Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C328371DF19EFB26034991794C7E5221EC5E5459.cer
File:                     C328371DF19EFB26034991794C7E5221EC5E5459.cer (raw, json)
Hash identifier:          a6FGtn5sTG0xXEm98q0xj7nSCVaH+SzOAiHC6fX7V8Q=
Subject key identifier:   C3:28:37:1D:F1:9E:FB:26:03:49:91:79:4C:7E:52:21:EC:5E:54:59
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5002FD2734A92C11F38A9E9A8C216E3E11CBA48D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/C328371DF19EFB26034991794C7E5221EC5E5459.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Jun 2022 23:14:48 +0000
Certificate not after:    Mon 12 Jun 2023 23:19:48 +0000
Subordinate resources:    AS: 264385
                          IP: 131.108.148.0/22
                          IP: 2804:1dac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:02:fd:27:34:a9:2c:11:f3:8a:9e:9a:8c:21:6e:3e:11:cb:a4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 13 23:14:48 2022 GMT
            Not After : Jun 12 23:19:48 2023 GMT
        Subject: CN=C328371DF19EFB26034991794C7E5221EC5E5459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d2:2b:86:74:35:2d:2b:75:e5:d4:06:24:b8:
                    0e:3b:ad:79:8f:2b:14:17:f4:11:3d:90:c6:c0:0b:
                    4e:18:d2:02:f4:14:e4:d7:05:e0:dc:37:69:e8:c7:
                    87:92:de:46:d3:7e:20:21:7f:09:39:13:78:74:43:
                    16:f8:16:85:f3:be:0f:de:10:32:ed:7d:0c:e3:5f:
                    97:46:b3:65:ce:2f:ad:9b:0c:0d:27:19:ee:1a:85:
                    11:cb:74:3b:dc:a1:a8:1a:ce:ca:ad:7f:87:36:0c:
                    63:18:a7:8a:83:df:54:ee:a6:16:ae:7e:75:ca:60:
                    79:a3:42:04:67:44:df:81:7f:3b:97:36:4c:48:56:
                    61:4a:de:b9:09:ef:fd:74:54:9e:a2:4c:6d:d3:2e:
                    09:55:ec:5d:c9:c7:03:5a:8d:ab:8f:5a:c5:dc:a2:
                    97:21:16:5d:d1:1f:65:86:e1:bf:2d:dd:30:17:bd:
                    07:ee:03:30:4a:fd:24:18:22:38:b5:a4:c6:46:cf:
                    1c:38:c6:c9:ba:ac:ab:41:48:f4:87:d1:16:9d:43:
                    7f:18:f4:d2:f3:dd:d6:0c:80:f3:64:b8:a3:95:a4:
                    8f:ff:30:0c:99:d8:da:3e:8e:94:fe:be:04:23:10:
                    ed:35:7c:64:f5:08:bc:34:c3:be:8c:d6:58:7b:a7:
                    53:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:28:37:1D:F1:9E:FB:26:03:49:91:79:4C:7E:52:21:EC:5E:54:59
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/C328371DF19EFB26034991794C7E5221EC5E5459.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.148.0/22
                IPv6:
                  2804:1dac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264385

    Signature Algorithm: sha256WithRSAEncryption
         99:1c:0b:f9:b3:41:37:ac:cd:49:26:3b:0c:b8:67:b4:fb:d4:
         88:b2:2b:49:22:d2:3b:4e:69:03:d9:fd:ad:34:66:d5:85:98:
         e8:e4:8d:e5:77:bf:02:52:d5:ad:18:d2:d6:3a:b5:5a:ce:90:
         7c:6b:bd:ee:cb:0c:1a:dd:72:7b:3f:09:44:45:5f:5e:ad:0e:
         b4:ba:4d:e6:ee:67:1a:ad:4f:81:1c:62:81:da:e4:ef:ed:4c:
         9b:82:2b:07:cc:ee:1f:5d:5e:3c:f3:84:dc:82:9d:70:0b:8b:
         03:5f:98:35:b2:5f:72:e4:03:e8:01:d6:1f:7c:c9:c5:1a:f4:
         f1:14:f6:d9:5f:81:54:47:51:f4:28:4a:06:cb:e1:5f:33:80:
         70:f7:86:63:cb:b2:cf:17:2a:05:1c:6d:55:50:6d:20:52:43:
         85:8d:61:d0:6c:68:4b:ef:8e:ef:3c:b5:22:f8:87:a2:1c:2f:
         cb:97:b5:99:11:ae:2a:06:e7:01:b7:9b:2d:69:a3:19:6c:40:
         71:7f:d2:0a:ef:bb:f5:ac:8d:4e:b1:46:e1:7b:1b:69:e4:e9:
         f3:8a:8a:42:8e:0c:e6:6f:f8:fa:7f:06:9f:44:44:27:1f:c3:
         d7:36:67:d7:2c:14:b2:8c:ef:10:e3:41:94:4a:1f:48:9f:24:
         69:05:64:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org