Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/603A82E52EC8F2936B09798AE3876E83B928E5B3.cer
File:                     603A82E52EC8F2936B09798AE3876E83B928E5B3.cer (raw, json)
Hash identifier:          mOpn0gt3FrLwXqVqWTJS+SlbfFcbXWP4WixyC06liOk=
Subject key identifier:   60:3A:82:E5:2E:C8:F2:93:6B:09:79:8A:E3:87:6E:83:B9:28:E5:B3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C2E075C8F11A0E58A965BFECD19948F03D13D4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/603A82E52EC8F2936B09798AE3876E83B928E5B3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 09 Mar 2022 15:53:09 +0000
Certificate not after:    Wed 08 Mar 2023 15:58:09 +0000
Subordinate resources:    IP: 190.89.68.0/22
                          IP: 2804:6ac4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2e:07:5c:8f:11:a0:e5:8a:96:5b:fe:cd:19:94:8f:03:d1:3d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  9 15:53:09 2022 GMT
            Not After : Mar  8 15:58:09 2023 GMT
        Subject: CN=603A82E52EC8F2936B09798AE3876E83B928E5B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b8:76:95:cf:d6:c1:9f:d5:d2:dd:c3:75:82:
                    59:07:fd:13:40:0f:52:b3:18:32:98:91:ee:26:e2:
                    62:2d:f9:cd:70:25:9b:59:08:08:75:0b:c5:52:a3:
                    73:ac:fe:44:ac:2b:3b:66:fd:cf:63:46:ad:1f:c6:
                    a0:ab:66:a1:86:52:b8:3f:83:a1:da:92:6c:ff:86:
                    82:34:ad:01:58:f8:fd:32:26:f9:3b:3e:a5:f2:cc:
                    b1:ba:02:10:be:1c:14:b8:d9:b0:f7:a6:2f:ea:a9:
                    8b:1f:74:8a:f2:95:62:9d:88:d4:d2:77:f7:a8:ca:
                    81:0e:d3:94:8d:1e:41:4b:d9:37:91:d7:c0:fa:ca:
                    3a:e5:62:81:db:e3:e4:29:53:28:19:91:79:d7:7d:
                    5a:16:0b:3a:99:11:e2:2f:2d:e6:b7:d7:2c:41:3a:
                    85:3a:10:a3:1e:7c:a4:48:90:c6:5c:ec:58:00:11:
                    65:cc:7b:e5:f6:bc:7a:7b:92:54:ff:fe:b8:ca:a1:
                    c1:8c:4e:fb:84:02:4e:fb:1a:81:ce:aa:96:38:3f:
                    48:6d:35:9c:21:57:7b:57:8b:1e:49:57:11:6b:a9:
                    3f:2b:aa:ea:62:f2:04:11:37:89:fd:0d:34:a5:e1:
                    cd:30:8b:ec:b1:ea:78:ff:ae:cb:fb:ac:bc:04:d3:
                    d5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:3A:82:E5:2E:C8:F2:93:6B:09:79:8A:E3:87:6E:83:B9:28:E5:B3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/603A82E52EC8F2936B09798AE3876E83B928E5B3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.68.0/22
                IPv6:
                  2804:6ac4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:c2:9f:f2:c9:04:31:ed:1c:ac:10:ec:64:50:dc:54:77:82:
         fc:50:bc:9f:53:49:92:db:29:ac:18:13:a5:a5:5b:e4:77:98:
         db:f8:90:b5:46:f7:84:c9:65:74:6c:ab:0d:71:b2:7c:b1:12:
         42:c0:d7:af:27:96:ec:9f:1b:1d:a1:07:13:f5:f8:72:fa:c3:
         e6:2c:90:b7:7b:3b:b4:93:27:8f:73:72:25:fe:24:52:c1:8a:
         3a:3f:6a:46:67:eb:7c:b2:4f:bc:64:46:31:51:18:ef:19:6b:
         7c:10:0b:9b:6b:a6:05:1f:d4:51:c6:d9:40:79:28:7a:69:20:
         3c:1d:39:27:3c:27:72:20:bc:19:8c:3a:11:5a:db:9c:63:25:
         a0:8b:97:ee:8a:0b:06:f4:4d:d0:df:b3:dd:54:4f:d1:bc:6a:
         eb:82:26:ec:11:37:6b:11:5a:96:a3:e1:05:27:0f:c4:86:bb:
         23:1e:27:9f:95:4f:ea:e3:f7:7e:fc:09:66:da:de:fc:31:a7:
         83:72:b2:5a:3f:03:ba:5f:fc:d8:58:fe:e4:4e:31:c8:c9:38:
         08:e6:3c:9c:07:92:4f:4d:64:2e:bc:8d:4c:b4:a8:5a:52:82:
         e8:b0:8e:21:34:23:31:89:e9:72:5e:ae:58:3a:c6:16:4c:ce:
         22:42:5e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org