Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/03EC8988694A8AF5CA30CF11A817D548CF1FA024.cer
File:                     03EC8988694A8AF5CA30CF11A817D548CF1FA024.cer (raw, json)
Hash identifier:          bLRqGyECNne0OtU8928kGHAhR08rY6Q1sDKvArpK8Zs=
Subject key identifier:   03:EC:89:88:69:4A:8A:F5:CA:30:CF:11:A8:17:D5:48:CF:1F:A0:24
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       45AB4230D1EB616CF22F56107EE6B3AE4004C918
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/03EC8988694A8AF5CA30CF11A817D548CF1FA024.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 16:37:26 +0000
Certificate not after:    Mon 20 May 2024 16:42:26 +0000
Subordinate resources:    AS: 262777
                          IP: 45.175.116.0/22
                          IP: 45.235.192.0/22
                          IP: 131.255.48.0/22
                          IP: 138.219.208.0/22
                          IP: 168.121.188.0/22
                          IP: 170.80.180.0/22
                          IP: 177.93.176.0/21
                          IP: 177.128.248.0/21
                          IP: 186.233.16.0/21
                          IP: 2804:814::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ab:42:30:d1:eb:61:6c:f2:2f:56:10:7e:e6:b3:ae:40:04:c9:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 22 16:37:26 2023 GMT
            Not After : May 20 16:42:26 2024 GMT
        Subject: CN=03EC8988694A8AF5CA30CF11A817D548CF1FA024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:76:00:dd:e4:fb:f3:38:df:4a:65:e3:41:f5:
                    a3:c7:33:a3:f6:a3:c9:5c:9b:1b:47:6c:37:1b:3c:
                    22:84:81:d8:ed:b8:2e:cf:f7:c1:94:6f:04:20:ba:
                    e0:3f:e1:a4:fa:5a:90:68:61:23:4c:bd:4e:ce:ca:
                    f4:f8:98:a5:12:7f:ef:4f:f8:d2:9e:55:e2:18:1b:
                    40:25:24:5e:5e:19:6e:e5:34:76:24:9c:f6:42:b4:
                    19:6d:53:ac:e7:3b:59:df:a4:32:52:67:df:e7:37:
                    8c:2e:52:c6:0d:eb:5d:e6:53:2b:eb:1b:27:34:6c:
                    a0:bc:da:46:9c:c2:d2:55:f7:3f:0b:fd:1c:23:05:
                    7c:bf:f1:25:c9:24:49:96:14:e1:ca:0f:95:a1:82:
                    44:82:87:4b:dc:31:2a:0e:4a:70:f7:4e:88:a2:0e:
                    dc:ca:2d:15:65:c9:c1:20:07:bb:66:83:5c:ea:0b:
                    76:2c:ad:15:00:41:2f:63:6d:fe:62:9c:b0:35:21:
                    92:47:ec:ae:0f:a0:45:84:0f:30:f1:8c:cb:45:ef:
                    5a:59:4b:68:e5:99:73:f0:3e:2c:2e:69:cd:c9:b7:
                    e6:47:3a:0b:e8:2d:ad:f8:4e:4b:37:67:f9:f2:93:
                    e1:b9:08:03:94:fa:5e:95:81:5f:a9:ea:ce:61:a1:
                    61:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:EC:89:88:69:4A:8A:F5:CA:30:CF:11:A8:17:D5:48:CF:1F:A0:24
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/1/03EC8988694A8AF5CA30CF11A817D548CF1FA024.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.116.0/22
                  45.235.192.0/22
                  131.255.48.0/22
                  138.219.208.0/22
                  168.121.188.0/22
                  170.80.180.0/22
                  177.93.176.0/21
                  177.128.248.0/21
                  186.233.16.0/21
                IPv6:
                  2804:814::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262777

    Signature Algorithm: sha256WithRSAEncryption
         97:d8:ab:2d:8b:7b:1e:33:55:d8:35:81:dc:93:03:27:0a:aa:
         9f:d3:b2:ba:af:c4:c2:d7:52:d0:e1:35:6c:3e:d0:b1:09:10:
         f6:6d:40:70:9b:50:32:dc:a8:ec:b7:71:22:c6:09:46:2c:49:
         ae:f4:b8:b8:3b:3a:c2:29:72:b4:79:41:c7:76:8f:b1:2e:b4:
         3e:98:19:72:5c:a8:13:9c:ca:5f:7f:07:c9:f1:4b:d4:bb:e3:
         df:fd:36:17:33:2b:0b:08:87:04:7d:dc:cb:3a:3d:b4:0b:a7:
         a9:13:3a:77:79:41:90:ec:da:0c:0a:3f:18:50:9b:90:cb:15:
         61:65:4b:85:74:4f:ba:72:c8:61:4e:d3:78:12:d2:cb:fe:45:
         a1:00:e3:a7:0e:88:23:bc:8a:01:30:f1:5b:2e:3d:25:92:2d:
         c7:3e:30:d8:41:05:92:56:b6:7f:54:0e:8d:67:bc:f7:c8:22:
         1e:96:8b:ef:30:ee:a6:49:fd:0c:ad:9b:76:67:fe:54:14:57:
         1f:d3:14:64:31:34:35:ac:3b:8f:39:8a:5d:3e:1c:d4:8d:0a:
         fa:21:70:db:dc:cd:6d:74:a8:76:8a:e4:73:45:6f:16:85:ac:
         b6:d2:e5:be:ba:b7:73:52:ea:37:e4:10:b1:5d:de:71:c6:83:
         a5:ae:5b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org