Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
File:                     03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer (raw, json)
Hash identifier:          O+h+Bh0YRPq76Tm2TkXE4dVjDY7Pbaep0LXAKZQZTZ4=
Subject key identifier:   03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0C06FED9CDA0102715AD85CBAD84BE54F2F040AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 10:43:11 +0000
Certificate not after:    Thu 12 Sep 2024 10:48:11 +0000
Subordinate resources:    AS: 263482
                          IP: 170.83.212.0/22
                          IP: 189.84.44.0/22
                          IP: 191.242.216.0/22
                          IP: 2804:1288::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:06:fe:d9:cd:a0:10:27:15:ad:85:cb:ad:84:be:54:f2:f0:40:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 14 10:43:11 2023 GMT
            Not After : Sep 12 10:48:11 2024 GMT
        Subject: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2c:54:5e:e7:01:d1:90:f2:dd:4e:08:dc:5e:
                    bc:3f:ee:cc:51:de:cd:ef:a3:e4:39:a7:1a:16:3c:
                    58:f4:ce:13:46:f6:18:88:dc:64:b3:3c:d3:e2:21:
                    07:cb:a9:ea:9d:2a:69:31:e4:11:a9:ac:6d:c4:ce:
                    d9:01:4c:26:bb:68:3f:d8:87:6e:90:de:2d:aa:2e:
                    26:0c:5d:0d:8e:27:b8:39:5e:a1:a6:7f:52:b5:4a:
                    48:a3:a8:b0:f6:d5:f0:92:44:50:33:2f:96:79:83:
                    39:7f:1a:d1:70:bf:6e:42:18:d2:4d:fb:e2:33:67:
                    3f:e1:f9:39:3f:a3:05:75:b0:cd:46:af:24:08:9f:
                    78:a8:f1:ed:f6:dc:e1:24:dd:5a:d9:fc:23:01:a1:
                    e5:ba:59:0e:cc:7f:9f:f3:39:9a:c1:1d:ac:42:6a:
                    64:63:d5:0a:01:d0:9e:8f:82:79:57:06:0d:31:67:
                    7e:1d:ca:a7:a8:5e:5f:1b:33:18:53:6c:8b:2b:94:
                    96:3a:74:92:4c:9a:4c:53:94:55:ae:30:f7:2c:69:
                    e6:1c:b1:dc:ce:80:ad:6f:97:e9:8d:84:1d:ca:59:
                    ab:6c:4f:eb:5e:07:04:55:34:9a:90:b0:ec:a7:53:
                    38:12:c3:c2:74:98:27:77:af:c9:91:7c:4a:e7:70:
                    11:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.212.0/22
                  189.84.44.0/22
                  191.242.216.0/22
                IPv6:
                  2804:1288::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263482

    Signature Algorithm: sha256WithRSAEncryption
         3f:65:b3:db:90:f0:1a:2a:2a:7b:45:8a:ea:14:c2:a3:3e:9e:
         bf:c6:1f:3d:72:ff:e7:14:14:be:33:f1:77:a0:89:84:a0:8a:
         a0:2a:83:e8:f6:4f:b6:07:37:aa:d8:93:88:6c:ca:4b:3e:4e:
         ca:f3:87:1d:cd:a7:06:e9:90:79:8b:b8:19:2d:94:bd:89:0d:
         03:5b:9a:39:eb:ed:70:f4:2d:ac:28:cc:db:21:f2:66:54:73:
         34:d5:7d:a6:24:79:6a:8f:08:d3:0f:7e:08:b7:b2:13:94:6f:
         65:42:4a:60:95:04:d9:21:dc:53:d4:61:4b:0a:b2:03:eb:bd:
         0a:e4:ca:e8:c4:14:53:2f:46:8e:b8:ea:c4:45:7b:33:a8:a6:
         46:25:4b:e1:2d:c6:e6:e1:d1:3d:a4:ef:6b:be:b8:46:9b:8d:
         14:c1:41:47:6a:98:d7:18:3d:31:27:77:ad:d4:6d:80:2f:6a:
         99:f7:f2:b3:be:74:b1:7d:02:c4:49:21:5f:cf:2f:a5:ad:37:
         c6:f0:d5:9c:52:41:ac:57:a9:ad:b1:0c:42:a4:4e:f6:8c:b4:
         b9:e1:9b:0b:8d:90:41:82:2a:8b:89:d4:48:8d:e1:70:0b:9e:
         ef:e0:24:b5:c5:09:04:ec:01:57:a8:8e:b3:63:52:9d:fa:28:
         f8:56:1c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org