Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/39001353DF34F0196E25E171DFBDFA059922EBF7.cer
File:                     39001353DF34F0196E25E171DFBDFA059922EBF7.cer (raw, json)
Hash identifier:          Fs4WKfOgFZEYWT702AuDFAvKAKuuqRU5RE45jN4qz/A=
Subject key identifier:   39:00:13:53:DF:34:F0:19:6E:25:E1:71:DF:BD:FA:05:99:22:EB:F7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       375A38CEE425B999F641B41B9FCEBA6D4FAC7783
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4JBEENoHEobzQf8LEbVdfEFELurAuG7rqQCfw51BR7Fy/0/39001353DF34F0196E25E171DFBDFA059922EBF7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4JBEENoHEobzQf8LEbVdfEFELurAuG7rqQCfw51BR7Fy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2023 19:22:40 +0000
Certificate not after:    Fri 15 Nov 2024 19:27:40 +0000
Subordinate resources:    AS: 267199
                          IP: 45.231.140.0/22
                          IP: 2804:49b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:5a:38:ce:e4:25:b9:99:f6:41:b4:1b:9f:ce:ba:6d:4f:ac:77:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 17 19:22:40 2023 GMT
            Not After : Nov 15 19:27:40 2024 GMT
        Subject: CN=39001353DF34F0196E25E171DFBDFA059922EBF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:59:16:77:22:da:6c:9d:07:84:41:bb:08:a7:
                    53:83:9b:c6:ed:77:2e:d4:f4:0b:9c:8a:9c:50:77:
                    40:1f:bb:bc:b1:b2:1d:9e:ae:89:27:8e:98:74:9e:
                    2b:c0:b5:64:66:79:76:5a:0f:6a:f1:69:4d:0a:e6:
                    56:8c:c0:1e:ee:c9:cc:1c:f1:a8:12:0e:cf:27:0d:
                    8d:0d:c9:e9:f0:94:37:83:8e:2e:b8:9e:d3:0b:4c:
                    4a:a2:21:d9:c4:d8:11:1c:86:67:57:6c:3a:52:db:
                    f6:47:54:4a:89:e5:9f:5a:95:5f:9b:c7:f2:be:5d:
                    73:2d:32:0e:14:45:15:63:10:3f:f7:6b:6b:c6:e1:
                    c3:b9:5e:59:7d:a4:7e:4b:61:7a:ed:c9:20:60:33:
                    2f:2b:03:5f:e6:60:65:de:7c:fc:99:95:09:82:78:
                    93:35:37:69:21:5a:b2:36:6d:97:2d:b1:94:ea:d0:
                    f5:70:2b:ed:5a:2b:e0:db:88:ca:b3:91:37:30:a6:
                    df:cb:46:0f:de:bd:c3:8e:76:6f:ec:57:4c:8e:6e:
                    48:f4:dc:19:90:2a:63:b7:60:4b:d3:ca:01:15:99:
                    ef:ca:c7:cb:4e:a3:38:e5:5d:94:6a:6b:70:38:8f:
                    ca:73:47:6a:32:80:ad:cf:ed:df:7f:12:27:55:ef:
                    42:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:00:13:53:DF:34:F0:19:6E:25:E1:71:DF:BD:FA:05:99:22:EB:F7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4JBEENoHEobzQf8LEbVdfEFELurAuG7rqQCfw51BR7Fy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4JBEENoHEobzQf8LEbVdfEFELurAuG7rqQCfw51BR7Fy/0/39001353DF34F0196E25E171DFBDFA059922EBF7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.140.0/22
                IPv6:
                  2804:49b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267199

    Signature Algorithm: sha256WithRSAEncryption
         4b:0a:a4:c4:13:5b:9f:6b:fc:b9:0a:5c:71:72:68:43:7e:b4:
         3b:ca:5e:f2:c3:e5:33:77:ca:25:f8:32:e9:eb:59:c4:ce:86:
         02:78:2e:f5:f0:cb:0d:38:a3:a8:f0:e8:e3:ee:61:45:f9:db:
         32:c4:0a:e9:74:73:5d:77:1d:ea:02:c9:38:e2:53:ef:39:30:
         0d:f9:d8:8b:ec:d0:e2:f6:f8:59:d6:ca:7e:77:3c:73:99:f2:
         58:37:80:d0:91:2a:f6:38:f7:bb:5d:7a:5a:1d:ed:0a:b5:7d:
         6a:71:21:e7:99:c3:a7:f2:6a:8d:a8:01:e2:16:50:4d:d6:3b:
         76:94:56:1c:2a:45:64:a7:a0:c1:87:28:26:9d:c1:35:86:fd:
         8c:8c:6c:51:1a:43:49:6c:c3:54:7a:c4:d2:c5:06:b7:f0:74:
         5b:d3:b8:e9:b0:75:f5:9b:79:ce:a5:65:a5:75:b6:69:86:df:
         fd:86:a4:bd:2a:85:25:19:ac:57:18:97:a0:b1:66:d1:15:c1:
         72:9b:c9:2d:c6:ba:b8:64:4e:a8:7c:1a:9b:10:6f:72:ff:b3:
         b8:84:e1:b7:56:e1:8f:54:e2:f8:aa:5f:83:16:d3:fa:4d:4d:
         c3:c9:16:74:d9:88:0e:b4:43:b7:1a:78:b0:f4:45:a5:96:ed:
         b4:6e:20:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:23 2024 by rpki-client on console-ams.rpki-client.org