Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/03542DCBF20E742950F1A92DDBD898DEE09D5572.cer
File:                     03542DCBF20E742950F1A92DDBD898DEE09D5572.cer (raw, json)
Hash identifier:          IVSnzyJGs0RUwiXWdsbCnFf0I6jbDbr0m1F+RvYcJV0=
Subject key identifier:   03:54:2D:CB:F2:0E:74:29:50:F1:A9:2D:DB:D8:98:DE:E0:9D:55:72
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5605946271118A88D589029CCC0CDA070C32C433
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/03542DCBF20E742950F1A92DDBD898DEE09D5572.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 19:45:46 +0000
Certificate not after:    Tue 11 Mar 2025 19:50:46 +0000
Subordinate resources:    AS: 264352
                          IP: 131.108.228.0/22
                          IP: 2804:1d2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:05:94:62:71:11:8a:88:d5:89:02:9c:cc:0c:da:07:0c:32:c4:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 19:45:46 2024 GMT
            Not After : Mar 11 19:50:46 2025 GMT
        Subject: CN=03542DCBF20E742950F1A92DDBD898DEE09D5572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:01:eb:dc:c0:b4:59:be:ab:ac:fa:96:c0:0d:
                    9f:06:91:05:9a:85:e2:a0:7f:e4:3b:f6:d5:3e:ce:
                    41:49:de:cf:72:44:cf:6d:37:f1:1c:98:cf:e4:0f:
                    3f:01:80:af:0d:78:aa:9c:2a:4c:40:c7:2f:fd:c0:
                    0b:b5:ad:ec:1e:0f:3a:15:79:c8:32:1b:2e:10:c4:
                    eb:21:60:22:bf:80:5b:e3:92:72:24:15:6c:00:86:
                    00:fa:a9:73:43:85:55:f3:2a:49:cc:93:75:80:60:
                    25:ec:2b:74:76:53:92:70:40:c0:cf:9e:b1:1b:1c:
                    bc:02:f6:03:27:5f:50:29:65:bd:13:fd:0c:96:d9:
                    a4:a6:82:b6:77:39:cb:aa:ed:ed:5c:12:75:ec:f8:
                    14:93:6b:e2:d6:28:fc:ab:13:2d:98:04:ee:3a:aa:
                    c2:3c:4f:87:a9:a1:ff:21:a3:7c:ac:65:d0:57:15:
                    fd:a6:86:ed:ce:16:a6:3f:e8:ad:ed:a5:e0:a0:11:
                    3d:f7:08:9e:54:c7:2e:5a:2a:92:1b:79:f3:43:4b:
                    ed:eb:69:5d:21:c5:2c:5d:50:fc:0a:c3:5b:71:15:
                    46:51:37:53:5e:32:35:c2:ce:51:44:b5:18:01:d0:
                    51:0e:0c:fe:6a:92:1e:d2:a4:b8:8e:26:d9:5f:06:
                    8e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:54:2D:CB:F2:0E:74:29:50:F1:A9:2D:DB:D8:98:DE:E0:9D:55:72
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/03542DCBF20E742950F1A92DDBD898DEE09D5572.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.228.0/22
                IPv6:
                  2804:1d2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264352

    Signature Algorithm: sha256WithRSAEncryption
         2e:5a:3c:4c:4d:fc:19:19:44:85:57:e3:05:a5:5e:40:41:4d:
         89:e8:8b:fd:e5:7f:ea:2c:cf:34:8a:56:59:34:3b:a5:99:6e:
         7e:db:c4:08:6c:ee:b6:76:da:ae:da:6b:45:11:a9:c6:56:a1:
         19:40:64:23:37:a1:1f:b1:2d:e6:d0:04:73:73:9c:e3:da:5e:
         27:bd:35:84:b6:15:64:10:77:63:27:46:c2:8c:12:59:13:8f:
         67:40:27:10:c2:d1:17:30:6d:b7:9e:de:3c:b0:66:69:68:be:
         fb:bf:66:cc:5d:e7:a3:c8:03:55:4c:4f:a7:57:ac:02:a4:13:
         73:21:5e:8b:e9:5d:53:7e:19:55:14:57:72:31:7d:10:2f:ab:
         ce:dd:ec:1c:f4:62:3c:dc:c4:18:8d:9b:10:e9:dd:11:f0:03:
         33:3e:1a:41:3a:e4:f8:47:33:f8:bd:37:16:1e:ec:4e:7c:76:
         a3:34:ef:4c:d3:0e:34:99:58:04:fa:ef:e0:c5:f6:6e:3d:5c:
         b8:f5:82:fb:6e:ad:c4:42:77:83:41:76:e9:77:f6:5d:6e:6c:
         ca:2c:f2:32:a1:f7:30:c4:cf:0e:3f:c6:f3:80:e2:3b:09:ef:
         6a:5a:56:7d:e1:07:d9:3c:e7:6d:58:c2:81:f9:22:40:b9:d4:
         60:e2:fb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org