Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/39B0A79080E6A51773F6AE71E043B42C04011838.cer
File:                     39B0A79080E6A51773F6AE71E043B42C04011838.cer (raw, json)
Hash identifier:          ILWV0KY1kBMoemifgncLBmv/+OhDVFkZCniObTBbnbY=
Subject key identifier:   39:B0:A7:90:80:E6:A5:17:73:F6:AE:71:E0:43:B4:2C:04:01:18:38
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5B1BDFFF18FDE4B331B331327AB835895192C870
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/0/39B0A79080E6A51773F6AE71E043B42C04011838.mft
caRepository:             rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 18:29:44 +0000
Certificate not after:    Fri 25 Oct 2024 18:34:44 +0000
Subordinate resources:    AS: 269555
                          IP: 45.187.188.0/22
                          IP: 2804:6664::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1b:df:ff:18:fd:e4:b3:31:b3:31:32:7a:b8:35:89:51:92:c8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 27 18:29:44 2023 GMT
            Not After : Oct 25 18:34:44 2024 GMT
        Subject: CN=39B0A79080E6A51773F6AE71E043B42C04011838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:88:8f:29:77:53:56:bc:e1:1a:df:25:45:1a:
                    ba:31:1e:51:79:c2:b0:21:22:56:10:db:5a:89:ba:
                    1f:9a:c3:51:95:41:b3:70:19:20:49:87:9e:03:20:
                    a3:b0:b0:03:10:df:ae:2c:c6:91:ac:38:69:dc:45:
                    49:1b:7d:04:12:6e:03:78:23:d7:8b:85:17:65:74:
                    4b:5b:0a:a4:6a:f0:a9:5a:2c:43:99:7a:df:1e:78:
                    59:84:06:3c:f7:22:56:06:5a:02:59:d4:12:a2:e7:
                    4c:30:2d:f8:95:9a:94:7c:9f:86:49:b1:6a:a3:8b:
                    13:99:6d:90:3b:40:84:c9:ea:a7:86:91:a2:db:20:
                    9b:5a:91:a9:3d:89:5f:c7:fd:72:21:a9:99:41:f8:
                    3e:d5:72:ba:f4:75:98:96:fd:41:00:f3:ce:3e:04:
                    c1:99:30:86:c4:58:4a:6c:4c:b6:dd:1b:ec:c2:5f:
                    2b:07:62:ab:48:49:46:2a:2a:15:b9:1c:f9:4c:49:
                    56:1f:e0:ce:7a:09:cf:ef:b7:70:a9:b2:7b:78:62:
                    95:27:9d:36:51:5e:eb:df:16:a5:8d:96:08:18:f4:
                    fb:58:72:40:2d:97:d7:c9:ca:40:f8:db:57:2a:53:
                    4c:40:13:06:5b:12:7a:28:97:fe:4b:3f:2d:b5:d0:
                    fd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:B0:A7:90:80:E6:A5:17:73:F6:AE:71:E0:43:B4:2C:04:01:18:38
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/0/39B0A79080E6A51773F6AE71E043B42C04011838.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.188.0/22
                IPv6:
                  2804:6664::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269555

    Signature Algorithm: sha256WithRSAEncryption
         44:4d:3e:d9:19:2a:d5:40:3e:8d:44:72:47:a2:09:a8:ed:b4:
         9b:59:16:df:26:08:9a:6b:ce:c7:e4:3b:29:7a:de:39:af:fd:
         c7:f4:c5:65:a3:d3:ed:35:36:c6:0e:88:d6:5c:b3:de:73:eb:
         dc:9d:a9:b0:0b:e4:c7:e1:1a:08:e4:b2:03:f0:91:17:3f:31:
         ca:45:3e:e6:ea:27:2d:58:0b:fa:8b:c4:bd:77:be:9a:a0:9b:
         e4:8b:40:6b:2f:d0:9a:9d:33:96:37:36:5b:4a:3d:cc:d9:fa:
         b4:0e:32:a5:91:1f:6a:cb:48:7f:32:ee:f5:65:48:19:1b:24:
         9c:c7:2c:60:58:38:73:f0:ba:a8:18:f6:81:ee:e7:bc:fc:97:
         9c:c1:c6:0a:02:6a:f9:8d:4e:be:4c:0a:a0:0f:c2:aa:d6:20:
         6f:82:75:72:af:73:61:8c:84:4a:f2:0e:0f:18:35:e9:ba:77:
         31:56:c5:d1:ae:c7:5b:7a:bb:85:de:19:22:46:19:b2:ba:fb:
         fb:ee:b9:1f:60:3c:c9:25:fb:93:d7:4b:5e:d7:27:45:58:a7:
         22:0c:9f:40:b7:f9:ce:89:1d:9b:f1:18:35:2e:52:87:b8:ba:
         7b:a8:00:4a:b9:38:6d:70:f3:35:a6:bd:53:8d:d8:ff:69:f5:
         d0:10:59:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org