Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/34377E5CB3D1D279C7704E0C7C11B2B287EB3067.cer
File:                     34377E5CB3D1D279C7704E0C7C11B2B287EB3067.cer (raw, json)
Hash identifier:          qoQoPEt9fblWs7Ho2rSbbjCISyynfI85NDy6m9Bpr8Y=
Subject key identifier:   34:37:7E:5C:B3:D1:D2:79:C7:70:4E:0C:7C:11:B2:B2:87:EB:30:67
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       18E0EAEFB4569F37EE92B592AD29751DE4C6DA39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/0/34377E5CB3D1D279C7704E0C7C11B2B287EB3067.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Feb 2024 02:35:08 +0000
Certificate not after:    Wed 19 Feb 2025 02:40:08 +0000
Subordinate resources:    AS: 265925
                          IP: 131.196.172.0/22
                          IP: 2804:3ff8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e0:ea:ef:b4:56:9f:37:ee:92:b5:92:ad:29:75:1d:e4:c6:da:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 21 02:35:08 2024 GMT
            Not After : Feb 19 02:40:08 2025 GMT
        Subject: CN=34377E5CB3D1D279C7704E0C7C11B2B287EB3067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b8:25:fd:a3:77:0d:49:e9:72:4c:c5:af:70:
                    ee:68:71:55:ad:0d:4d:e3:3f:49:c2:68:54:95:ae:
                    9d:de:52:51:2c:59:07:e2:25:5d:2f:8f:80:f2:f7:
                    92:c1:2f:c8:8f:a1:d3:ab:a4:f3:06:b4:e0:ee:aa:
                    50:0b:da:39:eb:d3:08:a4:41:25:09:10:f3:f3:db:
                    2c:9d:a5:28:20:2f:cd:ed:b4:e9:5a:65:e1:28:60:
                    23:34:be:d8:f4:57:0d:f2:80:73:3c:c9:2a:0d:45:
                    1f:8c:02:fa:84:00:e1:ab:66:af:b2:14:60:28:e5:
                    d9:8a:58:a5:fa:be:9f:bc:42:91:53:9b:e8:c9:a7:
                    af:3b:1f:94:6d:16:80:cc:12:2c:98:04:1f:3a:cb:
                    6f:5c:54:2b:96:74:71:6a:13:df:d7:fa:62:02:5b:
                    4d:a7:99:41:5c:b8:83:75:ff:b0:45:94:10:23:99:
                    4f:ca:77:6b:72:51:2f:00:08:01:72:0e:3a:40:39:
                    f1:f8:c1:00:0b:78:00:90:09:e6:29:0f:eb:dd:99:
                    2e:b7:c1:f4:65:8e:18:90:c8:27:b8:c3:b9:58:4d:
                    e7:59:62:c0:b6:93:9a:42:b3:a4:03:06:bf:fd:da:
                    6c:7a:c3:c8:98:84:e6:49:7c:16:31:3a:7f:ad:49:
                    bf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:37:7E:5C:B3:D1:D2:79:C7:70:4E:0C:7C:11:B2:B2:87:EB:30:67
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/0/34377E5CB3D1D279C7704E0C7C11B2B287EB3067.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.172.0/22
                IPv6:
                  2804:3ff8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265925

    Signature Algorithm: sha256WithRSAEncryption
         7c:03:38:10:14:87:f2:3b:bc:c3:b1:42:f2:58:4d:ce:ae:e6:
         64:03:38:b4:66:29:00:ea:98:99:b7:7b:98:ff:24:38:cd:a2:
         fd:8a:e0:10:e8:41:47:fc:08:f1:54:2a:59:45:fe:dd:a8:da:
         9f:5c:fd:54:cd:6c:cb:32:e0:d6:57:45:a0:34:24:e6:e0:30:
         e9:af:2f:23:78:58:8b:aa:3b:cd:5c:ef:b0:5c:c6:20:37:ea:
         a0:51:b1:ea:a5:52:d0:84:d7:d2:4f:79:84:d5:a9:16:50:9d:
         8e:1d:0d:a6:b0:e3:53:3f:cf:b8:da:70:7d:1f:2f:9b:5b:38:
         b4:f3:82:42:1b:20:00:bd:e8:f4:a5:8f:5e:27:03:2a:f0:b9:
         2f:83:31:12:91:b8:f1:fc:50:65:77:e1:a9:d7:30:c7:85:ea:
         36:1a:9f:3e:96:dc:95:5c:c4:fe:c8:4c:e6:80:30:aa:6c:d9:
         30:81:3a:85:10:bc:af:ac:a7:f7:a8:ec:5c:99:3f:ef:bd:74:
         81:e1:f8:21:6c:85:18:68:f3:1c:b8:ae:1d:29:1b:73:1e:5a:
         3a:05:e4:21:74:4e:51:b3:53:9e:3c:75:4e:5f:d3:e6:6d:24:
         e1:ea:1c:9c:2d:5d:60:a4:fd:04:bd:cf:cd:44:a6:07:d6:76:
         e0:66:0c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org