Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/035DBA2FFD0F6C214A792E3C8B19F1269A46669D.cer
File:                     035DBA2FFD0F6C214A792E3C8B19F1269A46669D.cer (raw, json)
Hash identifier:          pctTF18VXnxJs8z0kgWnAYCpIhvykZQc4VfmMLUdVXk=
Subject key identifier:   03:5D:BA:2F:FD:0F:6C:21:4A:79:2E:3C:8B:19:F1:26:9A:46:66:9D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5AFB0903DD5C46B467069D9BD5ED203A72CFC223
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/035DBA2FFD0F6C214A792E3C8B19F1269A46669D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Mar 2023 13:56:28 +0000
Certificate not after:    Tue 26 Mar 2024 14:01:28 +0000
Subordinate resources:    AS: 264036
                          IP: 143.137.120.0/22
                          IP: 2804:29d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:fb:09:03:dd:5c:46:b4:67:06:9d:9b:d5:ed:20:3a:72:cf:c2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 28 13:56:28 2023 GMT
            Not After : Mar 26 14:01:28 2024 GMT
        Subject: CN=035DBA2FFD0F6C214A792E3C8B19F1269A46669D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fc:8e:d6:8d:af:4e:21:5c:1d:4c:31:90:35:
                    92:99:7d:a9:3a:49:5b:85:e3:8e:ce:66:a0:c6:c0:
                    5e:f3:a5:5a:16:f0:1f:86:6c:b8:eb:4d:e9:72:d2:
                    18:ac:5f:95:4c:8e:3d:4f:48:36:9d:87:d8:b5:6c:
                    7b:61:d7:e8:ff:f5:07:ce:64:d0:e5:0c:0a:e4:a2:
                    78:40:98:e6:0e:03:f4:e5:03:51:88:e7:01:06:a4:
                    27:84:6d:68:71:47:65:86:f6:4d:07:b6:97:4d:12:
                    7d:d7:a6:5f:e2:b9:01:b6:d6:12:d7:be:ac:7c:6e:
                    09:39:6f:16:41:a8:a1:c5:0d:32:ba:7b:29:7f:74:
                    f6:67:62:b2:aa:54:9d:7f:3f:6d:f1:6b:99:68:be:
                    74:84:07:d7:4d:65:68:93:06:61:d6:a3:78:19:ff:
                    51:e3:e6:ef:83:2c:fd:6a:72:87:bd:df:3e:b1:0a:
                    94:9b:95:e7:20:7d:69:d1:62:40:2e:fe:51:6b:9d:
                    4b:15:91:78:66:fc:1d:5b:74:d7:1d:de:98:44:93:
                    55:78:48:48:a9:25:fa:b9:70:8a:cd:91:f3:37:6b:
                    75:72:3b:79:d9:cc:1e:d2:7c:4b:c8:95:83:da:e7:
                    0b:ad:5e:9c:4d:2a:81:18:ae:d9:49:ea:aa:d4:24:
                    12:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:5D:BA:2F:FD:0F:6C:21:4A:79:2E:3C:8B:19:F1:26:9A:46:66:9D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/035DBA2FFD0F6C214A792E3C8B19F1269A46669D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.120.0/22
                IPv6:
                  2804:29d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264036

    Signature Algorithm: sha256WithRSAEncryption
         8f:23:82:59:03:b3:c0:26:25:cd:49:1e:a2:fe:bc:2d:17:9a:
         a3:97:32:f5:34:e2:ca:24:a3:92:9a:a7:b2:53:6e:1e:61:01:
         98:a5:6f:ea:85:96:03:f0:7c:3e:3e:a6:ef:fb:b2:22:34:0d:
         c0:aa:a3:f2:eb:74:5a:9a:06:57:d8:d1:0c:80:5d:1a:25:39:
         59:bf:ee:b0:2e:50:c3:df:c1:d0:3b:35:0f:e1:df:a1:71:c8:
         8d:bb:cc:89:24:4a:99:c9:01:37:2d:38:6a:69:35:fe:21:21:
         e0:82:6f:43:03:9f:ee:f7:34:4c:bf:8b:b3:a8:34:11:c3:65:
         6b:ce:5c:43:16:76:d4:fb:18:a5:97:4a:8a:66:14:21:bc:cb:
         c3:04:bb:4b:11:59:f4:d0:81:e1:55:3f:43:3c:16:01:fc:07:
         a0:0f:7b:92:cc:79:fa:db:26:66:df:0b:59:e9:e3:c7:6a:22:
         95:2a:ce:60:d2:29:b7:2c:91:de:89:50:2f:e2:14:f5:53:51:
         4c:32:b2:3c:77:67:ec:7d:9b:0d:c0:df:c8:0c:d8:70:8f:a0:
         8a:a2:38:55:db:46:0c:ac:8d:85:51:f7:0b:ab:30:34:08:21:
         e1:8e:a9:43:91:df:67:ee:6d:74:c4:da:6d:3f:d4:8a:e6:a8:
         67:c9:a7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org