Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.cer
File:                     3494EAAED32893449A2D1041487BFE2C13F32DA8.cer (raw, json)
Hash identifier:          tWA4bQDwin4PVsy4uV6L4s7C/Oskytdk10nVboo+PnM=
Subject key identifier:   34:94:EA:AE:D3:28:93:44:9A:2D:10:41:48:7B:FE:2C:13:F3:2D:A8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       24C3B67D1F42C3B38A2F1F905956625D7552FCB8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Mar 2023 20:06:42 +0000
Certificate not after:    Tue 26 Mar 2024 20:11:42 +0000
Subordinate resources:    AS: 265061
                          IP: 170.231.56.0/22
                          IP: 2804:3230::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c3:b6:7d:1f:42:c3:b3:8a:2f:1f:90:59:56:62:5d:75:52:fc:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 28 20:06:42 2023 GMT
            Not After : Mar 26 20:11:42 2024 GMT
        Subject: CN=3494EAAED32893449A2D1041487BFE2C13F32DA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:f9:c9:84:5c:f2:54:8f:52:04:0b:ea:04:de:
                    09:f7:5e:9f:dd:15:40:ce:70:d0:e9:f4:f5:1b:7d:
                    cb:d0:e3:7c:13:c2:5a:fb:1b:62:c0:d5:ac:a8:9e:
                    a4:ed:cc:74:48:c8:70:c0:f6:ca:1a:3d:bb:2a:d2:
                    14:a6:5b:f8:95:37:94:91:dd:64:ef:d3:fb:3c:94:
                    b4:0f:78:a9:a8:c1:36:b0:42:71:35:4e:2d:a6:7e:
                    2b:2f:6a:13:78:3e:3d:84:78:f4:2c:5e:dc:b2:96:
                    d3:b1:fd:d9:e4:a8:41:ea:28:2b:fb:d9:cd:27:ff:
                    38:ac:57:48:b5:0a:86:3a:a6:88:9e:3f:4b:b8:22:
                    da:0b:b2:4f:d5:70:06:4b:f3:99:90:f7:41:07:47:
                    6a:f4:9d:aa:be:01:99:35:a9:a5:94:a9:25:03:15:
                    64:3c:cb:e7:8f:64:bb:09:06:f4:90:d3:c0:6e:15:
                    20:a7:ad:34:e2:f4:41:36:25:fb:92:5b:76:da:a7:
                    b1:f2:b1:64:f9:e4:11:83:b5:c3:f7:fe:18:91:52:
                    2b:cf:e9:6c:f1:15:dc:2b:9c:a7:9a:ea:51:d2:38:
                    79:bd:b8:bb:2b:e4:db:22:66:14:2c:a3:36:5a:4d:
                    9d:4f:b7:3e:c3:b1:83:ea:03:65:f5:58:e2:81:b0:
                    e8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:94:EA:AE:D3:28:93:44:9A:2D:10:41:48:7B:FE:2C:13:F3:2D:A8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.56.0/22
                IPv6:
                  2804:3230::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265061

    Signature Algorithm: sha256WithRSAEncryption
         48:57:0d:fd:6f:55:6d:c2:f2:88:0c:67:9c:84:99:ed:db:7a:
         21:f3:b6:0b:88:08:84:c3:27:3d:56:fb:fc:eb:b9:95:00:ff:
         4f:15:7f:1a:63:3a:fa:bd:3b:1e:05:b4:84:9a:c4:5d:12:c0:
         bf:b8:49:95:77:a8:f2:25:ef:aa:4a:5f:03:be:8a:eb:44:52:
         32:df:52:bb:bf:e5:57:7c:8c:7d:84:16:bd:40:42:14:72:8b:
         78:75:05:cf:d2:6e:9d:dd:5d:a8:76:5a:3d:94:2c:da:89:10:
         9b:ed:4b:67:d6:f7:50:ba:31:c0:01:89:11:52:71:97:9b:1d:
         64:5e:57:ec:7d:27:7b:5a:e7:33:75:b6:f3:35:74:a9:86:11:
         9b:0e:72:f5:81:fa:9e:95:d7:a1:31:87:76:44:ec:65:29:1f:
         e8:8f:06:cb:a0:9e:fa:1a:db:84:01:d0:bd:df:98:40:55:3a:
         85:9f:40:5b:50:7f:db:1f:d4:c4:3a:af:7a:b0:df:a0:a6:27:
         39:41:97:7b:4c:63:03:17:de:16:68:b3:f4:75:f3:d4:75:69:
         ef:1b:96:83:b0:7d:f4:30:df:6b:c3:f9:df:15:3b:64:38:b2:
         1c:b7:31:18:43:ec:9e:7f:36:47:8b:ce:95:67:7e:40:24:2e:
         9e:ef:d5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org