Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/329EE7F3E4FBC75671BCC8C48CA2F7C1A230B85A.cer
File:                     329EE7F3E4FBC75671BCC8C48CA2F7C1A230B85A.cer (raw, json)
Hash identifier:          Ub+lQa5Q+aDNFe86rv95hTYC1svB003OMrIGQxwg5aE=
Subject key identifier:   32:9E:E7:F3:E4:FB:C7:56:71:BC:C8:C4:8C:A2:F7:C1:A2:30:B8:5A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       735E7FF4D49B6DFFA81D64AC23B2533B0C0CC5BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/329EE7F3E4FBC75671BCC8C48CA2F7C1A230B85A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 02 Oct 2023 13:27:00 +0000
Certificate not after:    Mon 30 Sep 2024 13:32:00 +0000
Subordinate resources:    AS: 264248
                          IP: 138.118.60.0/22
                          IP: 2804:24ec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5e:7f:f4:d4:9b:6d:ff:a8:1d:64:ac:23:b2:53:3b:0c:0c:c5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  2 13:27:00 2023 GMT
            Not After : Sep 30 13:32:00 2024 GMT
        Subject: CN=329EE7F3E4FBC75671BCC8C48CA2F7C1A230B85A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:eb:b2:bd:24:94:4e:5c:8f:53:71:54:82:18:
                    4c:5a:04:83:74:0b:d4:ab:8e:89:49:48:af:da:8b:
                    4c:27:66:a2:71:27:d7:06:4c:c9:e8:5a:b8:86:4e:
                    ad:08:cb:79:dd:d0:41:6a:3b:4d:59:00:52:c0:ed:
                    d5:84:cd:cb:d6:cb:77:e8:9c:2d:0f:04:ec:6a:8a:
                    e4:90:4a:07:81:5c:16:15:ad:1f:2c:39:a2:ed:4b:
                    f0:ac:69:eb:58:f0:94:5f:31:53:07:9c:64:ea:01:
                    e3:20:06:6f:8b:12:cd:00:fa:90:a5:ba:b3:50:b8:
                    5f:57:c1:b2:93:92:0a:9a:27:70:57:42:f4:23:88:
                    97:e2:55:04:72:98:99:5f:76:bf:eb:4f:21:c7:29:
                    36:a1:a8:5a:9c:75:c5:09:dc:ea:14:68:47:28:15:
                    48:ca:b7:ba:56:96:08:cc:0e:6a:95:9a:a1:db:58:
                    6f:77:60:70:81:16:46:77:88:98:64:56:86:63:b5:
                    da:98:b6:8d:f5:c0:7f:14:90:b8:71:6d:57:9e:06:
                    c3:31:85:46:14:1c:4d:19:e7:0e:16:26:fd:3a:b5:
                    89:75:a4:65:8c:f0:07:78:c8:2b:18:48:3a:59:91:
                    17:da:94:58:7c:1a:6a:cd:d5:6e:4b:06:06:e6:b6:
                    2d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:9E:E7:F3:E4:FB:C7:56:71:BC:C8:C4:8C:A2:F7:C1:A2:30:B8:5A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/329EE7F3E4FBC75671BCC8C48CA2F7C1A230B85A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.60.0/22
                IPv6:
                  2804:24ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264248

    Signature Algorithm: sha256WithRSAEncryption
         6c:40:fc:c7:1d:1c:8d:06:2b:d4:2d:eb:aa:57:0d:06:1c:e2:
         5c:06:e9:61:b3:a8:67:1e:ac:24:ac:9b:34:8c:52:b4:7a:b0:
         22:88:7a:1f:a0:ac:f6:5b:29:9a:f7:76:65:88:92:81:a8:83:
         09:c7:cb:81:7d:60:70:c5:20:59:56:35:c6:08:2c:b4:1d:58:
         3e:49:33:91:6e:cb:89:51:b7:25:89:82:e7:02:a6:37:a3:5c:
         8b:da:87:07:45:6d:29:c6:9f:53:4b:44:9e:87:09:a2:84:c2:
         57:15:85:bc:f1:19:42:b5:b0:bd:1f:a7:73:3c:d5:8b:c5:32:
         fb:27:13:33:0f:c9:24:9f:9a:07:7c:c2:78:a2:03:b0:d9:eb:
         42:fd:f8:fc:81:e2:e1:51:b7:2b:d3:a7:79:53:d0:87:19:b7:
         5b:e5:8e:8f:fd:2e:c9:24:52:a5:ad:17:f5:e1:df:f2:80:f8:
         fe:4f:1d:ef:e7:1c:dd:22:54:34:8a:6c:5f:11:d5:8a:3a:98:
         b7:82:59:31:c7:b8:a2:a9:39:0b:62:39:28:02:ca:73:c5:ad:
         87:37:0f:95:5c:c8:93:8a:62:2f:1b:3e:80:d7:70:6d:0e:ef:
         61:30:da:cc:66:3f:d2:8c:79:21:89:d5:d7:e4:a1:53:49:be:
         00:7e:59:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org