Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/03CB08C60808A4C85337447A986A83078CD3CC42.cer
File:                     03CB08C60808A4C85337447A986A83078CD3CC42.cer (raw, json)
Hash identifier:          ePpIcs8IRAzSgUKXBF1+/Y1u0R8lvzhsye/Ct4IVA5g=
Subject key identifier:   03:CB:08:C6:08:08:A4:C8:53:37:44:7A:98:6A:83:07:8C:D3:CC:42
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       57BC066F27F7BFE44BA2D78EDB5C5208380155DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/0/03CB08C60808A4C85337447A986A83078CD3CC42.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 17:42:11 +0000
Certificate not after:    Thu 20 Feb 2025 17:47:11 +0000
Subordinate resources:    AS: 264146
                          IP: 138.97.88.0/22
                          IP: 2804:232c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:bc:06:6f:27:f7:bf:e4:4b:a2:d7:8e:db:5c:52:08:38:01:55:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 17:42:11 2024 GMT
            Not After : Feb 20 17:47:11 2025 GMT
        Subject: CN=03CB08C60808A4C85337447A986A83078CD3CC42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:66:c4:e5:6d:e7:88:cd:d6:cc:aa:2e:7c:dc:
                    cf:b0:94:37:21:03:67:10:56:e0:7b:94:54:b9:fe:
                    91:44:44:11:62:c0:80:33:a3:51:48:5b:aa:53:bd:
                    f6:16:31:97:39:26:4c:52:a9:79:e4:ff:72:6c:70:
                    3e:99:32:ea:af:7b:1c:66:8e:d3:28:9e:fa:d1:aa:
                    48:e6:5f:f3:07:d6:57:96:dd:83:a2:bf:dc:5d:05:
                    41:53:ab:46:3c:69:b4:42:a6:a5:4b:e9:73:be:0f:
                    a1:96:ec:39:b8:9d:fb:e6:fc:72:b2:97:22:5e:c2:
                    b4:89:0e:0a:ee:00:a6:f3:1a:28:1f:ae:b1:ca:39:
                    a4:fd:aa:a7:50:e6:49:2c:a8:57:86:7d:d4:42:ea:
                    5d:eb:9c:3b:12:8d:a2:3e:70:80:71:36:53:ce:34:
                    7e:dc:a1:fd:98:a7:59:57:a6:7c:34:9a:d1:08:3e:
                    2a:2c:25:b6:1d:c1:23:15:01:c9:c6:fc:31:f2:57:
                    d0:98:28:22:21:36:57:b2:2a:ca:6d:81:0a:a8:a4:
                    ea:53:51:8c:b3:f5:b8:b7:aa:cc:dd:dc:fd:19:ea:
                    bc:3a:10:87:76:e1:9d:d4:f5:75:63:70:23:c0:5c:
                    54:43:26:d1:ba:0e:3f:0e:a3:e5:15:e3:c7:5d:ab:
                    15:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:CB:08:C6:08:08:A4:C8:53:37:44:7A:98:6A:83:07:8C:D3:CC:42
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/0/03CB08C60808A4C85337447A986A83078CD3CC42.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.88.0/22
                IPv6:
                  2804:232c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264146

    Signature Algorithm: sha256WithRSAEncryption
         6d:ac:67:3e:c0:9c:81:78:67:0c:3a:94:5f:6f:26:04:5f:76:
         e0:ea:5f:d3:46:6d:18:b3:2e:e6:03:47:fd:ca:39:7b:f7:cc:
         8f:02:28:f7:3c:78:76:ee:a7:a3:9e:bc:f4:73:af:4b:3e:7b:
         a4:ee:2d:4f:a8:e3:71:c8:08:26:72:7e:73:d8:a1:cd:b3:c7:
         c7:c3:f9:d0:77:f9:5f:f2:2a:e3:e2:f4:bf:aa:0e:39:65:ab:
         44:71:40:28:cc:70:b5:2a:44:9b:68:9a:f3:33:76:0d:f6:e9:
         65:8a:5b:6c:f3:86:41:fd:9d:63:17:f4:25:c7:c2:5c:7e:69:
         cf:22:56:e9:ad:55:df:65:0d:49:41:d5:03:28:48:07:d6:8a:
         58:12:ad:86:58:e9:e6:5b:07:0b:63:7f:65:33:11:67:71:9a:
         c3:0e:db:47:c5:79:3b:ee:bd:be:82:22:76:0d:04:19:06:fd:
         95:65:78:d6:b4:3a:13:08:4c:b6:d0:9d:58:43:cc:e9:75:12:
         c1:b1:c1:18:03:4f:a4:5f:21:e5:7d:8b:8a:32:32:4a:ef:f6:
         d7:24:1e:f4:26:d5:ce:d7:22:da:e5:be:79:af:c0:61:27:90:
         a8:7e:87:4c:f3:2a:a6:53:f5:06:0b:41:cb:d6:cf:bd:79:d3:
         29:2b:4d:ca
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUV7wGbyf3v+RLoteO21xSCDgBVdowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjIxNzQyMTFaFw0yNTAyMjAxNzQ3MTFaMDMxMTAvBgNV
BAMTKDAzQ0IwOEM2MDgwOEE0Qzg1MzM3NDQ3QTk4NkE4MzA3OENEM0NDNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ZsTlbeeIzdbMqi583M+wlDch
A2cQVuB7lFS5/pFERBFiwIAzo1FIW6pTvfYWMZc5JkxSqXnk/3JscD6ZMuqvexxm
jtMonvrRqkjmX/MH1leW3YOiv9xdBUFTq0Y8abRCpqVL6XO+D6GW7Dm4nfvm/HKy
lyJewrSJDgruAKbzGigfrrHKOaT9qqdQ5kksqFeGfdRC6l3rnDsSjaI+cIBxNlPO
NH7cof2Yp1lXpnw0mtEIPiosJbYdwSMVAcnG/DHyV9CYKCIhNleyKsptgQqopOpT
UYyz9bi3qszd3P0Z6rw6EId24Z3U9XVjcCPAXFRDJtG6Dj8Oo+UV48ddqxUZAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQDywjGCAikyFM3
RHqYaoMHjNPMQjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81SDFGVDJteTRNcGlSRUc2eFVOTnVMS3ZGRVZadng1MWd6
M0poR3VyaFlXaS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNUgxRlQybXk0TXBpUkVHNnhVTk51TEt2RkVWWnZ4NTFn
ejNKaEd1cmhZV2kvMC8wM0NCMDhDNjA4MDhBNEM4NTMzNzQ0N0E5ODZBODMwNzhD
RDNDQzQyLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKKYVgwDQQCAAIwBwMF
ACgEIywwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAfSMA0GCSqGSIb3DQEBCwUA
A4IBAQBtrGc+wJyBeGcMOpRfbyYEX3bg6l/TRm0Ysy7mA0f9yjl798yPAij3PHh2
7qejnrz0c69LPnuk7i1PqONxyAgmcn5z2KHNs8fHw/nQd/lf8irj4vS/qg45ZatE
cUAozHC1KkSbaJrzM3YN9ullilts84ZB/Z1jF/Qlx8JcfmnPIlbprVXfZQ1JQdUD
KEgH1opYEq2GWOnmWwcLY39lMxFncZrDDttHxXk77r2+giJ2DQQZBv2VZXjWtDoT
CEy20J1YQ8zpdRLBscEYA0+kXyHlfYuKMjJK7/bXJB70JtXO1yLa5b55r8BhJ5Co
fodM8yqmU/UGC0HL1s+9edMpK03K
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org