Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/33699CF3A1A5B6B2E3A60A2EA3F96019106FD530.cer
File:                     33699CF3A1A5B6B2E3A60A2EA3F96019106FD530.cer (raw, json)
Hash identifier:          dURaNY0K1g2bzwDiqkxSE9icHF689QvVEl7ITSQJ024=
Subject key identifier:   33:69:9C:F3:A1:A5:B6:B2:E3:A6:0A:2E:A3:F9:60:19:10:6F:D5:30
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       34CAD2C24DDF3CAC2DCE348383F4A46AAE22F91F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/1/33699CF3A1A5B6B2E3A60A2EA3F96019106FD530.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Dec 2023 20:09:44 +0000
Certificate not after:    Fri 06 Dec 2024 20:14:44 +0000
Subordinate resources:    AS: 264202
                          IP: 138.97.216.0/22
                          IP: 170.233.44.0/22
                          IP: 2804:241c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ca:d2:c2:4d:df:3c:ac:2d:ce:34:83:83:f4:a4:6a:ae:22:f9:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  8 20:09:44 2023 GMT
            Not After : Dec  6 20:14:44 2024 GMT
        Subject: CN=33699CF3A1A5B6B2E3A60A2EA3F96019106FD530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:25:bc:41:68:d0:af:36:3a:dd:ff:08:99:91:
                    ff:e3:f7:54:d8:e8:da:44:6d:12:d1:c1:22:f6:2d:
                    56:44:b0:91:73:5f:a6:86:4b:79:2b:a1:f4:35:fa:
                    7f:69:c2:e2:f8:c1:3c:4b:ae:4b:9d:5e:2d:73:32:
                    b2:82:6c:3a:35:66:43:ae:9b:db:0e:e9:97:6d:aa:
                    d9:e3:c3:50:3e:14:9f:5a:d2:84:66:4a:cc:ad:91:
                    7a:7f:14:15:da:57:6e:60:a0:1f:07:25:f6:c9:fb:
                    49:78:09:98:69:b0:0c:ea:e2:18:9b:52:9f:56:b8:
                    33:d5:bd:73:75:f9:c2:3c:cd:ae:bb:91:d3:3f:14:
                    50:92:f5:1e:6a:ef:5e:aa:97:90:af:07:e9:a6:35:
                    3f:af:17:d5:82:2c:84:8f:54:7d:08:b8:c7:1a:78:
                    90:28:9e:f9:37:7d:17:71:eb:f2:0e:46:2d:a6:a1:
                    b2:dd:70:53:b1:ed:f3:ca:73:59:77:22:50:49:a2:
                    4e:e5:8d:27:6d:5a:e7:0a:49:97:1a:1f:70:18:2d:
                    7b:b3:58:8f:be:80:49:28:c7:d0:d4:2e:ca:50:7f:
                    64:6c:b9:bc:28:43:b1:50:59:7f:99:89:98:43:23:
                    4e:6a:3a:e3:31:0f:b8:19:33:d2:7c:bc:57:62:76:
                    d3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:69:9C:F3:A1:A5:B6:B2:E3:A6:0A:2E:A3:F9:60:19:10:6F:D5:30
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/1/33699CF3A1A5B6B2E3A60A2EA3F96019106FD530.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.216.0/22
                  170.233.44.0/22
                IPv6:
                  2804:241c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264202

    Signature Algorithm: sha256WithRSAEncryption
         7e:25:15:9c:c4:c9:32:92:5a:07:a0:4a:db:1f:e7:ac:51:32:
         73:88:05:08:f0:db:8d:15:54:09:90:1d:f9:48:49:b2:3a:ee:
         34:68:63:3d:cc:0a:41:97:5d:7e:08:ce:06:9a:fb:bb:6f:b5:
         c9:26:19:f5:9e:38:98:d0:fc:8e:5e:d2:64:88:4c:17:7a:ef:
         e6:49:ca:ed:00:5a:70:8b:c7:d4:29:10:aa:b6:b0:eb:47:ae:
         e3:55:72:d1:6c:0a:76:b4:f8:d1:7c:af:1d:14:4f:e2:2c:1b:
         d6:46:06:a0:fa:68:15:6f:90:37:4f:ee:e6:8e:ce:f1:20:1c:
         94:af:ec:e8:12:ca:cf:75:e5:40:6f:d4:b8:2e:5b:29:24:9b:
         bd:23:14:0c:e5:b4:5e:03:7b:b6:cf:48:ee:d6:86:7f:51:2e:
         48:5a:ca:95:ad:7b:25:a7:ae:a0:ad:7e:1e:f8:4e:b8:7e:6a:
         9d:37:53:62:67:45:f6:a7:43:55:13:ce:c2:7b:bb:89:3e:11:
         af:fd:24:5d:71:98:d3:7a:40:cd:89:f5:52:a5:68:03:64:8f:
         dd:79:12:61:2c:10:92:e1:5c:51:78:2a:4c:b4:40:e4:49:a7:
         72:17:86:f7:5b:60:bf:0c:07:d0:62:6c:6e:a7:3d:88:84:68:
         eb:b8:56:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org