Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/039893F3ADDD595A2442D151C8D6D834F8CC35A4.cer
File:                     039893F3ADDD595A2442D151C8D6D834F8CC35A4.cer (raw, json)
Hash identifier:          bXSYCwrKlJYbEVPceTNS/SU18217F9aOr5Ht81c4FP4=
Subject key identifier:   03:98:93:F3:AD:DD:59:5A:24:42:D1:51:C8:D6:D8:34:F8:CC:35:A4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       33B7C8916B0D95445C1265EF7EE08155D555A64F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/039893F3ADDD595A2442D151C8D6D834F8CC35A4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jul 2021 21:44:55 +0000
Certificate not after:    Thu 28 Jul 2022 21:49:55 +0000
Subordinate resources:    AS: 267551
                          IP: 45.70.48.0/22
                          IP: 2804:4324::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b7:c8:91:6b:0d:95:44:5c:12:65:ef:7e:e0:81:55:d5:55:a6:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 29 21:44:55 2021 GMT
            Not After : Jul 28 21:49:55 2022 GMT
        Subject: CN=039893F3ADDD595A2442D151C8D6D834F8CC35A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5c:e8:ba:e8:73:dc:46:bb:c4:dc:26:ff:5e:
                    f7:88:ca:30:b2:64:de:ba:f6:93:05:25:07:3a:ff:
                    80:92:db:ec:8f:5a:8a:7d:e9:8f:7e:de:6b:54:e7:
                    1a:0b:9f:03:d4:03:63:95:d8:6f:5d:d6:4f:c1:f5:
                    9a:b0:f1:98:3c:7f:72:c2:cd:7e:32:23:07:95:96:
                    4b:3e:fe:d3:81:a3:fd:82:b1:71:ff:e1:a1:f7:bf:
                    b7:69:a5:f3:45:c3:d1:4e:6f:72:9b:b3:27:53:7d:
                    85:bc:36:53:2a:6c:f6:0a:c0:3a:d5:be:cb:70:cb:
                    ce:96:1e:98:a4:71:80:97:2c:06:fc:76:90:ca:0f:
                    87:42:ee:89:51:a1:8f:2d:57:09:32:64:57:5f:e9:
                    0e:cd:f7:5c:5f:44:7d:04:d2:06:00:bc:74:c0:e1:
                    16:47:3d:80:83:22:f7:c6:98:41:69:42:07:50:3b:
                    5f:93:b0:35:05:4d:43:3e:67:86:2e:aa:c0:f5:ed:
                    d2:25:4b:82:d6:c2:60:d7:1c:90:0a:36:8f:b5:50:
                    c1:87:05:be:d8:50:3c:14:e1:a6:53:85:7d:b5:44:
                    03:f6:ee:ae:23:aa:3e:d1:4b:c6:3e:c6:b0:b7:1b:
                    48:08:e2:b4:48:da:c8:cc:5c:1a:01:32:27:88:4f:
                    cf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:98:93:F3:AD:DD:59:5A:24:42:D1:51:C8:D6:D8:34:F8:CC:35:A4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/039893F3ADDD595A2442D151C8D6D834F8CC35A4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.48.0/22
                IPv6:
                  2804:4324::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267551

    Signature Algorithm: sha256WithRSAEncryption
         a5:7b:24:48:8f:f8:c9:4e:e5:16:29:cb:02:26:16:30:ff:61:
         64:68:35:68:40:4e:3b:53:af:7d:24:c1:db:bc:64:33:99:50:
         be:52:df:1e:6c:4d:74:aa:cb:85:82:91:ce:58:e4:d6:0f:6b:
         06:b4:a4:c1:9a:ed:3c:d5:0c:d9:f5:2d:38:86:20:1a:10:70:
         4a:b1:fc:79:e8:cf:55:82:b5:f6:9f:22:69:60:66:ba:ee:bf:
         87:26:19:79:ae:42:29:79:6a:bd:87:3f:2e:b2:cc:32:f8:4b:
         e7:e6:9f:58:39:83:e3:cb:bf:21:27:3f:f2:59:56:2b:ff:ed:
         97:36:be:e9:d7:1d:55:0c:bd:3f:4f:19:4c:b9:9a:33:05:90:
         04:8f:0d:9c:ba:14:1d:20:b4:13:4e:f6:8a:e6:b4:01:70:1b:
         0b:a6:70:9c:de:dd:db:72:96:6f:cc:ef:4a:08:83:8d:ae:4e:
         f4:76:d4:36:80:92:63:b7:c2:7a:df:21:24:b3:d6:4c:70:06:
         b1:40:38:48:36:3a:a6:6c:92:76:f4:d1:a7:a1:de:d3:b7:d3:
         cf:e4:f6:bc:6e:c4:5f:81:d2:37:e5:26:42:e8:5e:ae:57:d1:
         98:d5:4e:b9:83:b0:32:12:3b:34:a8:da:99:20:71:c1:cc:f5:
         f8:30:e0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org