Thu 01 Aug 2024 13:12:15 +0000
Subordinate resources:    AS: 266532
                          IP: 45.65.228.0/22
                          IP: 2804:3d74::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e8:3d:a8:df:10:9d:0d:56:62:d3:2c:75:a3:dd:80:4d:a5:4b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  3 13:07:15 2023 GMT
            Not After : Aug  1 13:12:15 2024 GMT
        Subject: CN=0305A54375BDB3F5E631FB8274B561AB2511B90A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e3:1b:5c:22:af:01:ff:d9:eb:27:6e:9a:e0:
                    21:88:04:32:3c:f7:cb:0f:bc:a3:74:1c:b1:95:b4:
                    ca:ea:f9:8a:f1:6a:e8:68:02:d9:cf:ef:db:57:ba:
                    d4:cd:08:f7:8a:ca:c4:ce:e7:55:7d:05:6c:d9:e8:
                    5e:d4:32:c6:25:b2:48:c0:fa:fb:6a:0e:42:b7:43:
                    2b:38:f9:b2:3a:3f:32:db:3c:a2:a7:d1:12:04:1a:
                    e8:77:17:07:5e:a2:3d:77:3a:88:9b:2e:75:5f:c2:
                    f1:3b:69:91:40:43:cb:ca:ce:e3:63:dd:5b:27:7e:
                    aa:a7:31:5d:35:75:5b:37:4a:56:da:55:4b:91:67:
                    4d:0a:f1:95:b7:a2:b3:e5:bd:cf:26:cc:1e:d9:21:
                    d5:eb:37:3b:89:56:74:48:42:e4:54:91:e2:8a:fd:
                    1e:e9:db:6b:a7:a6:c8:04:bf:10:92:ac:ed:0c:8a:
                    6d:70:4a:56:0b:eb:d4:d4:d8:40:ba:b7:7e:ea:d6:
                    1b:b6:9d:e9:fb:0c:f4:ae:ee:b8:85:81:a5:15:5a:
                    67:37:28:b6:98:58:01:eb:0d:de:54:cb:f4:2d:7e:
                    3f:d8:70:6e:71:6f:6d:86:4b:f6:4b:a4:fa:86:df:
                    69:02:5e:c3:e0:de:8d:bf:2f:cc:9a:65:41:e0:1d:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:05:A5:43:75:BD:B3:F5:E6:31:FB:82:74:B5:61:AB:25:11:B9:0A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.228.0/22
                IPv6:
                  2804:3d74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266532

    Signature Algorithm: sha256WithRSAEncryption
         a1:03:da:aa:29:85:ca:3a:3b:24:1f:b0:56:0e:83:85:4f:3a:
         48:74:cd:24:0a:9e:e7:3f:32:65:44:07:ef:4f:8c:2d:ae:04:
         15:9b:2c:ca:5f:d8:b9:67:bd:63:bc:26:73:13:07:5f:d6:d9:
         bb:91:4c:4c:5d:88:8e:58:9f:66:77:c1:53:e8:d4:b1:60:5b:
         30:b6:63:10:4b:7d:ec:5f:9f:81:bc:18:b2:08:7e:19:a0:11:
         63:20:63:02:af:87:03:d0:a1:fa:dc:7e:7f:ff:87:26:da:5a:
         4a:3c:71:27:0a:c8:6e:38:75:c5:f4:c6:82:69:89:03:06:1a:
         6d:f6:07:4f:e9:f7:03:01:ff:63:ad:5b:c9:23:6d:aa:2a:33:
         54:50:e3:92:26:da:31:84:33:e9:43:10:35:bb:95:86:4e:cc:
         24:72:61:82:ed:71:ac:7d:32:99:e7:ae:e6:28:6c:57:0a:69:
         44:e6:ee:e3:1d:91:2d:41:38:18:a8:2d:0a:fc:98:31:a3:fc:
         20:e2:62:ca:c3:c1:32:2c:3d:f1:a0:c9:cd:fa:44:1b:b9:f3:
         cc:23:d7:72:7f:a9:ae:51:34:b8:ba:32:ca:ae:ca:e2:19:10:
         0b:18:88:18:59:bc:ca:74:88:de:b1:19:e9:fb:cd:fc:2e:ca:
         20:a6:88:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org