Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/03BA31A787BD80FCF2490BD375CCA939046D0F3D.cer
File:                     03BA31A787BD80FCF2490BD375CCA939046D0F3D.cer (raw, json)
Hash identifier:          iq3xai5fYDQyYRoj+Wt+bed7PyDHjjCe2Af65H+2uUs=
Subject key identifier:   03:BA:31:A7:87:BD:80:FC:F2:49:0B:D3:75:CC:A9:39:04:6D:0F:3D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       589A68C1ECC6087466A1967C5BDBD84CDBC738
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H9gppQYt8hJokKxNVzjiBTRqYQTnWhoJfZszXaei2i6W/0/03BA31A787BD80FCF2490BD375CCA939046D0F3D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H9gppQYt8hJokKxNVzjiBTRqYQTnWhoJfZszXaei2i6W/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Oct 2022 17:42:14 +0000
Certificate not after:    Mon 09 Oct 2023 17:47:14 +0000
Subordinate resources:    AS: 270334
                          IP: 189.113.180.0/22
                          IP: 2804:6a68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:9a:68:c1:ec:c6:08:74:66:a1:96:7c:5b:db:d8:4c:db:c7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 10 17:42:14 2022 GMT
            Not After : Oct  9 17:47:14 2023 GMT
        Subject: CN=03BA31A787BD80FCF2490BD375CCA939046D0F3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:90:5e:63:41:71:4d:12:57:45:12:86:49:b7:
                    4f:18:d3:02:7b:d5:c3:9b:6d:7a:da:d8:6d:54:aa:
                    03:f6:ec:d1:d1:b9:c8:58:dc:94:ab:51:11:62:4a:
                    2b:42:1d:0b:f2:67:e4:aa:b8:64:0c:b7:31:1e:b4:
                    41:69:8e:ca:af:58:44:9f:3e:1a:0b:b0:8f:4b:f2:
                    08:0a:3d:48:4e:e0:7e:00:27:56:5f:66:7b:05:d9:
                    78:3e:a9:f5:f5:a8:41:ce:35:ce:32:12:d7:ea:0f:
                    96:16:76:a6:1f:6e:61:d5:d9:b3:70:5f:fa:1f:72:
                    c7:02:64:42:a8:2b:d1:a0:35:1b:f9:ec:84:ca:18:
                    e8:ca:7a:55:94:bd:1e:49:aa:aa:5e:a6:72:a7:1f:
                    e3:2b:f8:f2:6c:a5:24:42:92:b3:5b:07:0d:ff:81:
                    b4:f1:7d:35:c2:9a:12:8e:38:e1:8f:f5:86:b4:5c:
                    32:79:7d:29:8b:26:74:73:bb:6c:a7:18:a8:2f:d1:
                    be:60:25:e2:1c:19:e4:99:4b:b7:f2:04:da:5c:a6:
                    e7:54:9d:c9:08:30:d4:2a:b5:fa:85:47:98:c4:56:
                    f3:07:14:ae:7e:84:33:61:42:ba:d0:54:5e:40:b6:
                    62:4d:21:b3:0f:b7:7b:f2:ff:9a:e7:7a:c6:90:4e:
                    0e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:BA:31:A7:87:BD:80:FC:F2:49:0B:D3:75:CC:A9:39:04:6D:0F:3D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H9gppQYt8hJokKxNVzjiBTRqYQTnWhoJfZszXaei2i6W/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H9gppQYt8hJokKxNVzjiBTRqYQTnWhoJfZszXaei2i6W/0/03BA31A787BD80FCF2490BD375CCA939046D0F3D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.180.0/22
                IPv6:
                  2804:6a68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270334

    Signature Algorithm: sha256WithRSAEncryption
         0c:42:ba:c6:4d:66:b2:4e:28:10:fe:9d:f3:7e:07:83:af:34:
         14:0e:9c:6b:17:ec:ad:96:f1:80:59:25:a0:8f:a7:f4:70:1a:
         a9:a7:15:d1:d3:5a:98:c2:00:8f:db:91:88:9e:76:e0:ee:d5:
         15:22:bc:8d:b6:38:51:2a:4d:3f:07:4a:18:a4:d3:b8:f8:07:
         ba:11:16:44:d8:5e:7c:4e:32:5a:38:ee:4b:69:cb:89:fe:7b:
         57:1a:d0:91:e3:bf:9d:a5:a3:25:5d:62:24:7f:da:13:5b:ac:
         d3:92:77:26:f3:be:ec:53:2c:37:e7:2a:54:3c:b1:76:9f:20:
         ad:ca:aa:ba:5f:9a:17:ae:16:57:fd:6a:ea:6d:d5:95:f0:98:
         99:2f:6e:42:0f:9e:71:96:61:b5:2f:e3:3c:74:a1:0d:01:26:
         55:de:6d:20:67:0d:b8:60:67:8c:d5:2d:98:4f:5b:59:e3:cc:
         e0:cd:eb:ba:35:d4:89:59:97:8c:91:4c:69:6f:3a:b3:ae:78:
         a1:ab:7e:c8:13:74:e2:ec:c7:42:db:e6:b6:b9:54:20:77:aa:
         2c:f0:b3:f3:95:71:9c:cf:2c:c9:80:6e:54:fc:cb:c8:69:0c:
         58:06:5e:f0:50:42:45:8f:df:49:f2:7e:8c:86:0c:0f:1c:99:
         27:e8:76:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org