Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/739C8421324751C7B11953D1A7B9E91FD7DF5830.cer
File:                     739C8421324751C7B11953D1A7B9E91FD7DF5830.cer (raw, json)
Hash identifier:          ppRql+LwcJ4VuuVdELOwJXy86ybwBHoCzMCHoODsFAw=
Subject key identifier:   73:9C:84:21:32:47:51:C7:B1:19:53:D1:A7:B9:E9:1F:D7:DF:58:30
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       10987F76AC12B937871902047E7C4C0F547FF646
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gh54riE4PXt44Szv4yyeR8ibv1n7aY9hUcfFJSdoDbAR/0/739C8421324751C7B11953D1A7B9E91FD7DF5830.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gh54riE4PXt44Szv4yyeR8ibv1n7aY9hUcfFJSdoDbAR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Apr 2024 13:15:09 +0000
Certificate not after:    Tue 01 Apr 2025 13:20:09 +0000
Subordinate resources:    AS: 268354
                          IP: 45.239.56.0/22
                          IP: 2804:4fdc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:98:7f:76:ac:12:b9:37:87:19:02:04:7e:7c:4c:0f:54:7f:f6:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  2 13:15:09 2024 GMT
            Not After : Apr  1 13:20:09 2025 GMT
        Subject: CN=739C8421324751C7B11953D1A7B9E91FD7DF5830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:28:51:c1:e3:21:60:01:89:2d:3d:73:d8:
                    46:f1:d9:67:af:3a:66:88:22:c2:c1:77:07:d1:f6:
                    62:ff:eb:8c:3d:7f:ba:de:f9:6d:35:0f:e8:c9:f8:
                    61:57:a3:f3:0b:db:65:30:24:26:ea:c8:03:b9:47:
                    5b:ac:8b:0d:16:0a:eb:07:79:49:09:c8:78:98:cc:
                    a4:b2:69:24:b8:e1:66:ab:0a:99:c0:2b:d5:aa:57:
                    9f:7d:59:4c:5d:bf:8e:9f:ea:ba:06:8c:a9:04:87:
                    b9:af:28:b7:d0:b6:34:ff:3a:77:e6:92:fc:56:e8:
                    e3:66:46:e2:d5:7f:ad:ff:f1:ca:72:d2:6a:1e:a6:
                    57:41:17:d6:8e:91:c6:dc:1c:3c:10:ef:b0:12:62:
                    9f:16:54:bd:ac:d9:32:15:95:fe:61:7e:52:65:bd:
                    57:3b:31:7d:bc:b0:2d:27:c0:ae:4e:f8:10:f2:36:
                    ee:4a:f4:2a:2d:f6:fe:5f:b5:1b:ae:65:a4:d2:08:
                    9b:db:85:c9:c5:3d:1a:b4:cb:1f:ab:d8:19:5b:f9:
                    00:e3:fa:3d:4f:c3:48:99:fc:2e:23:82:33:fd:0c:
                    c7:73:cd:af:a4:09:2b:cb:1d:32:86:38:97:ec:f0:
                    7c:fb:85:28:5a:81:41:16:df:4a:9b:d8:8c:72:58:
                    14:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:9C:84:21:32:47:51:C7:B1:19:53:D1:A7:B9:E9:1F:D7:DF:58:30
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gh54riE4PXt44Szv4yyeR8ibv1n7aY9hUcfFJSdoDbAR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gh54riE4PXt44Szv4yyeR8ibv1n7aY9hUcfFJSdoDbAR/0/739C8421324751C7B11953D1A7B9E91FD7DF5830.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.56.0/22
                IPv6:
                  2804:4fdc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268354

    Signature Algorithm: sha256WithRSAEncryption
         59:ec:db:6c:bc:c1:07:60:67:a7:27:72:33:b3:10:68:6f:4d:
         be:c1:70:c4:58:b3:02:04:fc:3f:03:72:f2:6e:b4:ad:52:1e:
         a8:bb:3e:6c:ba:51:06:f7:f0:ac:13:b6:cc:df:e2:2d:f6:a5:
         7f:89:2a:6e:5e:13:ba:31:5b:38:03:33:69:ae:bc:da:35:0b:
         a4:70:1f:83:e2:61:75:85:58:28:3f:50:89:94:f6:83:e3:eb:
         ea:12:2a:10:91:ba:ad:fc:1e:76:88:f9:93:a5:94:e3:d2:46:
         57:07:87:57:38:32:ab:08:cd:87:dc:c8:c9:c4:09:06:73:1a:
         c4:32:c7:ae:65:03:e6:eb:d3:77:a1:3f:e4:aa:01:d1:45:91:
         43:63:49:e9:6d:e5:8f:ff:32:f1:d0:66:c3:fb:90:2c:b8:11:
         d3:32:f0:b4:05:20:55:98:13:46:07:9e:3f:13:d8:d2:17:93:
         a8:cd:c1:af:94:13:58:80:07:77:3f:23:e8:74:b3:f2:bd:57:
         f4:93:01:8f:eb:61:3e:19:f2:ea:68:21:b0:38:92:e7:37:14:
         6a:ec:24:30:4c:1b:61:9b:ca:63:dc:25:74:2e:2f:4e:98:2e:
         69:3f:f0:07:4e:f9:8f:67:a7:e7:d2:a1:a1:78:a9:14:58:07:
         c7:8e:f7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org