Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/839C3B66C373E6A5965EC51845D8B740FD894585.cer
File:                     839C3B66C373E6A5965EC51845D8B740FD894585.cer (raw, json)
Hash identifier:          TAVSOqtcd9GQ5gLkBqMkmrYJrgO5g/jwfcZVrYcbplI=
Subject key identifier:   83:9C:3B:66:C3:73:E6:A5:96:5E:C5:18:45:D8:B7:40:FD:89:45:85
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7CAA4DF8884498873274AC2C864BF4C59F010200
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/839C3B66C373E6A5965EC51845D8B740FD894585.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 May 2023 17:25:11 +0000
Certificate not after:    Thu 09 May 2024 17:30:11 +0000
Subordinate resources:    AS: 264036
                          IP: 143.137.120.0/22
                          IP: 2804:29d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:aa:4d:f8:88:44:98:87:32:74:ac:2c:86:4b:f4:c5:9f:01:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 11 17:25:11 2023 GMT
            Not After : May  9 17:30:11 2024 GMT
        Subject: CN=839C3B66C373E6A5965EC51845D8B740FD894585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c7:f3:d4:57:af:78:ab:d9:02:45:12:4a:20:
                    ff:8b:ff:4d:81:54:dd:92:49:07:f6:5c:07:f0:8a:
                    8f:d6:63:68:ab:ef:2a:94:31:75:5c:8b:d5:76:47:
                    06:a0:be:81:30:18:b6:97:2f:af:22:80:d2:f5:89:
                    00:05:e2:c9:25:f3:ef:5c:3b:a8:09:25:bc:11:94:
                    f7:57:62:0b:3d:98:00:d2:7d:12:82:08:a8:64:c1:
                    ab:6c:7c:65:33:5f:03:1d:26:4b:ed:45:ef:54:46:
                    45:94:43:36:5d:58:d2:50:40:80:c9:cf:8e:c5:71:
                    9b:30:2a:95:6d:45:a7:fa:28:ea:97:84:a5:1c:64:
                    06:76:e4:7b:37:19:a1:96:53:93:2d:71:54:0a:4b:
                    6d:86:bb:78:e1:90:3c:c1:fd:a4:b7:63:d1:7b:45:
                    22:0d:82:ba:f8:72:4e:1c:88:5a:9f:d2:a6:cd:9b:
                    ce:7b:d3:09:2a:38:66:ce:f9:bc:15:c4:f1:bb:0e:
                    b0:b8:96:6f:10:55:8c:fa:93:e2:77:13:5c:0b:22:
                    41:a0:da:e2:24:37:cf:89:33:1c:e1:b0:84:e0:77:
                    a0:7d:38:2d:d2:f9:f3:6a:ea:67:b0:4b:30:cb:38:
                    58:92:d9:06:31:7e:03:fc:56:ed:de:8f:a8:37:33:
                    0b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:9C:3B:66:C3:73:E6:A5:96:5E:C5:18:45:D8:B7:40:FD:89:45:85
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/839C3B66C373E6A5965EC51845D8B740FD894585.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.120.0/22
                IPv6:
                  2804:29d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264036

    Signature Algorithm: sha256WithRSAEncryption
         a3:e1:24:71:7b:f2:fb:3a:7e:06:a8:43:18:ec:c2:9e:c8:72:
         c0:16:d5:73:1e:70:7d:14:6f:dc:93:22:70:00:52:80:f0:69:
         e1:bf:3d:b7:f8:57:35:04:b6:ab:9c:8c:cf:83:e6:d8:ca:2e:
         1f:38:63:79:3e:b0:c0:d1:e6:a2:c1:aa:b5:0a:5d:f0:61:b2:
         86:91:77:7d:1a:f0:7c:9b:e6:b9:20:30:b8:d5:fd:59:16:60:
         40:df:f2:0a:47:a9:23:00:90:a7:9f:ba:66:e9:b9:05:16:fc:
         09:17:16:32:55:08:c8:77:1a:37:0a:40:de:6d:99:6a:54:15:
         87:de:67:aa:64:89:a9:0e:75:73:35:9d:a4:89:18:d0:81:1e:
         e2:7b:46:69:78:e3:04:15:74:55:a4:0d:54:c8:4a:a6:1e:ba:
         b4:7c:e6:ed:98:d1:0e:07:b0:8a:40:9b:5a:c6:37:98:74:0d:
         2d:b1:e4:3d:a9:b4:51:4d:5a:ba:dc:67:cc:79:72:e8:20:d8:
         f4:5b:ea:3f:69:43:d8:8e:82:4b:32:48:c3:48:c3:0a:31:d6:
         c3:fc:2d:cc:24:6a:ec:4e:9e:db:73:60:10:35:05:9c:4d:ee:
         57:5b:df:49:d3:7b:82:d5:f2:84:b5:c8:6f:41:82:ef:47:19:
         4e:09:0c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org