Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.cer
File:                     03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.cer (raw, json)
Hash identifier:          hmBMxRLWG4g/AaMaQy9xPDrWb4aIZSMotHthmbgiTI8=
Subject key identifier:   03:B5:96:26:AA:92:EA:80:7A:90:3D:1E:AA:B0:E0:EA:4F:9F:18:A3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       35219A463041624AA74944A79CEFD86B0CF22B1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 05:55:21 +0000
Certificate not after:    Thu 20 Feb 2025 06:00:21 +0000
Subordinate resources:    AS: 262749
                          IP: 189.89.80.0/20
                          IP: 2804:184::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:21:9a:46:30:41:62:4a:a7:49:44:a7:9c:ef:d8:6b:0c:f2:2b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 05:55:21 2024 GMT
            Not After : Feb 20 06:00:21 2025 GMT
        Subject: CN=03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b9:7a:e5:04:5d:83:0a:c5:e9:80:0f:08:38:
                    e5:13:a7:c1:32:8a:b8:33:f6:97:51:50:f6:c2:3a:
                    d3:31:70:df:e4:8d:f7:e6:f4:1e:09:1c:71:a7:16:
                    0a:b6:2d:9e:ef:c3:fe:ab:4e:36:cb:6a:61:b4:52:
                    d0:ab:0c:1f:13:4f:92:c1:52:7b:0b:59:6c:03:2a:
                    f7:e3:d4:64:0a:8d:3a:78:5b:e4:71:a3:73:cf:b3:
                    01:48:01:c7:13:51:5a:1f:77:cf:34:b1:02:14:9b:
                    d7:ef:8d:bd:9b:46:58:17:0a:f8:31:41:ad:6c:fc:
                    99:d3:c3:ba:b5:7a:42:fc:79:a7:48:87:88:26:fa:
                    02:92:63:c8:24:99:8c:57:a5:ec:be:76:c0:e2:0b:
                    cc:d7:73:a2:89:f0:f3:29:7c:a5:f7:4c:53:2a:2c:
                    4a:bb:9a:04:93:bf:e1:71:1a:f9:f4:21:6f:c4:1b:
                    54:83:04:0b:1b:bc:27:96:f2:40:38:10:2a:ad:05:
                    e3:fa:1b:5b:dd:7e:21:e5:a5:7f:c3:1f:02:2e:eb:
                    c6:67:51:a0:1a:06:3f:74:cd:4f:4e:05:65:85:19:
                    f7:d3:ca:ac:58:3e:e3:12:e9:46:e5:de:f5:ac:fd:
                    79:3b:62:57:21:96:9d:2d:ed:dc:96:fa:6d:42:e4:
                    70:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:B5:96:26:AA:92:EA:80:7A:90:3D:1E:AA:B0:E0:EA:4F:9F:18:A3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/1/03B59626AA92EA807A903D1EAAB0E0EA4F9F18A3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.80.0/20
                IPv6:
                  2804:184::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262749

    Signature Algorithm: sha256WithRSAEncryption
         3c:7e:89:e2:c6:2c:39:88:81:10:3e:ae:46:0c:6d:64:67:ac:
         f6:87:27:ba:8b:73:f1:c8:86:63:b2:de:55:16:80:75:76:ed:
         65:81:dc:44:29:aa:98:26:ec:7f:c5:3d:b3:76:1d:e7:0a:f6:
         dd:48:4d:69:1a:21:c2:07:0c:a4:3e:8b:a7:bd:90:3c:0e:cc:
         89:4f:36:cb:42:a9:22:ee:98:d2:7a:4c:f6:c4:71:0e:b5:e6:
         fd:41:d1:9f:ac:ae:5e:f8:57:d7:a3:7a:b0:59:70:b1:76:36:
         9a:5f:36:5c:96:ab:39:f1:d0:cb:8f:6e:6a:e0:0e:e4:98:29:
         e9:df:0a:42:a1:15:fc:0a:8e:63:33:32:9c:77:5a:04:66:a4:
         cc:f1:b0:01:f8:f9:86:98:0b:a3:ea:5e:e0:b4:64:70:3d:54:
         88:2a:5a:61:8c:65:29:72:f7:b5:5e:20:b4:30:be:95:b7:bd:
         da:9a:87:6c:87:57:28:e7:7c:38:2d:56:48:d0:5d:f7:01:b3:
         ee:3e:ed:de:d3:43:c8:2b:d6:69:79:56:5d:e2:9b:e9:24:99:
         00:46:6d:90:67:50:6e:ae:42:19:32:26:4d:fb:5b:55:26:52:
         48:d6:63:1c:8c:46:2b:c2:d1:51:1e:7f:45:8d:28:4a:a5:6e:
         e3:f8:af:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org