Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/03BEE9946822B59F9B07BE9ADE06939720F115CA.cer
File:                     03BEE9946822B59F9B07BE9ADE06939720F115CA.cer (raw, json)
Hash identifier:          9LmLQ9njslGTtqqpuW5Ydd7l2P8o3tnN/Yu9Uua60Vk=
Subject key identifier:   03:BE:E9:94:68:22:B5:9F:9B:07:BE:9A:DE:06:93:97:20:F1:15:CA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       053DAA36915255FC49BFDD4FE6656264BA83DF81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/0/03BEE9946822B59F9B07BE9ADE06939720F115CA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 16 Mar 2024 15:50:04 +0000
Certificate not after:    Sat 15 Mar 2025 15:55:04 +0000
Subordinate resources:    AS: 268412
                          IP: 45.160.164.0/22
                          IP: 2804:50d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3d:aa:36:91:52:55:fc:49:bf:dd:4f:e6:65:62:64:ba:83:df:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 16 15:50:04 2024 GMT
            Not After : Mar 15 15:55:04 2025 GMT
        Subject: CN=03BEE9946822B59F9B07BE9ADE06939720F115CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:86:ad:ec:a2:7b:22:41:bb:42:f7:80:fd:4c:
                    fc:e8:b7:56:d5:6c:fa:de:2b:63:da:f6:99:d5:e4:
                    1c:f7:d6:dc:4a:54:6c:6d:d4:05:1d:da:34:14:c5:
                    06:61:6c:b6:71:db:2e:30:7a:26:91:5d:d3:66:2c:
                    bb:35:9c:3b:91:81:b3:eb:4e:20:7a:ed:5c:24:a8:
                    a6:eb:d6:03:a9:c8:fe:75:45:3a:9f:c9:0b:2f:05:
                    45:f2:b8:bb:e8:1c:e8:21:2f:f7:11:fa:73:d9:59:
                    0b:92:1a:f4:7c:9b:a7:ff:58:1a:a9:bb:ac:60:2e:
                    c3:45:84:09:c7:50:7f:c6:29:7c:e9:ce:31:7e:a3:
                    09:4c:63:4c:b6:28:69:e2:2c:e6:c5:89:e3:da:de:
                    ee:7f:fd:88:1c:26:5b:5c:44:6f:71:a4:1d:51:03:
                    b7:6b:0a:3f:2c:66:bc:9b:76:b7:64:ca:74:40:37:
                    51:27:26:15:ae:e1:b9:d0:41:8c:79:0e:bf:4f:54:
                    03:f7:23:77:8e:61:00:be:79:81:c7:f2:0b:6a:76:
                    f7:6b:57:df:dd:a4:1e:9b:23:26:8f:59:6e:8d:d4:
                    e2:5a:41:c1:27:91:ab:26:51:47:dc:d6:21:97:40:
                    08:13:73:83:a3:ff:44:da:b6:30:c9:eb:d6:74:e6:
                    b9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:BE:E9:94:68:22:B5:9F:9B:07:BE:9A:DE:06:93:97:20:F1:15:CA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/0/03BEE9946822B59F9B07BE9ADE06939720F115CA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.164.0/22
                IPv6:
                  2804:50d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268412

    Signature Algorithm: sha256WithRSAEncryption
         50:d4:29:ae:1c:8c:d0:26:ad:1d:b2:c3:4c:a9:62:29:7a:58:
         2b:d7:f0:fb:49:23:a5:cf:b3:57:54:b3:34:c3:76:bf:90:d0:
         3c:14:a1:6a:eb:a5:2c:0e:20:19:99:78:04:4c:16:91:dc:3f:
         19:6d:c5:02:1d:74:9a:bf:af:68:cb:75:e8:69:7e:ca:be:36:
         b1:ab:e3:e5:73:e5:a5:6c:4a:73:c6:d0:4c:8f:1e:51:23:e4:
         9a:53:45:86:fb:1f:9c:ca:57:6b:cb:0b:b3:df:f3:9f:50:e1:
         58:7a:d9:7d:5f:e2:3b:80:6d:7d:28:fe:fb:91:ed:28:c7:47:
         ec:29:72:68:05:6b:6d:c8:1c:85:98:a7:8f:b0:d5:12:e0:20:
         f4:40:ae:98:70:2b:18:87:a8:1a:3d:a6:10:2c:1c:bc:d5:7b:
         c0:51:f8:47:d6:d4:6f:96:a5:0b:1c:3a:fb:e0:6b:78:44:12:
         d9:38:f9:be:3d:2e:02:92:da:92:06:c9:c9:b5:e9:c7:71:05:
         84:c6:92:75:f0:44:b1:bc:aa:96:d0:7b:2f:1b:1e:e2:b1:7b:
         75:2b:b3:ea:e8:14:46:00:6b:3a:63:34:18:a5:ae:5a:95:2c:
         26:ed:55:c8:63:ec:56:0a:1e:68:dc:09:82:65:4e:54:3b:be:
         bf:cc:c6:c9
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUBT2qNpFSVfxJv91P5mViZLqD34EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMTYxNTUwMDRaFw0yNTAzMTUxNTU1MDRaMDMxMTAvBgNV
BAMTKDAzQkVFOTk0NjgyMkI1OUY5QjA3QkU5QURFMDY5Mzk3MjBGMTE1Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWhq3sonsiQbtC94D9TPzot1bV
bPreK2Pa9pnV5Bz31txKVGxt1AUd2jQUxQZhbLZx2y4weiaRXdNmLLs1nDuRgbPr
TiB67VwkqKbr1gOpyP51RTqfyQsvBUXyuLvoHOghL/cR+nPZWQuSGvR8m6f/WBqp
u6xgLsNFhAnHUH/GKXzpzjF+owlMY0y2KGniLObFiePa3u5//YgcJltcRG9xpB1R
A7drCj8sZrybdrdkynRAN1EnJhWu4bnQQYx5Dr9PVAP3I3eOYQC+eYHH8gtqdvdr
V9/dpB6bIyaPWW6N1OJaQcEnkasmUUfc1iGXQAgTc4Oj/0TatjDJ69Z05rm/AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQDvumUaCK1n5sH
vpreBpOXIPEVyjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83M0NQMjVZN3F5dTR0azdIa0w2TUtwNlJBSFl4aDVYc3NK
aUhKSjdXMjVoSC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNzNDUDI1WTdxeXU0dGs3SGtMNk1LcDZSQUhZeGg1WHNz
SmlISko3VzI1aEgvMC8wM0JFRTk5NDY4MjJCNTlGOUIwN0JFOUFERTA2OTM5NzIw
RjExNUNBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItoKQwDQQCAAIwBwMF
ACgEUNAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBh8MA0GCSqGSIb3DQEBCwUA
A4IBAQBQ1CmuHIzQJq0dssNMqWIpelgr1/D7SSOlz7NXVLM0w3a/kNA8FKFq66Us
DiAZmXgETBaR3D8ZbcUCHXSav69oy3XoaX7Kvjaxq+Plc+WlbEpzxtBMjx5RI+Sa
U0WG+x+cyldrywuz3/OfUOFYetl9X+I7gG19KP77ke0ox0fsKXJoBWttyByFmKeP
sNUS4CD0QK6YcCsYh6gaPaYQLBy81XvAUfhH1tRvlqULHDr74Gt4RBLZOPm+PS4C
ktqSBsnJtenHcQWExpJ18ESxvKqW0HsvGx7isXt1K7Pq6BRGAGs6YzQYpa5alSwm
7VXIY+xWCh5o3AmCZU5UO76/zMbJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org