Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/35EEC59508A5401DDACC50AEE85763BE780448EC.cer
File:                     35EEC59508A5401DDACC50AEE85763BE780448EC.cer (raw, json)
Hash identifier:          KreYZFlZqHG5vKzAdjFSi/s++kUDMxK4mr7dwY09Cdg=
Subject key identifier:   35:EE:C5:95:08:A5:40:1D:DA:CC:50:AE:E8:57:63:BE:78:04:48:EC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       38AE72924BD8FC1FDEC573B04EB8EBDB5ED64E6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/0/35EEC59508A5401DDACC50AEE85763BE780448EC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 01 Jul 2023 10:43:50 +0000
Certificate not after:    Sat 29 Jun 2024 10:48:50 +0000
Subordinate resources:    AS: 264415
                          IP: 131.221.20.0/22
                          IP: 2804:1e38::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ae:72:92:4b:d8:fc:1f:de:c5:73:b0:4e:b8:eb:db:5e:d6:4e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  1 10:43:50 2023 GMT
            Not After : Jun 29 10:48:50 2024 GMT
        Subject: CN=35EEC59508A5401DDACC50AEE85763BE780448EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:47:2c:a9:9b:7e:49:34:e5:84:12:de:75:71:
                    db:76:6a:c5:26:7c:21:89:ee:44:87:89:74:4b:c1:
                    a6:62:c6:fd:30:d2:11:82:8c:6f:41:f0:2b:65:54:
                    c6:c1:e0:ec:2f:6e:3f:c3:02:0b:36:c5:74:f0:b9:
                    9b:4f:21:f7:ea:b9:1e:22:b0:7b:03:54:e2:d0:8c:
                    d6:e7:d9:64:98:eb:66:8d:28:1a:0e:96:6d:a2:b1:
                    90:bc:00:eb:15:f2:45:2c:67:84:65:13:7a:79:be:
                    79:ee:02:1a:89:d7:7c:a9:5c:17:ee:72:af:bf:7c:
                    f7:4b:1f:0b:0a:97:aa:47:23:1d:ce:a7:6f:db:76:
                    d7:48:12:c5:ad:c1:d6:20:df:f1:96:2e:d3:30:ff:
                    35:0c:4e:24:a3:dd:96:c5:08:a2:17:3f:02:58:e6:
                    9d:1e:ce:5f:f1:f2:5a:70:1d:b0:b6:bf:b0:21:4c:
                    bd:65:0d:1b:b0:7d:f1:66:08:ab:a2:8f:09:a2:7b:
                    3e:c0:b5:8b:e2:b1:3e:52:b1:15:5f:41:ad:88:ac:
                    d4:34:f6:b5:81:5c:90:b5:03:29:7a:b7:b2:c2:3d:
                    c9:f7:d1:c0:45:2d:c7:33:50:f2:ee:c5:6e:b1:87:
                    d3:49:06:18:68:c8:14:e9:51:89:46:f4:0d:ed:6e:
                    b5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:EE:C5:95:08:A5:40:1D:DA:CC:50:AE:E8:57:63:BE:78:04:48:EC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/0/35EEC59508A5401DDACC50AEE85763BE780448EC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.20.0/22
                IPv6:
                  2804:1e38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264415

    Signature Algorithm: sha256WithRSAEncryption
         72:2d:98:ff:7c:4d:76:50:97:ef:b8:59:e7:1c:3c:73:dd:e7:
         f4:18:3f:9e:d2:b9:93:30:a7:fe:24:e8:1f:17:84:2f:03:f7:
         94:c0:25:6f:fe:63:9e:b2:d5:74:d6:29:ba:60:38:69:ac:b1:
         c9:95:a7:60:a9:39:6b:29:de:0d:41:80:19:46:90:db:fa:fe:
         b2:1e:f2:eb:b1:34:3b:f5:97:e9:c9:58:11:7e:9d:95:f9:e5:
         68:cb:09:9d:86:77:9f:a4:49:06:bb:ee:f2:21:1b:b1:b4:be:
         77:33:47:6a:fa:6f:7b:ca:65:29:8a:a6:8c:c5:4c:29:5f:bd:
         9e:bf:b8:8f:7e:d6:54:c9:1e:92:78:47:d5:84:c3:4c:5f:d4:
         ef:01:92:b5:66:a5:f9:95:f9:3a:0d:b4:7e:23:f4:2b:ac:64:
         76:25:61:70:5f:9a:b1:ae:7d:de:58:3b:aa:69:b5:6b:43:51:
         2b:ab:f1:77:68:55:dc:c2:67:c6:fb:c9:b7:9d:00:96:44:10:
         fd:23:a4:60:93:96:11:80:e4:10:96:e3:cd:15:ad:55:ea:8d:
         16:e8:90:e3:ee:47:59:63:fa:9b:0f:3b:9b:16:4b:4d:f0:4d:
         09:bc:cc:6a:02:fc:57:00:c4:69:87:58:42:29:f5:cd:ed:93:
         ff:4c:f0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org