Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3475904905B15F9FA7D71CD8AC16B8FE5631DC89.cer
File:                     3475904905B15F9FA7D71CD8AC16B8FE5631DC89.cer (raw, json)
Hash identifier:          GItXekwtCliZC61olwDmmvoG4bH5AxJ9NCM3tLVoehs=
Subject key identifier:   34:75:90:49:05:B1:5F:9F:A7:D7:1C:D8:AC:16:B8:FE:56:31:DC:89
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1941FE47644C900C63DFCAB97C099FA7E76FF66E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/3475904905B15F9FA7D71CD8AC16B8FE5631DC89.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Oct 2023 18:24:30 +0000
Certificate not after:    Fri 11 Oct 2024 18:29:30 +0000
Subordinate resources:    AS: 264359
                          IP: 131.161.24.0/22
                          IP: 168.0.192.0/22
                          IP: 2804:1d4c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:41:fe:47:64:4c:90:0c:63:df:ca:b9:7c:09:9f:a7:e7:6f:f6:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 13 18:24:30 2023 GMT
            Not After : Oct 11 18:29:30 2024 GMT
        Subject: CN=3475904905B15F9FA7D71CD8AC16B8FE5631DC89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:af:40:8a:35:ef:01:c5:11:65:bf:81:60:35:
                    30:7c:3e:15:48:a3:f9:3c:5c:1c:9a:34:f7:d8:46:
                    80:e6:f9:b6:a2:a3:3a:63:78:12:3c:28:2d:1a:88:
                    d9:22:79:63:4f:9b:b1:2d:02:a0:e6:70:45:6d:ca:
                    df:47:af:b8:79:b2:d9:57:b9:7e:84:1e:f3:53:b9:
                    52:66:8a:eb:cc:06:24:86:e9:6c:b9:c2:7b:ae:c6:
                    71:8c:82:da:2c:e0:b2:72:89:93:ba:05:31:b4:b7:
                    55:4e:39:58:8f:41:08:28:0b:a4:5a:c5:c9:5d:2d:
                    0e:5d:86:ae:9a:74:11:68:e3:0f:a2:12:1a:59:2e:
                    46:d9:f1:68:7d:ee:17:7d:85:e6:0c:2d:60:80:02:
                    76:3a:78:66:da:e7:5f:9b:65:72:47:c6:57:e7:8b:
                    67:8c:7b:17:11:6b:53:01:72:f8:77:cb:5c:6f:6f:
                    5a:25:3a:a5:8c:9f:6c:0d:d2:24:86:01:5b:51:e9:
                    d6:f3:1b:0e:5e:42:e3:f5:a3:24:78:5c:32:48:55:
                    08:8e:4e:ca:aa:36:d2:d3:47:64:5a:de:c2:49:a6:
                    9f:ea:90:2c:74:e0:ad:14:dc:ab:9c:4d:cd:54:69:
                    3f:a2:8a:a4:b5:ec:dc:1a:07:7a:2a:0b:be:ff:5f:
                    97:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:75:90:49:05:B1:5F:9F:A7:D7:1C:D8:AC:16:B8:FE:56:31:DC:89
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/3475904905B15F9FA7D71CD8AC16B8FE5631DC89.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.24.0/22
                  168.0.192.0/22
                IPv6:
                  2804:1d4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264359

    Signature Algorithm: sha256WithRSAEncryption
         2b:e5:79:c2:e3:60:27:e9:63:fc:64:d6:8a:e5:2a:0a:fc:dc:
         1a:82:bf:75:c5:b4:63:39:79:70:73:a6:d2:dd:55:6f:66:87:
         ee:b2:62:00:bb:9c:8f:3d:82:40:0d:09:6b:13:7d:d9:cd:53:
         31:2e:2a:e1:33:3e:b5:c9:e8:ca:a3:9b:6f:f4:c3:8b:4f:a2:
         4d:fb:88:7c:44:aa:62:a7:b5:9f:bb:0d:8b:f6:aa:f0:84:d8:
         eb:c8:2d:fc:d5:33:7d:e3:24:01:a3:e5:00:82:3c:ea:81:87:
         64:4c:8d:18:61:1b:0b:af:ed:46:15:79:07:f5:e5:ae:35:7a:
         e0:e1:a3:1b:17:90:e9:3d:24:4f:33:84:06:b0:cd:d7:f3:96:
         ec:1c:10:e3:5a:08:59:5a:5e:56:07:73:09:31:12:6e:d8:81:
         8d:6e:2c:59:45:94:55:e8:71:9a:63:59:ad:16:09:ec:10:7c:
         a2:68:34:cf:a5:7f:d8:23:18:01:eb:77:b6:33:f2:39:cb:d3:
         19:aa:05:92:bb:82:42:7f:fb:63:9d:08:1d:a4:11:b0:50:63:
         fd:6f:65:be:ae:5a:30:20:46:02:a1:b2:cf:27:54:fe:84:fe:
         79:47:ce:9b:ec:f5:45:8a:75:dd:ec:31:b5:f7:83:40:a9:28:
         09:22:cb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org