Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/39D5039FB41A6E31B24A650C9C3A3A3F512B662E.cer
File:                     39D5039FB41A6E31B24A650C9C3A3A3F512B662E.cer (raw, json)
Hash identifier:          RjfhZEGRxV2eGmjjYE+bHsylkQzmxbvWfbGZig7+Vus=
Subject key identifier:   39:D5:03:9F:B4:1A:6E:31:B2:4A:65:0C:9C:3A:3A:3F:51:2B:66:2E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6745274E70A7CD50E5C848786C684CE7B192010F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/39D5039FB41A6E31B24A650C9C3A3A3F512B662E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Dec 2023 14:49:14 +0000
Certificate not after:    Thu 05 Dec 2024 14:54:14 +0000
Subordinate resources:    AS: 270455
                          IP: 190.115.80.0/22
                          IP: 2804:6c40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:45:27:4e:70:a7:cd:50:e5:c8:48:78:6c:68:4c:e7:b1:92:01:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  7 14:49:14 2023 GMT
            Not After : Dec  5 14:54:14 2024 GMT
        Subject: CN=39D5039FB41A6E31B24A650C9C3A3A3F512B662E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:58:dc:7b:f8:cc:07:0c:cd:2b:98:a7:a4:46:
                    00:53:d4:74:84:a6:f4:63:17:d1:45:77:77:92:5c:
                    da:30:f6:9d:02:fb:c7:36:0b:dc:49:6a:f1:ee:be:
                    49:f6:b9:d6:5c:f8:7f:d1:f2:dd:87:f3:1f:a6:a9:
                    8d:41:a5:85:01:9e:37:52:71:d8:2e:65:48:f8:7e:
                    91:8c:3d:7b:f6:38:1b:c3:a7:b5:8b:50:57:bb:35:
                    5d:ef:80:c2:d1:1c:57:ca:bb:29:76:81:0e:7b:80:
                    f1:d4:8e:21:8a:f8:b1:5e:86:2c:b4:21:40:70:53:
                    0c:95:41:d9:94:75:59:72:89:47:b3:3a:8d:c4:da:
                    34:2a:4b:68:36:ff:0c:f2:a2:de:3e:fe:6a:61:d8:
                    e2:59:0b:a1:b1:ba:42:08:6b:30:64:2c:0f:b5:6e:
                    fb:1f:51:7a:25:46:e6:98:31:04:59:7f:3d:db:64:
                    de:77:31:7d:4c:4b:1c:27:81:df:4f:97:d6:dd:af:
                    7e:ee:f6:8b:fe:4c:44:f9:94:0e:f8:d9:44:06:6e:
                    8e:2c:60:8e:db:0e:21:af:b0:5b:5a:cf:3d:ed:6b:
                    06:57:db:1f:e6:81:3a:6e:99:32:e9:8d:f5:8f:6d:
                    45:ef:f5:af:68:9c:cd:c9:0b:bd:cb:22:4a:15:a2:
                    4f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:D5:03:9F:B4:1A:6E:31:B2:4A:65:0C:9C:3A:3A:3F:51:2B:66:2E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/39D5039FB41A6E31B24A650C9C3A3A3F512B662E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.80.0/22
                IPv6:
                  2804:6c40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270455

    Signature Algorithm: sha256WithRSAEncryption
         5b:52:b4:d9:45:3a:21:8e:b4:27:4b:01:cd:1e:b3:e6:f0:3d:
         04:90:11:d8:7a:80:eb:61:c1:a3:11:7b:bd:ae:81:84:2a:65:
         e3:e1:0c:72:ca:bc:8c:46:c3:74:61:50:ee:97:42:11:70:79:
         52:d5:77:b2:bd:a4:1c:1f:31:30:51:ad:db:86:18:7d:59:2d:
         e9:94:3e:e5:22:e4:7d:ba:b0:5d:a7:79:1a:af:55:68:37:70:
         a2:3a:d4:91:64:53:97:c0:b1:7f:29:c6:23:24:7e:c8:68:cd:
         9e:ec:36:0a:a4:c0:5d:65:c3:65:82:dc:f1:82:df:55:f0:3d:
         0b:f3:9d:0e:5f:fd:92:18:07:77:3c:7e:64:74:c7:64:24:77:
         22:e7:4c:8a:b2:ad:79:2b:ae:a0:dc:b5:77:4c:a1:fe:38:b8:
         44:fe:51:d6:57:13:92:b5:a1:0f:c8:80:1b:f8:6e:5d:da:67:
         1d:ab:c6:91:f7:e9:9a:12:3c:5e:a7:c1:1f:9d:9a:63:f9:f7:
         f7:9b:f0:ff:4a:50:b4:81:79:96:35:06:a0:cf:30:47:92:cb:
         3f:e3:2f:e9:ad:80:d3:17:2f:be:32:d2:09:70:cc:08:9c:ef:
         74:5e:38:68:74:6d:a2:a4:3d:bb:77:f6:47:01:a6:2e:8f:c8:
         c2:3f:09:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org