Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/341D9DFC8FB9930D8BDCAC1A5A49AC459CFF5B8B.cer
File:                     341D9DFC8FB9930D8BDCAC1A5A49AC459CFF5B8B.cer (raw, json)
Hash identifier:          ek+J2CphC4ER93l8Fz6AlRBHI/t6Eu6i3Uy/XkQlhI8=
Subject key identifier:   34:1D:9D:FC:8F:B9:93:0D:8B:DC:AC:1A:5A:49:AC:45:9C:FF:5B:8B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5E532C2BA6F25D8D6C1617C5F0F170F30A0D706C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/341D9DFC8FB9930D8BDCAC1A5A49AC459CFF5B8B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Aug 2022 19:42:34 +0000
Certificate not after:    Mon 28 Aug 2023 19:47:34 +0000
Subordinate resources:    AS: 267427
                          IP: 164.163.208.0/22
                          IP: 2804:4158::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:53:2c:2b:a6:f2:5d:8d:6c:16:17:c5:f0:f1:70:f3:0a:0d:70:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 29 19:42:34 2022 GMT
            Not After : Aug 28 19:47:34 2023 GMT
        Subject: CN=341D9DFC8FB9930D8BDCAC1A5A49AC459CFF5B8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cd:dc:b0:ba:00:05:4f:b0:ee:7d:cd:14:9d:
                    7c:b2:6c:b3:96:b7:64:47:de:b5:96:f7:a5:3f:04:
                    05:29:8c:99:62:17:83:d9:91:37:cc:02:27:56:38:
                    d4:7c:d9:ae:fb:0c:a6:26:c3:00:ab:c6:e8:30:57:
                    d0:bd:37:8b:5c:4d:92:e1:32:31:be:f8:43:d0:8e:
                    e3:0a:78:28:67:ea:22:46:ad:3b:24:13:57:51:4d:
                    fe:d3:41:ab:d9:82:eb:ef:0f:4e:8d:bc:94:71:f4:
                    af:aa:91:97:88:0f:d5:a0:08:06:a9:b8:5c:8a:50:
                    70:01:88:59:80:06:35:41:dd:1a:1b:50:be:dd:30:
                    42:97:f8:63:09:a7:14:09:85:09:90:d2:33:01:a9:
                    9f:f6:22:bb:e7:10:09:3a:dd:7c:be:40:2a:1d:5f:
                    64:6a:5a:82:90:88:49:b9:7c:1e:4a:a4:a8:d9:69:
                    1d:bc:e3:71:9c:1d:2e:fc:9b:6f:d3:00:b4:ee:fd:
                    db:cc:89:ea:fe:23:3a:41:b0:be:d4:35:19:e4:d0:
                    4d:d3:88:68:10:a0:e9:2c:a9:e5:5d:d8:ec:c7:46:
                    2c:c1:ea:9e:b5:60:9c:5b:88:0d:09:62:21:6f:8b:
                    06:e4:f1:85:e1:07:10:30:44:ed:50:cf:50:be:5b:
                    ba:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:1D:9D:FC:8F:B9:93:0D:8B:DC:AC:1A:5A:49:AC:45:9C:FF:5B:8B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/341D9DFC8FB9930D8BDCAC1A5A49AC459CFF5B8B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.208.0/22
                IPv6:
                  2804:4158::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267427

    Signature Algorithm: sha256WithRSAEncryption
         08:e2:e8:7a:ef:d8:8f:97:e5:f1:33:f7:ae:e9:59:c2:d2:cf:
         6e:f6:40:e9:ac:d4:4c:fd:47:04:6a:b8:24:69:0e:7c:c3:c8:
         4d:26:3a:03:5d:b7:82:3c:d1:1f:eb:f6:81:85:3e:0f:e1:4a:
         e2:5c:24:f1:a3:ea:3e:f2:79:42:dd:2b:68:df:47:ca:bb:8d:
         55:ac:6e:47:1c:f6:82:5e:c6:4c:47:af:11:c4:5f:d3:28:d7:
         c3:82:97:06:11:41:db:dd:fa:fd:b8:bb:0d:48:06:f9:82:6c:
         80:fa:94:d8:4d:f4:77:3c:77:9d:a9:43:d0:f2:61:af:ae:5a:
         6a:ab:fc:72:77:99:44:d6:1c:8a:95:51:36:c1:45:ce:54:38:
         f9:90:8d:82:35:dd:0e:65:49:a3:6a:00:72:14:c5:50:da:3a:
         7e:41:5b:9f:ee:0e:23:3c:1e:52:be:34:92:46:2e:c2:c1:c9:
         7f:42:de:3d:e6:e6:cb:48:67:19:4c:86:e7:14:11:8e:7c:7d:
         30:31:eb:3e:4e:83:5d:14:2f:44:c1:cc:02:7e:70:c0:e5:05:
         2d:17:6c:73:00:81:60:20:ef:62:d6:e9:92:da:2a:14:25:5c:
         f6:ee:88:a5:3a:83:45:a1:e7:6d:1e:64:2b:5c:db:81:e4:7b:
         66:67:f4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org