Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.cer
File:                     329861E01AE7B51B7D7965F1537F72FFCB2506D3.cer (raw, json)
Hash identifier:          5JnYZc/FVYRYLoKEIPn9fCuQ9m33/2p4Dm2z3rW6oqs=
Subject key identifier:   32:98:61:E0:1A:E7:B5:1B:7D:79:65:F1:53:7F:72:FF:CB:25:06:D3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2D05ACD2B3234ECE8D547F6BEFD0E973596EB9D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Sep 2023 12:32:32 +0000
Certificate not after:    Fri 13 Sep 2024 12:37:32 +0000
Subordinate resources:    AS: 263903
                          IP: 138.204.140.0/22
                          IP: 170.247.112.0/22
                          IP: 2804:2778::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:05:ac:d2:b3:23:4e:ce:8d:54:7f:6b:ef:d0:e9:73:59:6e:b9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 15 12:32:32 2023 GMT
            Not After : Sep 13 12:37:32 2024 GMT
        Subject: CN=329861E01AE7B51B7D7965F1537F72FFCB2506D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:da:f1:7f:ad:5d:d1:63:c2:ac:b6:b7:f8:
                    d6:7b:b5:f2:5c:e8:d0:97:f9:be:64:5f:6e:8f:f8:
                    87:e7:07:4e:e0:a8:f6:6c:45:db:22:29:b3:52:46:
                    0f:fa:c1:a1:47:5f:2c:70:92:3c:f3:65:72:f4:ad:
                    bc:a3:96:c8:1c:54:da:6e:43:44:df:21:b3:f1:af:
                    12:22:3d:65:b2:b2:e5:0d:a9:62:9e:48:ac:e2:47:
                    75:c8:65:e7:59:6b:50:60:f1:02:31:51:cc:da:75:
                    34:bd:c1:33:5d:e6:f3:1c:7a:c5:0b:e7:af:07:78:
                    da:97:87:2e:07:53:58:92:b0:4d:bb:8f:1e:1e:24:
                    c2:95:7e:64:3e:05:d9:d3:5b:27:c3:99:78:fa:58:
                    b9:84:79:8b:1a:cc:ef:50:17:f3:ff:69:10:86:ec:
                    33:5b:8e:71:0c:13:21:88:12:0b:1c:97:45:7e:6b:
                    cb:99:16:79:fa:42:02:06:4b:f4:4b:fd:ad:ee:33:
                    36:30:02:6a:90:7a:c8:cc:78:2b:ef:81:6c:96:ca:
                    c3:8d:bf:09:ea:6a:1c:7e:34:70:00:c0:69:9e:79:
                    e6:23:f2:ec:d2:23:de:be:31:e9:f4:68:5e:d0:c7:
                    2a:9b:c8:3b:a2:91:34:28:79:6b:a2:d2:14:4a:bb:
                    38:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:98:61:E0:1A:E7:B5:1B:7D:79:65:F1:53:7F:72:FF:CB:25:06:D3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.140.0/22
                  170.247.112.0/22
                IPv6:
                  2804:2778::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263903

    Signature Algorithm: sha256WithRSAEncryption
         b0:81:51:a9:e3:67:ad:8f:25:2e:26:67:c7:25:56:9a:87:24:
         a6:59:58:f5:28:5f:1e:68:a4:d9:9a:13:df:f9:40:15:bb:dc:
         21:9a:ee:2a:69:d0:8e:84:b4:05:30:a4:f0:32:cd:2e:9b:80:
         ef:c7:52:74:0a:63:1e:4f:48:54:1b:7b:d0:24:df:0d:10:4d:
         94:ea:a8:29:4e:9e:c7:1c:52:1d:2e:d2:2e:f0:e8:c1:ee:3f:
         e2:a4:e3:21:89:3a:16:15:77:cd:72:da:9e:32:d1:75:04:2e:
         05:78:c2:81:41:66:d7:0e:d2:31:da:2d:73:88:22:ec:68:4c:
         29:f0:61:6e:0f:24:c0:62:ba:10:1d:f3:ef:db:2a:c9:86:06:
         62:5e:1c:9e:e3:e0:03:8c:bd:3a:12:ad:65:89:15:67:28:56:
         93:6a:6d:37:b9:c5:e0:c7:41:a7:08:81:c7:7c:f3:05:5d:68:
         f8:9b:03:43:bc:be:21:f3:76:a6:4d:65:6e:2e:f0:1c:40:a9:
         de:36:63:26:64:bd:96:00:54:86:99:68:c6:64:ad:6c:54:e8:
         2c:8d:44:0a:bf:16:15:58:1f:b1:ba:72:31:67:f6:a8:d1:6d:
         79:07:0c:b8:81:59:b9:7b:b1:ad:fe:eb:bb:1f:5d:17:0d:71:
         f0:f4:f7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org