Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/33C7E934497A1A6A0B9E213D3220EEF05A3B2BDA.cer
File:                     33C7E934497A1A6A0B9E213D3220EEF05A3B2BDA.cer (raw, json)
Hash identifier:          ops2kBueHHiJ8eUkwRwNokp0vm3ONr+8T/+jDKyn0dM=
Subject key identifier:   33:C7:E9:34:49:7A:1A:6A:0B:9E:21:3D:32:20:EE:F0:5A:3B:2B:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3584EDAC3A876C836787D8C9B28FC7F3C5A97C95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/33C7E934497A1A6A0B9E213D3220EEF05A3B2BDA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Dec 2023 02:05:43 +0000
Certificate not after:    Mon 02 Dec 2024 02:10:43 +0000
Subordinate resources:    AS: 264195
                          IP: 138.97.196.0/22
                          IP: 2804:2400::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:84:ed:ac:3a:87:6c:83:67:87:d8:c9:b2:8f:c7:f3:c5:a9:7c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  4 02:05:43 2023 GMT
            Not After : Dec  2 02:10:43 2024 GMT
        Subject: CN=33C7E934497A1A6A0B9E213D3220EEF05A3B2BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:49:e9:36:c0:90:de:62:77:e6:b3:a1:64:ca:
                    0f:89:69:8f:f1:01:00:b2:81:6d:59:2d:f0:0d:a0:
                    4c:68:f4:d8:29:8e:8c:9f:6f:e4:53:81:37:56:7c:
                    2f:6c:a8:31:81:80:e0:7f:9f:fe:7b:cc:e0:1b:12:
                    af:92:f4:b1:22:76:c8:02:55:52:46:05:64:2e:ef:
                    5a:ac:ad:6e:29:da:d7:5e:3b:7b:09:ef:67:2f:11:
                    95:be:28:28:ae:51:b5:13:30:c5:43:ec:56:cc:c0:
                    78:c7:d3:04:02:11:5b:30:36:4f:6b:86:e0:56:d1:
                    b4:0d:1d:31:49:5f:91:00:d3:07:be:be:7c:f7:fc:
                    b7:cc:57:09:10:c0:01:95:65:2a:75:f6:4f:55:a6:
                    a8:50:f5:14:76:38:95:4b:6f:a4:9c:81:fe:23:e0:
                    1c:25:e7:60:0b:27:8a:4f:09:c2:aa:a0:ec:1f:ae:
                    cc:b2:31:81:56:bb:a4:23:6c:26:5c:af:a7:ad:2b:
                    ba:ac:90:11:47:a7:58:a5:22:27:58:9e:3c:b0:b4:
                    5b:d9:6e:51:4e:5f:9c:c9:97:b3:85:14:93:fb:fd:
                    9a:52:08:83:fb:8a:6f:df:f5:25:44:b4:ce:73:fd:
                    aa:70:df:14:05:60:c3:42:d7:87:20:c6:c7:57:fd:
                    07:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:C7:E9:34:49:7A:1A:6A:0B:9E:21:3D:32:20:EE:F0:5A:3B:2B:DA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/33C7E934497A1A6A0B9E213D3220EEF05A3B2BDA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.196.0/22
                IPv6:
                  2804:2400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264195

    Signature Algorithm: sha256WithRSAEncryption
         1a:41:f2:9d:6d:0f:98:61:09:ff:db:ca:8a:23:6c:74:bc:f1:
         f0:5e:79:52:b2:f1:54:68:05:28:34:77:74:06:10:20:67:c7:
         82:ac:43:98:44:2f:58:8d:61:57:45:85:41:5b:c1:30:69:8b:
         bd:c4:ff:94:47:ce:02:82:1c:73:a4:c7:ab:8c:88:aa:f7:dc:
         be:cf:e2:a9:3a:ac:76:42:a6:43:d0:2e:fb:af:b7:17:73:f2:
         14:6e:9b:68:dd:b9:50:ec:0e:2f:07:e6:aa:18:70:b5:89:3a:
         09:06:50:1d:58:6f:8a:35:e0:bb:a3:34:80:54:3a:de:e4:39:
         a0:1e:17:0c:8b:21:d8:b5:0b:b3:93:a5:b0:91:f2:44:b5:78:
         f4:90:e0:74:f0:31:fb:7e:5f:6a:fa:3d:5e:04:0a:3f:71:95:
         4d:7c:e5:d9:4e:3a:86:bf:1d:9e:db:fc:ff:be:e1:a0:e4:5b:
         f4:de:6c:40:5d:3a:08:c9:d1:8f:db:9b:51:c2:c1:55:98:84:
         a4:dc:6b:48:cf:2e:f5:d8:93:e8:c2:a0:e6:7c:d1:34:c3:fd:
         89:d6:e2:8c:2b:34:26:0c:da:2e:fb:91:d9:c6:8f:76:0b:22:
         bb:a9:11:f2:6e:0a:1c:30:06:97:cf:54:d2:32:2f:86:90:ae:
         ce:0d:59:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org