Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D3A687E7CFC4F6B7A2D9FF9DCD5D1A7E18D20CF4.cer
File:                     D3A687E7CFC4F6B7A2D9FF9DCD5D1A7E18D20CF4.cer (raw, json)
Hash identifier:          67kEG83QSbhJ4eiDY7sO2nvqjaKQqEc3vrXnoy9pYJY=
Subject key identifier:   D3:A6:87:E7:CF:C4:F6:B7:A2:D9:FF:9D:CD:5D:1A:7E:18:D2:0C:F4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7C4FB7A74CB72352FAA327FBA775FF1026808885
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0/D3A687E7CFC4F6B7A2D9FF9DCD5D1A7E18D20CF4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 10 Sep 2023 19:30:23 +0000
Certificate not after:    Sun 08 Sep 2024 19:35:23 +0000
Subordinate resources:    AS: 263849
                          IP: 138.185.200.0/22
                          IP: 2804:26b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:4f:b7:a7:4c:b7:23:52:fa:a3:27:fb:a7:75:ff:10:26:80:88:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 10 19:30:23 2023 GMT
            Not After : Sep  8 19:35:23 2024 GMT
        Subject: CN=D3A687E7CFC4F6B7A2D9FF9DCD5D1A7E18D20CF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:d7:8a:de:ad:0c:ff:b8:87:47:46:fd:56:
                    d7:13:98:ed:ac:0d:83:ba:4f:39:5d:c9:ca:08:40:
                    39:2f:2a:e9:79:ec:1c:e2:f9:bd:97:6e:bc:09:3d:
                    92:b4:81:a5:3b:f8:4f:4d:3b:52:37:9b:6e:2f:c9:
                    35:f5:f0:2f:1d:e3:89:d0:50:77:15:ce:fa:91:e3:
                    ab:03:97:0c:8a:5a:c3:6d:bc:87:4c:3e:cb:d7:00:
                    ac:ba:b7:9c:95:a1:09:57:6c:a7:3b:6b:68:29:ba:
                    6b:0b:a5:5d:fe:b0:46:f3:05:84:2f:eb:c4:6c:b0:
                    00:a2:7b:53:fd:80:9c:a1:d3:e5:af:ab:39:fa:60:
                    71:3b:3f:a5:4c:b6:9b:b6:8d:fd:fe:ff:ec:3a:69:
                    d1:40:7b:de:25:b9:0f:20:37:2c:6c:33:50:1c:81:
                    a1:a1:94:13:fc:5a:24:49:5f:ab:8d:ea:ea:da:1f:
                    15:f5:20:da:ea:7a:4a:09:10:ff:21:7c:96:d1:c1:
                    4f:9a:ba:27:71:de:42:8a:c0:a6:98:1e:7e:19:ca:
                    d9:ed:8f:85:ad:4b:3c:03:bb:52:c0:6d:db:93:0a:
                    42:d5:ca:28:6f:d9:ce:3c:68:71:8c:3d:50:a1:97:
                    96:34:2b:02:91:d9:72:fd:b6:fd:59:87:b6:1e:5f:
                    30:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:A6:87:E7:CF:C4:F6:B7:A2:D9:FF:9D:CD:5D:1A:7E:18:D2:0C:F4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/0/D3A687E7CFC4F6B7A2D9FF9DCD5D1A7E18D20CF4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.200.0/22
                IPv6:
                  2804:26b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263849

    Signature Algorithm: sha256WithRSAEncryption
         8f:30:52:89:74:59:7c:4b:38:5d:be:6e:37:15:6c:6b:2b:fb:
         c2:95:fc:dc:c9:85:1b:c8:ef:b9:16:98:a8:70:d2:5f:a6:f1:
         4f:ea:98:eb:be:61:94:8d:6e:56:af:b1:ae:3d:8e:57:14:9b:
         23:22:a3:b3:1b:35:4a:bc:9b:f6:58:1e:2a:74:d0:dd:91:63:
         c5:51:aa:57:61:45:b7:24:d2:fa:90:50:69:a3:25:20:05:12:
         cb:2f:d7:a4:28:48:6b:bc:1c:a0:fd:55:0a:4d:67:8a:c7:2b:
         bc:6e:df:32:89:40:17:48:63:a2:12:bb:4a:7a:62:d0:57:4b:
         91:cd:3c:1c:4b:6d:23:73:20:80:2b:d9:52:b6:45:6b:f1:3b:
         c1:9c:b5:aa:af:02:a2:22:cc:ee:34:4b:7e:11:25:4b:de:fa:
         e3:de:ef:10:8e:3b:84:9f:df:bc:cd:10:b0:b1:f5:52:10:80:
         a6:5c:eb:03:9e:ba:38:e1:07:16:ac:24:43:3d:14:ec:d4:40:
         c0:06:99:56:d1:7d:0e:27:47:14:e3:9d:c0:8b:fd:2f:08:c7:
         5c:9c:ab:32:e7:15:c6:ac:f4:5e:33:12:aa:80:89:9f:f2:c1:
         c6:07:f5:15:fd:48:18:6a:54:53:4d:04:f5:e8:f3:0a:f8:42:
         22:00:21:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org