Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/03378B7FC1B464DAD1E7EF2D2F20EEE810EBE08F.cer
File:                     03378B7FC1B464DAD1E7EF2D2F20EEE810EBE08F.cer (raw, json)
Hash identifier:          2MBDHiLLvUt9oRG23lCLexJFuM8Hk8D1mbdss0zwcpY=
Subject key identifier:   03:37:8B:7F:C1:B4:64:DA:D1:E7:EF:2D:2F:20:EE:E8:10:EB:E0:8F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2B3F41586C7A64E7B52EF62ED403BF8C2ECC3CFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/03378B7FC1B464DAD1E7EF2D2F20EEE810EBE08F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Jan 2024 19:54:11 +0000
Certificate not after:    Mon 20 Jan 2025 19:59:11 +0000
Subordinate resources:    AS: 268707
                          AS: 270966
                          IP: 45.169.160.0/23
                          IP: 2804:5984::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:3f:41:58:6c:7a:64:e7:b5:2e:f6:2e:d4:03:bf:8c:2e:cc:3c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 22 19:54:11 2024 GMT
            Not After : Jan 20 19:59:11 2025 GMT
        Subject: CN=03378B7FC1B464DAD1E7EF2D2F20EEE810EBE08F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f5:19:8a:24:f6:74:8a:1b:be:ce:98:bb:6f:
                    9b:84:6a:9d:78:f7:ba:60:57:86:fb:db:14:6b:7d:
                    6a:a6:c6:32:7f:c2:8b:f0:3e:be:e9:94:47:93:19:
                    49:ed:16:1f:d8:25:05:1a:cd:ab:89:aa:a6:55:c4:
                    3f:a9:13:60:c5:77:21:3b:57:e4:64:20:cd:2a:78:
                    34:f2:4c:7e:8d:02:99:de:38:1e:2c:4c:90:aa:07:
                    80:47:c7:e9:77:91:cd:6e:92:12:9b:23:93:98:4d:
                    93:b1:66:04:5d:08:fc:ad:3c:1b:92:d3:73:d5:88:
                    e7:40:2b:e2:5a:34:44:30:a9:33:24:d2:af:c6:a6:
                    53:47:71:a1:a9:a8:4d:62:a0:c5:f0:f1:da:60:8c:
                    5d:31:0c:67:90:6f:54:0d:68:d8:bd:2c:e5:0c:37:
                    1a:0e:64:88:f4:0f:65:a9:00:cb:31:25:de:a0:76:
                    32:ec:56:af:b5:78:fe:e7:de:e4:67:ab:5e:1b:eb:
                    53:6e:12:de:bc:f8:2d:d1:5b:de:7e:e1:06:88:53:
                    b3:59:3e:fd:90:05:ec:d5:b5:ed:5e:3e:23:b4:82:
                    b1:1e:13:73:98:00:4b:c3:a4:dc:4d:b9:f6:bc:9e:
                    77:15:a9:c5:b3:f7:79:c2:93:1f:2a:28:5a:f2:bb:
                    74:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:37:8B:7F:C1:B4:64:DA:D1:E7:EF:2D:2F:20:EE:E8:10:EB:E0:8F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/03378B7FC1B464DAD1E7EF2D2F20EEE810EBE08F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.160.0/23
                IPv6:
                  2804:5984::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268707
                  270966

    Signature Algorithm: sha256WithRSAEncryption
         74:cb:5b:75:5d:dd:20:5d:4b:58:39:2a:c4:f0:d5:02:f4:e1:
         54:4b:6b:ef:c2:c3:b8:44:df:4b:86:9a:f6:b7:22:0d:20:ae:
         26:b4:5b:61:bf:38:a8:9e:8f:cb:51:d1:b5:3d:ad:32:28:59:
         6e:04:1f:62:3f:d3:98:e7:0c:b9:41:15:28:a1:bb:f2:c3:bd:
         f4:7d:54:32:a0:97:6a:f7:0e:d7:de:6a:1a:9e:3e:95:25:be:
         fe:02:79:8c:bd:42:0d:17:c6:65:4a:d3:f1:5e:83:f2:8e:4b:
         3b:9f:51:15:3e:d9:24:2b:07:e6:86:b9:c9:66:1b:39:52:6a:
         e8:cf:0b:25:23:ca:19:17:5e:37:de:d2:65:15:5f:cd:00:8b:
         93:08:b4:a9:cf:91:51:03:9d:a0:2e:8a:6f:ca:b9:20:fc:a9:
         60:5b:63:26:57:6e:ad:a5:24:a3:4e:ba:91:66:05:2f:cc:78:
         5a:ce:c9:ad:47:a7:21:3c:8b:bb:9c:a4:84:b3:58:0d:46:9c:
         4c:e7:8f:80:4a:ce:33:e0:26:78:7a:c7:c6:64:71:81:a5:77:
         d1:e6:a9:62:5d:ab:e0:82:d8:76:dd:bb:00:6d:af:95:06:1e:
         56:4c:27:55:c9:7d:b6:be:d7:69:5b:7e:31:b9:6f:46:c3:d4:
         1e:1c:88:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org