Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/03D0BB3196FA38806A8E301A208B9222BAE61FDB.cer
File:                     03D0BB3196FA38806A8E301A208B9222BAE61FDB.cer (raw, json)
Hash identifier:          SoU0W/N5rse8pGEobjWRpFQueHzVWf6kdfp4OD080iE=
Subject key identifier:   03:D0:BB:31:96:FA:38:80:6A:8E:30:1A:20:8B:92:22:BA:E6:1F:DB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       77EAF8B8C8DAD0A7B16589AEEB85E8A16BFF66AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/03D0BB3196FA38806A8E301A208B9222BAE61FDB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 17:35:06 +0000
Certificate not after:    Mon 01 Apr 2024 17:40:06 +0000
Subordinate resources:    AS: 265111
                          IP: 170.254.192.0/22
                          IP: 2804:3304::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ea:f8:b8:c8:da:d0:a7:b1:65:89:ae:eb:85:e8:a1:6b:ff:66:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  3 17:35:06 2023 GMT
            Not After : Apr  1 17:40:06 2024 GMT
        Subject: CN=03D0BB3196FA38806A8E301A208B9222BAE61FDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:84:42:4e:3b:8a:ed:d7:12:95:4d:cf:49:27:
                    5b:55:1f:ae:04:06:32:7c:af:de:ea:b0:5c:24:a2:
                    77:ba:6c:73:ef:d6:d2:7a:61:6c:10:96:22:d7:47:
                    e7:e7:6a:b5:cc:3a:02:3f:cd:7b:d3:b8:72:df:40:
                    24:a7:0b:89:9a:a6:34:b8:d6:52:ab:ca:d4:cd:61:
                    86:b0:d2:c5:6c:0a:d8:f1:18:c9:d3:ea:ab:2a:fd:
                    d9:91:e8:fb:33:9c:0b:6b:50:aa:6a:d1:ba:9f:b8:
                    b4:72:0c:29:57:8b:5e:7d:ae:02:24:9f:81:03:af:
                    b5:8a:6b:ab:0c:62:63:a5:87:82:d1:e8:f2:3d:3d:
                    02:c6:e2:ba:ea:aa:d7:fd:39:2a:56:d3:d7:2c:17:
                    a9:dd:8b:99:46:b0:df:41:3d:d4:d5:d8:e7:a4:b3:
                    96:af:fe:c3:a6:b5:b5:bb:8c:78:2a:55:72:dd:fe:
                    b5:93:77:09:0a:5a:4a:8c:d8:ee:0b:07:f7:3a:da:
                    cd:08:97:11:7f:fd:6c:cf:4e:9d:85:54:7d:e8:66:
                    68:9d:c2:72:cc:c1:51:be:e7:5f:8c:de:2b:47:90:
                    eb:3b:86:9c:b9:e5:fb:0b:3d:b9:e7:26:b0:01:99:
                    57:a1:f0:0c:ae:72:65:2b:da:4e:6a:ca:51:c5:ed:
                    18:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:D0:BB:31:96:FA:38:80:6A:8E:30:1A:20:8B:92:22:BA:E6:1F:DB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/0/03D0BB3196FA38806A8E301A208B9222BAE61FDB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.192.0/22
                IPv6:
                  2804:3304::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265111

    Signature Algorithm: sha256WithRSAEncryption
         3d:50:c9:dc:80:eb:31:3e:e1:7a:56:52:65:9b:6a:79:a5:26:
         10:48:5b:56:ef:69:ce:dc:2d:7b:9d:e3:5a:ae:a2:25:ee:fe:
         0c:6b:48:6b:f0:f6:4d:46:81:0a:43:2a:61:d2:02:58:f0:1e:
         ae:6f:81:3e:5a:5b:7a:e2:d7:44:f4:b4:6c:1d:ac:23:72:88:
         74:85:c9:ca:0c:07:2f:cc:17:36:b6:e1:94:cf:51:d3:1d:8a:
         21:6f:c4:45:4e:64:bb:81:6e:9d:d6:01:6c:a2:a0:e2:86:f0:
         90:36:c4:45:67:b0:a1:7e:b7:3b:68:f9:dd:91:49:21:6c:d9:
         40:da:10:99:56:b1:f1:28:80:ea:d6:e8:dc:93:26:b4:3b:1a:
         90:5e:d9:3a:85:2e:b9:dc:2b:c6:be:8a:c7:88:26:89:53:58:
         06:78:aa:8c:bf:9d:f3:3d:4a:50:24:a8:78:66:e1:e5:a3:91:
         5d:96:55:be:78:82:16:40:bb:f3:82:cc:75:a9:5d:04:fa:f8:
         27:85:b3:70:fe:9f:53:8c:9c:45:19:37:1d:07:e2:72:20:b2:
         f3:33:fb:7e:16:be:df:d7:58:91:d2:35:30:b8:15:b9:27:ce:
         91:05:d5:77:ba:38:c4:96:5c:3d:f9:e9:3f:18:49:7b:97:1d:
         e7:14:47:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org