Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3930933E4296AF76E0E11F4522F1496F141DD1F7.cer
File:                     3930933E4296AF76E0E11F4522F1496F141DD1F7.cer (raw, json)
Hash identifier:          3bs949F1e61rrd3ACJdwIr7yhfKNlG5BzArAupiKXAI=
Subject key identifier:   39:30:93:3E:42:96:AF:76:E0:E1:1F:45:22:F1:49:6F:14:1D:D1:F7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       04244A11A6FD92B5E01C334C0C020F764A2152B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/0/3930933E4296AF76E0E11F4522F1496F141DD1F7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Oct 2023 15:55:11 +0000
Certificate not after:    Mon 14 Oct 2024 16:00:11 +0000
Subordinate resources:    AS: 270383
                          IP: 190.89.168.0/22
                          IP: 2804:6b2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:24:4a:11:a6:fd:92:b5:e0:1c:33:4c:0c:02:0f:76:4a:21:52:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 16 15:55:11 2023 GMT
            Not After : Oct 14 16:00:11 2024 GMT
        Subject: CN=3930933E4296AF76E0E11F4522F1496F141DD1F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ad:d6:c0:cf:86:d7:b2:bf:bb:c3:c2:bb:99:
                    81:80:f9:18:22:fb:a2:96:ce:95:a9:b2:3c:0e:65:
                    ca:15:7c:a3:06:eb:e5:8a:35:22:ef:a0:fe:9a:be:
                    b2:f2:c1:21:ca:2a:58:c0:9c:af:fe:16:a1:e6:16:
                    07:41:e9:81:d3:96:2e:ac:85:fc:2d:99:27:86:69:
                    3a:40:d8:48:1c:71:51:1f:60:b0:3a:80:ba:1c:5d:
                    ea:d1:04:b1:21:04:40:6a:58:c4:7f:66:94:f6:91:
                    98:af:6d:c6:69:d3:26:cd:61:ca:cf:f2:92:b7:2c:
                    da:b8:ed:66:34:25:c4:21:7a:62:90:b3:83:89:6e:
                    53:23:8a:52:b1:14:64:cc:fe:fe:cf:07:81:89:c5:
                    af:0f:9f:36:11:25:0c:83:54:f3:16:b7:c5:90:d6:
                    13:4b:7b:d2:cb:c9:21:10:5a:45:b5:89:2c:b3:ba:
                    2b:b4:b0:a9:7f:2e:38:d3:e2:6c:d5:3e:1c:8d:96:
                    cb:48:6a:b9:07:a7:8e:dd:6c:ac:82:10:b2:8b:9b:
                    0e:aa:25:4f:cb:6b:22:9d:20:a3:47:62:a8:48:d1:
                    2b:a6:de:6f:87:8c:58:7f:d3:3c:98:3a:7d:d7:5a:
                    80:c2:c2:2c:8a:06:4f:2e:d2:a2:84:9f:b5:a0:c0:
                    46:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:30:93:3E:42:96:AF:76:E0:E1:1F:45:22:F1:49:6F:14:1D:D1:F7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3fKmzET29muoahEAFT3f6W5Kp6AU7ThQuSWKgMWG6Dvo/0/3930933E4296AF76E0E11F4522F1496F141DD1F7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.168.0/22
                IPv6:
                  2804:6b2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270383

    Signature Algorithm: sha256WithRSAEncryption
         24:65:2f:aa:22:a8:64:f7:3d:d9:7b:0a:eb:41:0b:6d:bf:ed:
         e4:66:f4:29:d1:3f:eb:82:ae:e2:0a:25:aa:d9:85:36:35:70:
         e9:3b:67:b6:2c:f6:4c:00:b4:8d:12:21:4f:b4:2f:d2:d4:e2:
         dc:45:ce:7a:ea:c8:49:34:0a:d2:72:d5:b5:9b:0c:e5:0b:2e:
         aa:40:b5:65:85:09:68:ae:aa:fc:26:de:2d:55:2c:ed:9e:81:
         55:6a:a5:86:36:a9:c9:f9:11:95:20:07:bf:f4:45:9e:e9:28:
         52:14:90:12:ff:60:a1:83:f5:f5:8b:eb:2f:44:6e:fc:d0:0c:
         63:35:e8:40:64:57:c0:e3:77:c2:17:c2:c2:ef:81:37:92:87:
         66:2a:14:c9:30:c6:0d:53:c9:8e:c5:ba:f4:6c:38:c5:f6:63:
         3a:2d:91:70:30:65:85:be:f2:64:ca:56:90:78:b3:87:29:52:
         81:d9:28:89:71:7b:6e:3f:2b:21:a3:8d:b7:34:64:61:2a:39:
         52:1f:f0:a7:c3:9b:3d:7d:52:7b:ba:1a:22:3c:ff:09:5d:af:
         b8:9c:c9:47:d3:f3:6f:2e:55:29:dc:d6:04:9c:77:62:3a:e1:
         21:80:3b:27:a6:dc:11:59:6d:a0:64:07:0d:62:63:a5:3b:90:
         3e:06:b9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org