Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E3A4438513EFDD1A35ADD2988C6AB7B959769B9A.cer
File:                     E3A4438513EFDD1A35ADD2988C6AB7B959769B9A.cer (raw, json)
Hash identifier:          quVSWiZKe5O8N9C036UCjkJoXXALfymDsdOklyJEjW0=
Subject key identifier:   E3:A4:43:85:13:EF:DD:1A:35:AD:D2:98:8C:6A:B7:B9:59:76:9B:9A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       54CB0B6EAAC82833A94C9ABEC473E8D823BDEBAC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/E3A4438513EFDD1A35ADD2988C6AB7B959769B9A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Oct 2023 20:28:59 +0000
Certificate not after:    Thu 24 Oct 2024 20:33:59 +0000
Subordinate resources:    AS: 265078
                          IP: 170.233.112.0/22
                          IP: 2804:3270::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:cb:0b:6e:aa:c8:28:33:a9:4c:9a:be:c4:73:e8:d8:23:bd:eb:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 26 20:28:59 2023 GMT
            Not After : Oct 24 20:33:59 2024 GMT
        Subject: CN=E3A4438513EFDD1A35ADD2988C6AB7B959769B9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0b:b0:d6:2d:80:76:73:26:38:1c:30:91:fd:
                    56:9b:d5:7b:bb:0e:bc:cd:b4:e5:a5:6a:fa:30:aa:
                    d1:c4:35:c9:bd:ff:35:b7:45:c1:62:94:fe:18:bb:
                    f1:23:66:ef:c6:66:74:02:42:d6:cc:7b:d8:3f:de:
                    9b:ee:c5:d7:41:f7:06:f3:a3:f9:da:64:93:e3:4e:
                    cc:e3:94:75:60:d5:35:61:a7:03:2d:5c:7d:b9:30:
                    14:f1:86:a7:7e:0f:e4:0d:b8:f2:e4:e2:80:75:da:
                    38:e9:44:c6:18:0e:dd:03:d0:90:74:f6:61:fd:0a:
                    fd:1a:2d:96:52:07:f3:a7:d6:05:2e:35:02:c7:97:
                    27:70:6f:52:8a:a3:93:19:86:cb:e3:4a:47:d1:f3:
                    a7:4e:3f:99:4c:17:24:f7:25:34:15:1c:9a:a9:1d:
                    d0:e5:5d:0c:30:eb:35:30:83:ea:c8:31:e5:25:5f:
                    0b:07:6a:74:35:0e:a1:7e:1a:f7:75:86:b2:ee:28:
                    10:1b:6f:8e:83:d3:1a:68:a7:9a:08:42:fb:a3:2b:
                    21:7b:fd:d6:17:c0:c2:d2:39:97:e2:b1:6f:5b:69:
                    a6:86:48:b3:7d:e3:04:13:77:a9:4b:8e:33:06:0a:
                    75:13:cb:97:d6:dd:cf:19:49:7d:55:47:24:4c:3d:
                    6d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E3:A4:43:85:13:EF:DD:1A:35:AD:D2:98:8C:6A:B7:B9:59:76:9B:9A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/E3A4438513EFDD1A35ADD2988C6AB7B959769B9A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.112.0/22
                IPv6:
                  2804:3270::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265078

    Signature Algorithm: sha256WithRSAEncryption
         60:bf:07:dc:39:3d:c4:c5:10:7e:b8:b1:be:ff:13:fd:ba:01:
         45:91:44:15:bf:ad:44:e3:31:27:0b:e7:a4:a4:80:e4:c8:79:
         23:9b:0c:15:9d:dd:bc:cc:9b:c1:a1:ab:97:84:fd:80:78:44:
         8b:20:d5:74:79:0c:48:67:99:45:48:95:55:0c:23:c2:1d:e9:
         90:90:a4:96:11:77:32:b1:99:7f:20:1d:c0:b7:62:c3:68:18:
         bd:c1:58:cf:99:0d:37:49:2a:46:83:1e:25:ef:73:ed:1c:69:
         b3:6d:d9:c5:a9:43:d2:22:3e:07:24:5d:eb:0e:f5:a5:03:53:
         a6:8f:13:7f:78:09:95:44:b3:95:ca:ff:b3:ef:3c:ae:e3:27:
         1d:d5:bb:04:22:ff:06:9a:3c:98:3d:df:e2:e3:f0:46:af:9e:
         e4:b8:3d:50:df:88:cd:78:a7:bc:ff:ff:f4:e4:34:9f:77:21:
         2b:ab:42:d7:d7:6e:27:b3:07:1d:d9:45:23:de:0c:3a:b5:1a:
         d8:0c:2b:47:31:e3:74:b9:11:26:87:17:74:aa:8f:db:9d:98:
         69:ce:7a:71:dc:6e:cd:0a:58:44:f9:72:4c:97:2b:7a:e3:e6:
         75:1f:eb:09:4f:15:5d:ca:e4:07:8f:24:55:78:c7:53:6b:b9:
         2c:db:e7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org