Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer
File:                     3479A07990261201A4636EAD12C16D32507ECB61.cer (raw, json)
Hash identifier:          t8klJVwQqiw79Dle3EGulGpa91gpn2mSH4dHuzO00dA=
Subject key identifier:   34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4A6395523A1F8F816F89149FA75FE451E01B72E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3479A07990261201A4636EAD12C16D32507ECB61.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Dec 2023 14:00:01 +0000
Certificate not after:    Tue 10 Dec 2024 14:05:01 +0000
Subordinate resources:    AS: 263878
                          IP: 138.204.20.0/22
                          IP: 2804:2720::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:63:95:52:3a:1f:8f:81:6f:89:14:9f:a7:5f:e4:51:e0:1b:72:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 12 14:00:01 2023 GMT
            Not After : Dec 10 14:05:01 2024 GMT
        Subject: CN=3479A07990261201A4636EAD12C16D32507ECB61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e1:12:f1:ea:d2:bc:d1:30:92:cf:ee:29:0c:
                    5c:a9:3a:92:70:2d:53:ee:08:5c:d0:60:1d:ed:55:
                    6c:45:c7:62:2a:a7:d7:95:aa:a7:b8:24:31:42:5a:
                    84:8d:56:10:10:a3:60:a2:a1:80:94:0c:57:25:9d:
                    7b:f0:b4:03:86:c8:f6:8a:3f:a6:8c:d8:27:56:94:
                    92:63:e2:dd:ed:b0:04:f9:85:13:04:f3:e0:c6:8d:
                    13:ea:8b:2f:33:5a:b5:22:88:f8:bb:a7:8d:37:3d:
                    b0:e1:0f:d7:90:1c:5a:15:b6:34:23:6f:b7:aa:54:
                    96:2f:bc:03:70:7f:f7:2b:3f:4b:da:99:5c:d3:be:
                    2d:9d:74:22:67:01:96:50:7e:98:13:e6:d4:16:80:
                    cb:26:4c:07:44:34:17:b9:26:ea:69:bc:16:a6:2d:
                    02:cd:c2:4d:39:17:6c:63:8a:3b:33:55:17:63:2d:
                    d4:30:17:d4:6e:20:60:a1:d0:9d:d7:31:ee:62:b3:
                    d4:b5:fa:32:9c:65:ee:f9:9e:4b:e9:81:77:5a:2b:
                    40:e4:b5:75:69:43:05:d9:d7:0e:33:af:b0:f3:97:
                    e2:fc:38:88:15:00:49:0f:11:17:4d:fb:ad:4f:bc:
                    db:8d:26:68:8f:60:8b:52:3b:b4:3c:ed:e1:ce:e7:
                    49:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3479A07990261201A4636EAD12C16D32507ECB61.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.20.0/22
                IPv6:
                  2804:2720::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263878

    Signature Algorithm: sha256WithRSAEncryption
         b6:b2:d7:06:1e:7d:1f:a6:2d:98:6b:16:04:a1:6f:95:4b:4b:
         b8:72:7b:ac:e9:c0:23:8e:5c:90:8d:3f:7e:ab:70:6e:17:5e:
         c5:5a:21:69:74:c1:cb:ea:ea:69:d1:9e:8d:be:5c:8d:26:ab:
         5f:f0:59:b7:d2:5f:c3:22:82:32:c7:52:f4:b7:21:4e:1b:9c:
         e0:6a:f8:b0:fe:2d:d1:cd:b6:5e:f5:18:42:bd:f0:ba:51:8e:
         34:51:8f:03:4b:26:c5:4b:b1:15:2d:3b:78:b3:d2:d6:50:f7:
         ae:0e:f2:8f:f1:87:5b:8f:ec:be:ce:51:93:32:77:12:3a:6a:
         4b:94:b2:e6:45:75:38:de:35:4f:b3:7a:3b:32:ee:9d:fd:44:
         a0:05:1d:58:a7:b0:a5:d6:26:4b:da:c8:b6:bd:bf:66:08:e7:
         af:21:43:b0:cc:78:77:1c:2a:cc:95:3c:a1:0b:49:0f:e3:36:
         3a:69:7a:a9:3a:fa:2a:14:b9:c7:87:0f:b2:89:a5:b3:46:b2:
         96:7a:8c:8d:ec:55:ee:ba:03:fe:88:a8:05:91:ba:b9:c3:5c:
         cb:1c:c0:61:d5:84:64:93:d2:a1:c6:5e:23:f3:f9:f5:3e:8b:
         16:ec:4c:61:8d:85:0a:f3:b8:59:a6:41:c4:20:7b:27:39:5d:
         ac:04:6e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org