Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/03E39EC0FFE2234936676920EBDA6411B8F8FEFC.cer
File:                     03E39EC0FFE2234936676920EBDA6411B8F8FEFC.cer (raw, json)
Hash identifier:          /QcfP+IHbvydAhmQ0+nhW/LKBX/k3DiqUL8Nf9C89iw=
Subject key identifier:   03:E3:9E:C0:FF:E2:23:49:36:67:69:20:EB:DA:64:11:B8:F8:FE:FC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       596DA0B07938F56DBD3F5A079637C5BB96BC92FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/03E39EC0FFE2234936676920EBDA6411B8F8FEFC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Apr 2023 15:06:15 +0000
Certificate not after:    Fri 26 Apr 2024 15:11:15 +0000
Subordinate resources:    AS: 271492
                          IP: 181.224.76.0/22
                          IP: 2804:7c60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:6d:a0:b0:79:38:f5:6d:bd:3f:5a:07:96:37:c5:bb:96:bc:92:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 28 15:06:15 2023 GMT
            Not After : Apr 26 15:11:15 2024 GMT
        Subject: CN=03E39EC0FFE2234936676920EBDA6411B8F8FEFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:86:fe:2e:21:05:b9:5e:38:66:bf:34:0d:ac:
                    43:ff:6d:1a:7d:e6:3c:8a:75:07:d4:b2:19:1c:98:
                    ce:d9:a6:06:a7:b7:70:97:03:bb:c1:5e:bd:8e:fb:
                    a1:8e:18:5e:9d:2a:d6:02:ff:b9:e5:d7:ab:e5:04:
                    cd:d7:a7:33:71:e6:98:10:39:b0:ea:dc:9a:bb:46:
                    ca:24:21:c2:12:f7:59:7a:6b:23:e0:38:a8:81:15:
                    36:9e:4b:56:00:78:1f:c5:aa:33:56:ac:34:3a:36:
                    bf:68:a9:6f:a9:a9:93:35:be:ba:10:d5:bb:5b:c3:
                    82:03:69:12:4c:d6:64:bf:d6:16:47:4a:de:b9:58:
                    3d:22:c4:ab:48:19:97:75:2d:a6:e5:4c:83:0e:cb:
                    c7:cd:bb:25:f7:8b:d2:5a:fb:f0:6c:0c:9d:22:b5:
                    24:7c:c8:7b:e3:f5:47:41:c0:da:f6:0f:a7:fa:e1:
                    58:f4:62:a3:e6:6f:46:b8:10:19:9b:73:93:db:71:
                    02:c9:78:4b:18:b7:9d:bc:a3:a8:5a:4e:e4:38:bd:
                    5a:0b:69:89:3b:50:c1:7a:c7:25:88:25:21:b8:23:
                    1e:d8:f2:f6:4a:5a:f7:e0:fd:c3:26:e5:ab:99:65:
                    f4:e6:a0:da:00:79:9d:9d:83:bc:6a:f3:93:66:61:
                    bf:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:E3:9E:C0:FF:E2:23:49:36:67:69:20:EB:DA:64:11:B8:F8:FE:FC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BHizJEZx9UDzjCQGJpFtcauRiB7aHb1LbnZakmmUb847/0/03E39EC0FFE2234936676920EBDA6411B8F8FEFC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.76.0/22
                IPv6:
                  2804:7c60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271492

    Signature Algorithm: sha256WithRSAEncryption
         84:ac:25:2e:05:de:26:3e:c9:37:ed:59:cb:71:e4:44:66:bd:
         e5:80:f0:a1:d3:1c:87:1d:25:ba:28:e0:6d:dd:71:7e:be:b4:
         b1:b1:c7:50:5f:41:9e:84:21:ce:8c:52:24:06:e4:c4:46:05:
         4f:b0:ce:6b:e3:93:53:6b:b1:01:6e:3f:eb:de:df:28:b0:3d:
         7b:7b:5c:4e:1e:c4:19:13:1a:12:54:c1:80:4d:cb:b4:a0:55:
         da:b1:a1:e1:52:03:fb:ed:4f:5f:11:0b:64:8a:fb:5f:20:df:
         42:eb:17:c1:85:19:2a:ec:b2:82:c2:5c:b9:10:01:b8:eb:a5:
         92:39:45:ba:63:4f:66:9c:77:6e:14:5b:f1:a7:1a:10:80:04:
         63:3d:4c:bc:e7:fe:aa:c6:4c:b3:d8:f1:f5:ff:1f:eb:28:46:
         b7:15:2b:12:92:44:90:7f:86:bb:aa:32:54:64:b3:11:1c:47:
         53:b3:99:98:77:b8:fc:da:a0:19:28:74:6c:1d:1f:95:c9:36:
         cb:3e:f1:8c:23:45:f2:ad:de:2d:04:a0:71:a7:3a:bc:66:2f:
         e0:e0:2c:ad:d4:d5:18:7d:c2:6a:b3:45:94:5d:ed:80:5c:8a:
         04:67:ab:6e:56:b5:d9:84:86:ec:a7:56:33:62:ec:a6:b8:a5:
         1d:5d:41:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org