Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3306C7E72FEBE86DFD81FEBCE8EF03052858258D.cer
File:                     3306C7E72FEBE86DFD81FEBCE8EF03052858258D.cer (raw, json)
Hash identifier:          X63RrjH1seNl+EfRavWiibQLlhOqkzlgudR7UiEwk0M=
Subject key identifier:   33:06:C7:E7:2F:EB:E8:6D:FD:81:FE:BC:E8:EF:03:05:28:58:25:8D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6154389E8DA54AFB8261961DA0A103101E3B7B49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/3306C7E72FEBE86DFD81FEBCE8EF03052858258D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 Nov 2023 14:43:58 +0000
Certificate not after:    Mon 18 Nov 2024 14:48:58 +0000
Subordinate resources:    AS: 267035
                          IP: 45.227.148.0/22
                          IP: 2804:4728::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:54:38:9e:8d:a5:4a:fb:82:61:96:1d:a0:a1:03:10:1e:3b:7b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 20 14:43:58 2023 GMT
            Not After : Nov 18 14:48:58 2024 GMT
        Subject: CN=3306C7E72FEBE86DFD81FEBCE8EF03052858258D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7d:56:91:57:55:45:9d:19:cb:c7:65:bb:cf:
                    3f:e0:11:ff:25:5d:fa:3f:f6:be:4b:e1:25:21:ee:
                    b8:6f:b4:8c:da:8a:bb:39:8e:8b:0f:c9:6b:a0:27:
                    b6:d4:2e:d2:89:92:5e:a3:b5:a5:cd:be:5e:8b:76:
                    12:5f:da:02:1e:e0:59:07:7c:2f:00:af:60:fa:e3:
                    3a:71:4f:95:db:65:7f:2f:d5:78:57:e1:76:5f:95:
                    49:15:50:c6:01:b1:07:7a:d6:cd:eb:11:99:49:25:
                    7a:41:de:a1:57:fb:23:b0:02:06:3d:41:d1:44:da:
                    b9:14:33:ba:c3:b7:1b:08:56:74:84:cb:2a:c9:3e:
                    b6:65:ee:a0:5e:53:d9:d8:3d:1c:50:0a:de:c9:4c:
                    16:f8:81:ef:9f:cb:08:e7:52:ee:9d:f6:76:fd:98:
                    0e:6e:c1:3c:ae:14:a4:bd:e5:58:5d:a4:3a:72:b6:
                    78:a6:25:49:60:16:00:75:75:75:74:48:5d:dc:bc:
                    4c:89:d2:e4:3a:29:17:23:b2:cc:8e:e3:89:67:9b:
                    db:61:32:1e:dc:aa:84:9b:54:bf:41:d0:e0:40:68:
                    b7:0c:0c:dd:45:5a:4f:d4:4a:df:94:39:00:9b:3e:
                    e0:be:6a:cf:9f:dd:c4:e0:c2:8a:d7:5a:62:90:d1:
                    44:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:06:C7:E7:2F:EB:E8:6D:FD:81:FE:BC:E8:EF:03:05:28:58:25:8D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/3306C7E72FEBE86DFD81FEBCE8EF03052858258D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.148.0/22
                IPv6:
                  2804:4728::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267035

    Signature Algorithm: sha256WithRSAEncryption
         64:fd:61:d0:35:d5:4a:88:cd:0d:67:26:4c:7d:16:de:12:9e:
         82:3e:df:f3:5c:b2:23:51:60:ef:90:c8:02:71:a0:91:94:0c:
         dc:d2:43:eb:31:e0:fd:40:a6:41:d2:ef:4e:05:49:92:82:ba:
         04:75:48:95:eb:a8:5b:ef:ef:66:f5:c9:00:d0:45:ca:32:be:
         fe:41:64:9d:48:13:98:fc:42:46:96:62:e7:b5:db:ca:db:28:
         63:04:e7:47:b7:9d:24:0f:a3:2b:1e:e4:e3:ca:21:2a:e2:66:
         01:9b:04:d1:14:f4:bc:91:14:9b:38:97:b3:99:cc:7c:39:5b:
         84:4a:a2:ac:46:4e:e0:ef:2e:0f:eb:b2:4f:07:ed:d0:77:8f:
         35:0b:bd:fd:e6:0d:bc:86:e5:68:33:b2:03:e8:db:28:52:14:
         86:e4:3d:04:3a:3f:ba:12:c7:98:10:bc:fa:37:72:9d:2a:05:
         61:d4:d6:6e:4f:4f:5c:d6:b6:6c:9e:b5:80:ce:af:21:4d:5f:
         92:c4:07:cd:ac:a3:6f:8f:c9:bf:75:bd:f7:ca:1e:a0:ad:fa:
         99:f7:4d:83:cd:6f:b6:51:7b:eb:4d:8d:8b:b4:c9:42:05:bd:
         c8:2a:f4:bc:a6:68:ba:20:99:c1:74:b3:bc:34:34:08:b5:ae:
         16:44:66:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org