Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/033A18EDCCDDC601AF080AF01923CF610C9004AA.cer
File:                     033A18EDCCDDC601AF080AF01923CF610C9004AA.cer (raw, json)
Hash identifier:          iZYbHcEDlVpmnlifVaR7EkKJQ3RVnaFXHsQR2arCWzY=
Subject key identifier:   03:3A:18:ED:CC:DD:C6:01:AF:08:0A:F0:19:23:CF:61:0C:90:04:AA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       41F75B27334D9518A8D0A3A9CDA12867C5D1C5A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/0/033A18EDCCDDC601AF080AF01923CF610C9004AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Jan 2024 16:45:03 +0000
Certificate not after:    Fri 17 Jan 2025 16:50:03 +0000
Subordinate resources:    AS: 61779
                          IP: 201.148.220.0/22
                          IP: 2801:80:ae0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f7:5b:27:33:4d:95:18:a8:d0:a3:a9:cd:a1:28:67:c5:d1:c5:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 19 16:45:03 2024 GMT
            Not After : Jan 17 16:50:03 2025 GMT
        Subject: CN=033A18EDCCDDC601AF080AF01923CF610C9004AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:21:02:26:54:70:8d:07:a2:21:04:ce:e6:82:
                    9a:1f:ce:dc:7a:c9:1e:97:39:a9:0e:e0:28:c4:2c:
                    ce:b4:96:c5:ef:39:67:b5:23:e0:c1:d9:f4:a4:59:
                    b3:fe:2f:a5:ae:12:9b:00:a0:75:11:52:3a:d7:0b:
                    0d:0c:e9:be:c4:03:49:22:80:4c:d9:ca:67:79:ab:
                    e0:52:66:c8:0d:32:dc:00:31:f7:4d:eb:1c:58:56:
                    41:78:b4:e3:d6:bc:19:d3:ca:da:d1:15:49:b5:a7:
                    02:08:05:c9:6d:87:b6:ee:9f:ff:e8:8a:99:c4:a6:
                    e0:22:bd:dc:32:f0:ab:d6:b3:5b:c9:fb:b6:86:10:
                    0c:5c:f4:d4:17:76:f7:2f:1b:3f:e3:c9:e3:38:85:
                    0e:bd:fc:65:da:2c:55:01:7e:cb:41:99:2d:4d:38:
                    1d:e8:f7:58:76:3a:7e:78:e4:79:1d:59:ae:b9:b3:
                    df:e2:a4:e8:05:cc:ba:f3:5d:08:b2:f3:51:0c:2f:
                    ff:9f:93:60:12:9f:13:02:b5:5a:1a:28:88:cb:d8:
                    ff:1f:3e:a3:48:2e:51:28:39:1a:27:ab:17:53:03:
                    9e:c5:79:e4:ca:30:d0:45:85:c8:8f:58:08:0d:9c:
                    7e:53:bb:61:8f:31:d2:8c:8d:38:e7:78:8c:ba:e3:
                    2e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:3A:18:ED:CC:DD:C6:01:AF:08:0A:F0:19:23:CF:61:0C:90:04:AA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/0/033A18EDCCDDC601AF080AF01923CF610C9004AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.220.0/22
                IPv6:
                  2801:80:ae0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61779

    Signature Algorithm: sha256WithRSAEncryption
         81:6e:e6:91:25:0d:d6:1b:a2:17:2e:ac:c9:a6:e2:d1:84:aa:
         f9:a8:36:62:73:49:1b:a9:f8:78:2c:d4:7e:59:b0:e1:40:90:
         39:a7:20:0a:b0:be:c6:b2:bc:ae:7a:ba:16:ed:8a:8c:91:fc:
         8e:4d:c9:9b:00:03:4b:ea:3c:11:70:08:08:77:dc:79:5a:f2:
         60:e5:b9:5e:0d:55:30:73:1b:26:85:99:00:7c:0c:7b:8c:e7:
         36:f4:d7:5d:6f:67:e0:fa:b3:d1:59:31:f4:85:1f:1e:c6:cd:
         3b:f0:c3:1e:16:f1:bc:78:b5:ae:98:d2:0e:eb:83:cb:17:7f:
         6a:7d:bf:c7:60:12:2d:f1:df:54:ff:f4:2a:93:c1:df:cc:ef:
         35:34:92:1f:ca:06:04:a5:50:2b:73:31:c6:d1:ac:01:f3:6c:
         56:28:a9:f0:be:2a:3c:83:8c:31:29:b1:4f:9d:a8:8d:a0:43:
         07:bc:55:3b:05:74:df:72:e4:cd:3c:2d:43:b3:26:14:35:4e:
         5f:92:3b:a9:ca:54:30:f0:b7:02:54:2c:ce:0b:d3:c1:f8:78:
         9b:2d:6d:f5:b3:7c:bb:35:c6:26:1f:95:fa:fc:55:5a:80:d7:
         ca:19:1f:5f:14:6c:ea:10:f3:87:a8:be:57:95:1a:2a:83:cd:
         02:ef:3a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org