Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/403FC78498B4F9A70A25B59957E31D1B39C27D1F.cer
File:                     403FC78498B4F9A70A25B59957E31D1B39C27D1F.cer (raw, json)
Hash identifier:          msAMtU4VFLSNLWtYMIo5NCqR/GlEliNJ4Ipvuc5pE5Q=
Subject key identifier:   40:3F:C7:84:98:B4:F9:A7:0A:25:B5:99:57:E3:1D:1B:39:C2:7D:1F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       21DB15B73A23C5E0902A0D55B0DB038C8F3D4C4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/403FC78498B4F9A70A25B59957E31D1B39C27D1F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Nov 2023 17:10:22 +0000
Certificate not after:    Fri 01 Nov 2024 17:15:22 +0000
Subordinate resources:    AS: 61719
                          IP: 131.0.192.0/22
                          IP: 2804:1b50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:db:15:b7:3a:23:c5:e0:90:2a:0d:55:b0:db:03:8c:8f:3d:4c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  3 17:10:22 2023 GMT
            Not After : Nov  1 17:15:22 2024 GMT
        Subject: CN=403FC78498B4F9A70A25B59957E31D1B39C27D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:9c:36:50:01:17:96:d0:6e:80:06:f1:68:
                    db:7b:dd:ef:e0:03:82:22:b9:25:5b:8c:f2:98:83:
                    54:b3:6f:0a:89:55:3a:ec:c0:aa:ca:37:ef:13:1b:
                    bc:4c:2d:d5:3c:20:c6:4c:c8:73:ab:53:e0:6c:21:
                    f0:cf:38:77:db:bb:1f:f1:f0:57:9e:4e:d6:f8:5b:
                    88:8e:b5:45:4d:65:68:fd:f0:ba:22:e1:51:84:cc:
                    1d:17:91:92:a0:b1:ea:ae:7a:73:a5:2f:5d:69:38:
                    fe:65:83:90:88:d5:4d:90:2c:6a:07:df:21:06:27:
                    6e:eb:62:39:ff:58:d3:fb:21:f0:62:f2:ef:1d:cc:
                    bb:93:03:e2:d1:ca:18:b2:ee:86:c4:30:b0:d1:a9:
                    09:49:70:da:e7:3e:a8:e6:01:5f:cf:51:22:af:68:
                    44:01:bb:29:fe:e5:67:47:be:d5:20:cc:fa:ce:26:
                    9c:aa:fd:a7:66:d6:b3:3f:7a:c3:74:9f:04:5e:07:
                    70:6c:b4:dd:a8:8d:99:47:be:55:0a:f5:05:e1:57:
                    b7:72:84:6f:a5:5d:3b:ae:5f:00:c4:93:4a:2a:58:
                    bc:ed:0e:c9:50:9f:c0:da:a8:80:b3:d7:c3:7e:e6:
                    35:14:55:57:1a:7c:6e:71:f1:e4:2f:5a:73:85:f6:
                    0d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:3F:C7:84:98:B4:F9:A7:0A:25:B5:99:57:E3:1D:1B:39:C2:7D:1F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/403FC78498B4F9A70A25B59957E31D1B39C27D1F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.192.0/22
                IPv6:
                  2804:1b50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61719

    Signature Algorithm: sha256WithRSAEncryption
         21:2a:ee:b0:16:b0:08:10:4f:19:0e:b3:c5:a1:3d:25:7e:22:
         14:1a:18:34:2b:e1:59:d4:15:27:c2:3f:da:e4:45:5a:c4:f0:
         b6:3c:bf:ab:08:e0:01:2e:48:b1:be:03:0f:bc:20:57:00:44:
         d8:cc:a4:34:b7:b3:14:ee:9e:57:f6:45:ba:1c:4f:a2:c2:7e:
         f0:87:71:78:df:54:dd:d1:5a:86:6d:d5:4a:b0:e0:89:ca:bd:
         be:07:8f:a4:31:d9:e4:69:ce:c9:29:b4:41:a1:37:b2:63:17:
         84:a6:20:3a:3f:18:4b:cb:03:32:1b:0f:c6:0b:26:3c:de:5b:
         0d:c7:9b:23:5a:fe:57:cb:84:12:f7:c6:4b:28:b1:97:1a:fd:
         5e:8f:91:4c:31:c1:24:3b:0f:32:7b:2c:15:4c:2d:35:5f:ad:
         be:a7:f1:8a:3f:e1:89:16:f6:39:33:a4:7b:8c:80:72:ce:71:
         ea:2e:84:fc:57:b5:f8:79:a8:46:08:04:6c:49:1f:65:ce:13:
         3f:df:7c:74:aa:9c:52:7f:eb:53:0f:99:ac:83:88:f6:66:5b:
         4b:93:88:a5:d4:57:6e:6c:2a:ef:4a:a4:27:d2:c1:b3:47:9e:
         ce:eb:10:fe:01:d4:52:f0:7a:72:2e:97:53:3f:54:56:ec:ce:
         a3:69:16:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org