Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/32FD4DDA28599A952A3EE560885B397084F837C4.cer
File:                     32FD4DDA28599A952A3EE560885B397084F837C4.cer (raw, json)
Hash identifier:          zuR4Cl1aAM7Gr1xJWSTP4qPOXTuWD07cjnTwZVCny/s=
Subject key identifier:   32:FD:4D:DA:28:59:9A:95:2A:3E:E5:60:88:5B:39:70:84:F8:37:C4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       797452808A6128616E9BDC904DE380E57C2238B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/32FD4DDA28599A952A3EE560885B397084F837C4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Jun 2023 22:18:35 +0000
Certificate not after:    Mon 17 Jun 2024 22:23:35 +0000
Subordinate resources:    AS: 270838
                          IP: 189.39.180.0/22
                          IP: 2804:7230::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:74:52:80:8a:61:28:61:6e:9b:dc:90:4d:e3:80:e5:7c:22:38:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 19 22:18:35 2023 GMT
            Not After : Jun 17 22:23:35 2024 GMT
        Subject: CN=32FD4DDA28599A952A3EE560885B397084F837C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:d4:03:52:92:7e:56:af:47:41:d2:0c:a8:
                    6b:b7:e3:89:f5:1f:32:6b:e4:13:51:15:30:f6:26:
                    74:fc:a9:9e:44:ac:55:ce:b2:26:c7:7a:d9:b2:f2:
                    cf:3f:26:b0:a3:86:43:72:0b:fe:fb:6e:47:85:93:
                    e6:9f:0c:5f:8d:f7:09:ae:6f:01:c1:8f:02:96:9f:
                    c7:b4:79:b0:62:ae:7b:31:b3:12:23:17:6c:56:4d:
                    cd:e6:98:03:25:12:2a:f9:9a:28:94:6d:98:01:08:
                    92:c8:2c:df:41:76:6a:e5:76:4c:54:84:78:8d:55:
                    b4:1d:83:76:f3:39:24:1f:7e:79:95:ec:88:fc:f6:
                    b5:a7:f6:be:f1:f1:af:21:30:51:df:e0:90:73:1d:
                    4c:34:53:34:81:8a:9f:c4:f9:b8:8d:b2:5b:1e:b7:
                    40:66:f9:22:5a:fc:6c:04:5c:ca:a7:d0:ba:5a:ae:
                    b4:54:a4:fc:da:a3:11:9e:b2:f4:21:b2:54:53:28:
                    eb:28:11:56:ad:4a:80:36:c5:d3:ed:28:cd:9d:0e:
                    1b:95:75:d4:8c:49:82:03:64:a5:5a:84:74:8e:aa:
                    31:d0:54:c1:25:01:5c:0e:13:c5:44:20:33:06:04:
                    56:bc:4d:26:b4:6b:f7:d0:e9:e8:2c:38:70:d0:20:
                    31:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:FD:4D:DA:28:59:9A:95:2A:3E:E5:60:88:5B:39:70:84:F8:37:C4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/32FD4DDA28599A952A3EE560885B397084F837C4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.180.0/22
                IPv6:
                  2804:7230::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270838

    Signature Algorithm: sha256WithRSAEncryption
         ae:d9:8e:65:f5:b6:96:83:c5:9e:53:cc:98:f0:06:04:7a:2a:
         4c:5f:b2:b4:7b:76:53:7e:98:7c:0a:4a:73:cc:7d:31:7c:a3:
         a8:54:fe:23:83:dc:6e:21:8a:18:7f:22:98:a8:02:aa:16:ac:
         65:75:3d:43:36:71:fa:97:76:0d:d4:b8:40:ab:54:9e:f8:09:
         29:ed:a2:cb:44:2a:c9:ab:ad:e4:cc:a5:2d:74:1a:4f:7e:6e:
         d3:05:7a:9c:99:1d:6d:52:00:bb:80:90:e5:aa:66:92:4e:c1:
         a5:04:b8:b1:bc:6d:36:de:59:f5:6e:77:2e:d8:30:c1:40:7d:
         26:bd:0a:ef:54:b1:51:4f:fe:f9:1a:64:7f:bb:29:23:0a:d8:
         c3:35:7d:ba:79:f9:ef:38:c2:63:22:27:99:3f:8f:01:38:e0:
         d9:2e:c7:a8:ec:68:5f:97:f0:ed:43:51:10:ad:df:7a:5b:9b:
         93:98:c3:2e:b6:c6:e3:35:ce:c0:f5:3a:1f:5c:dc:71:9a:59:
         ef:f7:bb:9e:d7:2a:3d:33:0d:2a:4e:21:ea:21:e7:16:d6:a9:
         8e:34:4e:2f:01:16:de:4c:ea:d6:05:7c:6a:ff:fb:93:0f:2f:
         41:5b:d2:bf:7e:b9:3a:18:5e:a2:8e:a8:be:17:02:67:4d:aa:
         5d:a6:bd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org