Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/03D2FF5BD5B097EEBD7BDFC27C9FDD107CDB5217.cer
File:                     03D2FF5BD5B097EEBD7BDFC27C9FDD107CDB5217.cer (raw, json)
Hash identifier:          F52YrZs52bAAyKV5pPxibYPK/EzzZB0FvcUushjZNsE=
Subject key identifier:   03:D2:FF:5B:D5:B0:97:EE:BD:7B:DF:C2:7C:9F:DD:10:7C:DB:52:17
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2CCDCF2D7CEBB9C29EA2C745B883247F6C204E25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/03D2FF5BD5B097EEBD7BDFC27C9FDD107CDB5217.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 01 Mar 2023 13:22:23 +0000
Certificate not after:    Wed 28 Feb 2024 13:27:23 +0000
Subordinate resources:    AS: 267942
                          IP: 45.166.4.0/22
                          IP: 2804:5590::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:cd:cf:2d:7c:eb:b9:c2:9e:a2:c7:45:b8:83:24:7f:6c:20:4e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  1 13:22:23 2023 GMT
            Not After : Feb 28 13:27:23 2024 GMT
        Subject: CN=03D2FF5BD5B097EEBD7BDFC27C9FDD107CDB5217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:35:b6:39:d4:98:1f:ce:50:c8:3b:8f:54:
                    3a:03:ba:4e:99:d2:d5:7b:96:77:4c:6e:71:8a:55:
                    7f:4d:6e:2a:b8:83:1e:3e:a3:7e:70:f0:19:6e:50:
                    a4:33:cf:a7:1c:de:0d:5c:c9:ec:00:13:d8:26:0b:
                    a1:b5:31:5f:9e:3f:63:b4:0f:f6:fe:10:34:ae:be:
                    b0:e6:cf:62:64:36:62:9c:c5:28:33:79:af:7d:5f:
                    63:aa:f8:b0:1f:ae:e6:32:44:2c:b8:a0:68:80:97:
                    f1:79:b7:bc:0c:12:4a:69:20:b2:05:88:83:d8:4a:
                    ed:15:53:ae:a1:7f:3f:b2:05:b5:f9:61:d1:53:99:
                    aa:72:8a:bd:35:0e:08:fc:78:50:02:52:cd:4f:c0:
                    bb:b9:05:95:dd:3a:f6:32:0d:81:b4:03:0f:ac:8d:
                    d8:87:e3:e4:5d:e6:d9:2f:27:37:d8:ec:67:02:6d:
                    82:9a:b0:85:18:19:c5:57:08:32:89:8e:a0:ff:21:
                    40:44:e2:d0:6a:f4:38:51:0b:a3:37:1d:0e:63:41:
                    ab:99:76:6e:d8:03:ba:02:9d:fe:2f:27:e5:a3:f4:
                    fb:d7:e9:cc:e9:2e:4e:7d:18:56:df:88:de:d4:03:
                    cd:57:07:93:50:7a:8b:6f:be:db:28:63:74:7a:f3:
                    c7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:D2:FF:5B:D5:B0:97:EE:BD:7B:DF:C2:7C:9F:DD:10:7C:DB:52:17
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/03D2FF5BD5B097EEBD7BDFC27C9FDD107CDB5217.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.4.0/22
                IPv6:
                  2804:5590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267942

    Signature Algorithm: sha256WithRSAEncryption
         b5:71:e1:44:98:dc:fc:e0:07:c6:fc:8c:3e:8c:ed:87:3a:0f:
         f6:a1:0c:67:a3:e4:93:44:f6:47:32:1f:7e:22:1b:b5:ab:31:
         99:41:50:cf:c3:f1:87:4b:32:cf:e1:38:c7:51:1a:ae:9f:d2:
         aa:54:a5:df:7e:31:f1:f1:80:8c:e1:b3:23:a1:bb:98:20:e4:
         88:03:78:a6:1e:5a:57:db:34:74:88:25:0b:ac:eb:61:ec:d8:
         59:87:fd:f9:cf:7a:03:e2:d4:18:6b:17:16:a3:97:cd:76:89:
         9c:a3:5c:b6:69:0b:29:a7:fd:69:8c:84:17:74:1d:de:18:ad:
         c0:77:24:a9:21:a2:a4:a7:1c:ad:6f:ef:e6:e9:6a:e1:5b:7d:
         09:a0:55:b5:19:f0:f8:43:1d:e5:0d:53:4f:24:e7:31:c4:ed:
         2e:9e:f3:41:5d:37:2c:a9:d8:cd:0a:e2:aa:0b:c0:3b:fb:55:
         61:c6:79:9b:e8:0f:5a:87:52:46:57:00:7a:02:be:ac:25:1f:
         a7:65:36:8b:26:75:0d:fe:5b:0c:78:51:e9:63:00:b4:f8:e5:
         a9:bb:0c:62:bc:a6:c8:ff:32:07:57:fa:54:d1:94:ce:eb:44:
         51:72:49:2d:3f:a7:c0:de:83:42:d0:59:28:ea:79:9f:3f:21:
         63:3d:45:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org