Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/391DEBC26509E9D194B7EE34BAA518754DF93098.cer
File:                     391DEBC26509E9D194B7EE34BAA518754DF93098.cer (raw, json)
Hash identifier:          XJ4b5O1gwP+iueSUySUHIlwIpWTZ5zhss0Be3DPE+OE=
Subject key identifier:   39:1D:EB:C2:65:09:E9:D1:94:B7:EE:34:BA:A5:18:75:4D:F9:30:98
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       40EE3B399AA620743EF62AF196BA5C6FD7610FDA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2j86wogT3NS2CYwhxDQLXwdEMC7BAXRqyT7sGsYWhodQ/0/391DEBC26509E9D194B7EE34BAA518754DF93098.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2j86wogT3NS2CYwhxDQLXwdEMC7BAXRqyT7sGsYWhodQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jun 2023 17:08:28 +0000
Certificate not after:    Thu 27 Jun 2024 17:13:28 +0000
Subordinate resources:    AS: 269161
                          IP: 45.181.36.0/22
                          IP: 2804:6058::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ee:3b:39:9a:a6:20:74:3e:f6:2a:f1:96:ba:5c:6f:d7:61:0f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 29 17:08:28 2023 GMT
            Not After : Jun 27 17:13:28 2024 GMT
        Subject: CN=391DEBC26509E9D194B7EE34BAA518754DF93098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:fe:89:22:fc:3a:3f:c8:03:52:b2:3f:06:
                    6d:69:14:d8:54:45:19:d5:a2:8d:db:76:40:12:bb:
                    8c:a8:be:2a:9f:3f:41:36:be:18:5a:7b:63:72:90:
                    56:16:21:d6:91:26:c9:8c:e0:1d:f9:bb:5f:30:9f:
                    2c:6c:65:7d:07:9d:37:17:22:61:f1:45:19:0a:bc:
                    21:d2:51:0c:01:b7:21:68:1c:61:bf:10:60:9b:97:
                    88:5c:26:77:8a:89:d5:d8:51:c0:b7:92:17:4a:7a:
                    49:92:bc:cb:fe:63:1b:5d:a4:18:00:0d:59:e0:88:
                    ad:19:32:e0:b2:a9:8e:0a:3e:b9:c6:4b:f7:93:21:
                    34:4f:d4:93:aa:c1:5d:8a:4d:8f:89:2d:78:8f:3d:
                    51:32:d3:31:3a:1f:09:4e:31:d0:3b:28:d9:31:35:
                    7a:65:15:a0:8a:d2:12:bf:2c:2f:b4:f2:0f:ed:0e:
                    21:cb:34:e6:cd:18:9f:44:92:02:c0:63:18:bf:e2:
                    a4:79:fe:a2:59:5c:59:9e:4d:15:95:74:d6:13:16:
                    64:f5:02:e9:c8:b3:91:d3:c7:cc:61:68:af:1d:38:
                    f2:d8:33:6d:f4:3d:49:68:d9:b6:14:6b:51:6e:4e:
                    65:c2:ea:c1:35:31:ba:69:3b:bb:5d:9f:34:7a:6d:
                    72:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:1D:EB:C2:65:09:E9:D1:94:B7:EE:34:BA:A5:18:75:4D:F9:30:98
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2j86wogT3NS2CYwhxDQLXwdEMC7BAXRqyT7sGsYWhodQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2j86wogT3NS2CYwhxDQLXwdEMC7BAXRqyT7sGsYWhodQ/0/391DEBC26509E9D194B7EE34BAA518754DF93098.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.36.0/22
                IPv6:
                  2804:6058::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269161

    Signature Algorithm: sha256WithRSAEncryption
         b0:f5:5f:9c:44:24:be:4a:6e:a8:3a:e1:e9:5b:09:4b:90:a3:
         f2:0b:11:4a:bd:b5:ac:2b:e5:f4:75:7d:93:e9:69:f4:27:07:
         22:3d:0a:46:82:60:56:d0:e1:14:5f:78:67:e7:3c:8c:34:0a:
         08:69:5a:cf:8f:79:56:bf:57:0e:8a:8f:0c:78:18:ff:5c:e2:
         78:ff:71:66:74:72:82:2b:de:63:2b:96:3b:52:b1:1b:78:bc:
         f6:f9:0c:be:10:e9:e2:63:b5:95:55:a4:2d:c1:ea:9b:b0:16:
         b3:71:44:b4:cd:34:16:da:4a:ef:97:eb:45:19:6d:35:9f:d4:
         1d:b5:e8:c2:c2:95:5d:c6:85:36:ae:66:17:af:4c:e9:ea:9e:
         ac:ae:70:c0:9e:b2:31:5d:52:97:cc:5d:ed:45:8d:1b:49:98:
         48:e5:85:aa:ff:13:81:79:53:c3:08:f9:cb:63:ad:c8:f6:a6:
         ab:72:bc:44:64:ff:0f:17:b9:0a:96:67:dd:49:b6:b0:34:0a:
         fa:e6:f2:a7:e4:3c:35:48:7f:fb:c5:91:43:22:6f:13:79:33:
         9d:65:94:2a:af:98:0d:a8:d1:0a:6b:aa:8c:96:ea:21:0a:eb:
         3f:a6:60:5c:60:83:d6:6c:da:2c:89:6e:e9:39:a0:fb:b5:cc:
         d2:69:63:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:23 2024 by rpki-client on console-ams.rpki-client.org