Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/139669CE7CA8ADCF2DB3DBD14BB289A02B54D634.cer
File:                     139669CE7CA8ADCF2DB3DBD14BB289A02B54D634.cer (raw, json)
Hash identifier:          idVTuHN8/ofl9ORTAIH3wBFFlilwPmpCbWHQsW3FMJM=
Subject key identifier:   13:96:69:CE:7C:A8:AD:CF:2D:B3:DB:D1:4B:B2:89:A0:2B:54:D6:34
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3B3CAF8AC963D0D8394AFBD9464C1C3504C27E29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/139669CE7CA8ADCF2DB3DBD14BB289A02B54D634.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Dec 2023 07:20:52 +0000
Certificate not after:    Fri 13 Dec 2024 07:25:52 +0000
Subordinate resources:    AS: 262346
                          IP: 138.97.0.0/22
                          IP: 143.202.224.0/22
                          IP: 170.150.100.0/22
                          IP: 177.125.160.0/21
                          IP: 177.125.204.0/22
                          IP: 179.107.56.0/21
                          IP: 2804:81c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3c:af:8a:c9:63:d0:d8:39:4a:fb:d9:46:4c:1c:35:04:c2:7e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 15 07:20:52 2023 GMT
            Not After : Dec 13 07:25:52 2024 GMT
        Subject: CN=139669CE7CA8ADCF2DB3DBD14BB289A02B54D634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:30:56:f3:4b:46:be:4d:7b:2f:60:82:d4:96:
                    f6:67:29:37:40:32:5f:93:72:5b:4e:c2:fc:b6:8e:
                    8a:94:96:12:95:10:4d:a7:7a:bb:e3:1f:8f:cf:33:
                    7d:67:5f:3d:94:eb:fc:ba:1d:2f:7f:29:d3:69:d8:
                    14:c0:67:6f:1b:e8:e2:ef:20:d4:db:e5:0d:1e:61:
                    7c:bb:a4:8b:39:2a:d7:3b:a2:74:95:62:ee:ea:35:
                    f3:ea:77:56:f4:6a:9a:fb:c3:eb:e2:36:50:3d:3b:
                    2c:55:7e:03:2e:ae:b3:5b:3b:57:b2:b4:bd:2a:21:
                    c6:f9:c4:0c:6c:42:cc:bc:fb:2d:e4:34:8d:d9:8d:
                    47:f4:5a:b0:5c:d5:ba:9a:6e:d7:25:4d:2e:f8:fd:
                    16:31:ec:f6:bf:b8:97:ab:74:22:d5:ae:d5:ee:97:
                    11:be:e1:2b:6a:9e:d0:c5:d3:b2:35:c0:06:8c:83:
                    0b:2e:77:68:56:17:23:21:8d:1b:b7:86:0b:ab:6d:
                    da:d1:f9:d6:0e:c2:79:59:d3:c9:49:f8:a2:26:bf:
                    f2:fd:ba:cb:17:7c:af:dc:15:d4:2b:6f:5e:9e:e4:
                    72:ea:16:70:be:ef:b0:96:e5:fb:4d:6e:d9:e4:6b:
                    f0:3b:a4:80:24:0e:12:41:7f:84:2e:35:fb:3e:2a:
                    5b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:96:69:CE:7C:A8:AD:CF:2D:B3:DB:D1:4B:B2:89:A0:2B:54:D6:34
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/139669CE7CA8ADCF2DB3DBD14BB289A02B54D634.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.0.0/22
                  143.202.224.0/22
                  170.150.100.0/22
                  177.125.160.0/21
                  177.125.204.0/22
                  179.107.56.0/21
                IPv6:
                  2804:81c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262346

    Signature Algorithm: sha256WithRSAEncryption
         b7:8e:73:e9:83:3c:09:9d:b3:75:16:3e:f4:3d:42:e9:bb:fa:
         9f:59:69:ca:95:6a:a8:44:09:59:43:eb:8c:01:92:45:54:db:
         78:f0:8b:a9:48:cf:4e:81:e7:cc:b7:7b:1b:4d:82:f4:4d:e5:
         34:97:ec:a7:38:db:a5:07:f1:eb:1d:52:fe:5a:b0:a1:18:ac:
         65:4f:25:6b:2c:50:10:69:54:6e:60:69:ca:44:82:6f:e5:d9:
         09:91:b4:47:d7:5c:a0:a6:e3:88:2f:3e:94:b6:a2:cc:04:62:
         65:db:01:f5:75:be:7d:0c:83:f2:35:84:8b:04:df:02:d7:d2:
         18:c4:d0:c0:10:75:fb:35:c0:af:1e:e3:b7:f4:7e:4b:6e:ae:
         21:fa:9a:4b:5f:d7:cd:32:34:2b:21:6e:e0:40:bc:e3:f6:de:
         0a:65:f6:84:08:a1:15:5b:15:17:3c:87:c6:fd:f9:22:09:a4:
         93:69:23:ed:7e:99:36:63:1b:6f:8c:60:c2:9f:b9:d2:36:4e:
         5d:f0:15:6e:d4:78:77:56:fa:0a:ef:27:ec:60:da:2d:ec:dc:
         5d:5a:82:bf:36:84:02:b7:24:77:e7:3c:de:bf:0e:7c:6c:34:
         cd:5b:7b:b3:73:7f:0d:de:cd:09:2c:a6:ae:9e:91:39:d3:fe:
         31:21:28:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org