Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1350D3B33AAF9CFF0371D2E5ABF77D7523CEB4F3.cer
File:                     1350D3B33AAF9CFF0371D2E5ABF77D7523CEB4F3.cer (raw, json)
Hash identifier:          xUYRp8ZGS7b08ofiw2WL8BhJQhVXJZK23wT+VFUXtGc=
Subject key identifier:   13:50:D3:B3:3A:AF:9C:FF:03:71:D2:E5:AB:F7:7D:75:23:CE:B4:F3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       062651223315D310A5A9B95B813C7BA26B41A04B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/1350D3B33AAF9CFF0371D2E5ABF77D7523CEB4F3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Nov 2023 08:52:34 +0000
Certificate not after:    Thu 14 Nov 2024 08:57:34 +0000
Subordinate resources:    AS: 266968
                          IP: 45.226.148.0/22
                          IP: 2804:4618::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:26:51:22:33:15:d3:10:a5:a9:b9:5b:81:3c:7b:a2:6b:41:a0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 16 08:52:34 2023 GMT
            Not After : Nov 14 08:57:34 2024 GMT
        Subject: CN=1350D3B33AAF9CFF0371D2E5ABF77D7523CEB4F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a4:34:6e:5c:88:9e:38:c5:44:49:89:9b:6c:
                    7c:27:2e:e1:dc:5f:eb:d0:00:d3:a6:71:d7:e4:e1:
                    21:16:4c:02:95:91:cf:41:ea:d0:a4:fc:7b:46:d7:
                    f7:10:7d:ec:67:58:a6:3b:1a:20:46:80:62:b1:b4:
                    2a:3e:6a:78:b9:b8:cb:fd:4d:d4:bc:11:6a:c8:55:
                    8e:04:da:62:ea:bb:8a:aa:bd:8a:e6:38:0c:e7:f1:
                    fd:9e:a5:d4:11:b3:5b:f8:3f:fe:6d:fc:8b:c1:86:
                    a0:c2:8f:19:a5:2d:ae:a6:9e:a1:ec:58:e8:8a:fa:
                    33:1a:69:e5:f7:ec:74:84:69:c8:4b:92:8d:17:4d:
                    30:5c:56:40:c9:36:e3:28:b2:f8:d9:3e:1c:98:62:
                    0e:f2:02:20:12:33:28:4d:d4:48:ec:56:ae:59:df:
                    e3:5b:02:01:17:9d:2a:89:4b:b9:49:cb:16:96:b8:
                    70:6f:b4:ec:ca:36:c2:8d:13:09:30:b9:26:4a:b4:
                    cf:90:6d:62:7c:8e:ef:e8:14:fc:50:07:99:54:2b:
                    88:7f:49:11:52:d2:ad:dd:c3:e9:31:1c:88:42:b0:
                    ea:b6:f8:62:e9:54:41:63:18:0d:63:57:ff:0d:fd:
                    2f:56:e6:a9:0b:c9:9a:f5:49:7a:61:30:67:6b:78:
                    8e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:50:D3:B3:3A:AF:9C:FF:03:71:D2:E5:AB:F7:7D:75:23:CE:B4:F3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/1350D3B33AAF9CFF0371D2E5ABF77D7523CEB4F3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.148.0/22
                IPv6:
                  2804:4618::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266968

    Signature Algorithm: sha256WithRSAEncryption
         4e:a1:58:94:89:cc:16:12:78:5f:7a:38:7e:c6:4b:da:66:e8:
         26:59:cc:6a:d7:59:5e:93:1c:51:a6:4f:0e:44:96:a2:d3:42:
         bd:9e:94:50:0f:bf:10:a2:c9:d1:eb:3e:0d:0d:2a:40:fb:c6:
         47:57:f4:85:c6:7e:03:92:8d:10:b6:61:01:70:23:cd:e3:d7:
         77:62:11:01:4e:79:b0:49:20:e9:4b:ac:9d:53:35:a3:c6:05:
         47:cd:b9:2f:45:21:41:fe:b5:4d:98:c3:e1:f3:23:75:e8:06:
         32:4e:0a:01:ba:23:cf:52:23:3e:fc:0e:b5:ac:8a:b7:6d:dc:
         23:ff:18:a3:47:11:d2:4b:ef:f3:2d:64:d8:68:c5:75:0b:5b:
         13:e8:71:63:5a:75:44:0c:ca:47:a5:70:d0:28:0b:a2:71:bd:
         bb:78:47:6d:be:cc:40:28:b8:55:b5:0a:50:74:5b:7b:ed:da:
         3b:b4:cd:4b:74:ee:7c:8f:c5:b2:c2:b3:e1:bd:6a:99:9a:87:
         8d:31:d8:c9:a9:f9:8e:f0:10:b0:77:6e:1c:9d:0d:e7:98:a7:
         a5:7a:a4:5f:8c:29:e6:a0:88:11:82:83:64:a8:4b:e3:da:01:
         f4:4a:b6:e5:5a:d3:cd:d3:79:71:74:7f:4d:5c:f1:b0:ef:8c:
         45:ea:10:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org