Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0A3A31D037BC13B6DB6142C143ABA064239D481A.cer
File:                     0A3A31D037BC13B6DB6142C143ABA064239D481A.cer (raw, json)
Hash identifier:          2X/F1NkKWaDq2QLBKxfDRRh/DyOcCRN8pnDC4Yfqwwg=
Subject key identifier:   0A:3A:31:D0:37:BC:13:B6:DB:61:42:C1:43:AB:A0:64:23:9D:48:1A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       438F41FFDE33D708140FBB841AC803F5260C251F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/0A3A31D037BC13B6DB6142C143ABA064239D481A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Jun 2023 23:23:01 +0000
Certificate not after:    Mon 17 Jun 2024 23:28:01 +0000
Subordinate resources:    AS: 265066
                          IP: 168.121.200.0/22
                          IP: 170.79.96.0/22
                          IP: 170.231.112.0/22
                          IP: 179.125.20.0/22
                          IP: 2804:3244::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8f:41:ff:de:33:d7:08:14:0f:bb:84:1a:c8:03:f5:26:0c:25:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 19 23:23:01 2023 GMT
            Not After : Jun 17 23:28:01 2024 GMT
        Subject: CN=0A3A31D037BC13B6DB6142C143ABA064239D481A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5f:0e:62:1e:18:11:44:d8:fa:06:ab:5c:3c:
                    9e:c5:5b:ff:17:94:bc:c3:ec:b9:d6:98:fc:8b:da:
                    fb:e9:4e:5a:94:45:0b:13:46:c8:70:3e:23:e5:96:
                    a9:a1:71:d7:af:36:a7:33:af:5d:6e:24:cf:81:7a:
                    25:72:66:ee:0b:0c:b2:c7:61:ee:6b:09:86:cd:21:
                    de:2c:d8:5a:c1:05:d1:a3:d2:e9:11:c5:6f:98:d0:
                    19:20:53:a2:79:e4:4a:f9:4a:a7:6d:a9:34:45:ff:
                    db:b3:06:e4:95:23:60:4b:7d:eb:60:21:8c:f3:10:
                    21:32:24:ee:a8:11:c4:2d:f1:ca:0d:56:79:03:80:
                    96:52:48:5a:cf:2c:78:cd:d3:03:47:51:d4:5a:18:
                    af:19:c3:79:72:64:75:de:c1:39:5e:a7:9f:f7:5b:
                    d5:c4:b3:60:f3:86:2c:ca:ab:23:88:e0:5b:89:7a:
                    91:06:ed:f8:61:2e:5c:df:cb:c7:ea:3f:46:a0:1a:
                    4e:18:aa:31:f7:22:40:62:06:90:dd:88:b8:f4:f2:
                    57:02:4a:c3:90:30:cf:ba:0c:0f:49:6c:2f:ea:c6:
                    7a:4d:d2:ea:6c:f3:c8:7a:d4:1e:35:92:2e:7f:06:
                    c2:73:b3:29:31:53:1c:40:f6:88:eb:dc:6d:0f:80:
                    b1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0A:3A:31:D0:37:BC:13:B6:DB:61:42:C1:43:AB:A0:64:23:9D:48:1A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/0A3A31D037BC13B6DB6142C143ABA064239D481A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.200.0/22
                  170.79.96.0/22
                  170.231.112.0/22
                  179.125.20.0/22
                IPv6:
                  2804:3244::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265066

    Signature Algorithm: sha256WithRSAEncryption
         96:ba:2c:f0:dd:99:6f:48:c7:0e:55:7d:e6:15:8c:3e:8a:45:
         f8:da:37:49:da:fa:2f:85:7a:a2:34:ec:13:68:f8:c8:f4:6c:
         d2:99:7d:b7:cf:e4:3b:c0:4f:2b:43:2d:ca:91:e2:67:ad:cf:
         3a:2a:17:7e:26:81:52:d0:23:89:f3:4b:a4:ea:ef:eb:fb:54:
         4b:92:b3:65:ac:1c:3f:b2:a7:d9:1f:82:d7:79:20:36:3a:54:
         18:74:b2:11:25:90:3e:12:1e:28:5f:22:95:1a:5f:6a:91:29:
         1a:b9:c0:67:87:34:de:99:d4:5f:93:48:01:cc:53:e4:4f:7e:
         62:8d:e4:16:20:24:00:73:bf:3c:12:ac:a0:5d:1d:86:67:04:
         74:e4:65:84:c0:5a:9e:91:62:a8:8e:41:b0:e4:8e:cb:db:03:
         8a:c8:e9:f5:74:31:d3:f8:9e:e1:77:70:ee:ec:1f:25:6c:0e:
         92:fd:11:ef:15:cf:84:09:18:d5:c4:ef:82:09:4b:79:28:65:
         92:9c:0e:6c:f1:43:de:bb:ad:5b:4e:d2:03:2e:37:f4:6e:b4:
         99:8a:08:a1:7e:aa:ff:d0:e5:90:c7:39:a8:3d:81:1b:b0:8a:
         cc:85:2f:78:e1:58:db:e6:c5:96:fe:46:aa:31:f5:77:f1:9c:
         0b:f4:4a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org