Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/34BDB7EA10144191770071E69A212425A2FF910E.cer
File:                     34BDB7EA10144191770071E69A212425A2FF910E.cer (raw, json)
Hash identifier:          5keIO/uTYEWhTtp0bnWRw9/FW4yiMIx9YxG90I0yqwE=
Subject key identifier:   34:BD:B7:EA:10:14:41:91:77:00:71:E6:9A:21:24:25:A2:FF:91:0E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       527270E13CD05BD1A9FA0A0BBCA07D3209C23004
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/1/34BDB7EA10144191770071E69A212425A2FF910E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 07:05:37 +0000
Certificate not after:    Tue 21 May 2024 07:10:37 +0000
Subordinate resources:    AS: 269025
                          IP: 45.178.128.0/22
                          IP: 2804:5e50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:72:70:e1:3c:d0:5b:d1:a9:fa:0a:0b:bc:a0:7d:32:09:c2:30:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 07:05:37 2023 GMT
            Not After : May 21 07:10:37 2024 GMT
        Subject: CN=34BDB7EA10144191770071E69A212425A2FF910E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:95:0c:0f:87:5e:5f:c5:bd:f7:6c:c0:9b:75:
                    33:53:cb:7b:cd:d2:83:c7:1f:ba:c2:9b:b9:80:0f:
                    a7:a0:ad:69:8d:02:ba:cd:e9:dd:4c:16:d9:f9:27:
                    fe:aa:a5:18:f4:67:76:91:30:e0:82:a9:b7:25:16:
                    f7:a7:4e:22:fb:c6:aa:ad:6d:9a:00:31:88:12:67:
                    b4:18:fc:dc:9a:f8:26:e5:6b:3d:76:17:b5:ce:3a:
                    0f:48:21:f0:5f:73:2c:b5:d2:91:1f:d8:a8:71:41:
                    46:ca:db:95:2d:38:79:47:57:c2:17:58:8a:49:ab:
                    9f:7e:39:db:4a:40:5f:85:14:dc:12:7c:e4:09:c5:
                    dd:56:3b:db:3c:08:c9:64:1b:f3:af:ec:74:d0:46:
                    90:3d:7d:e7:6c:74:91:95:59:f7:6d:5e:f2:df:18:
                    7c:6f:89:52:45:f9:f8:a6:ff:00:7d:4a:97:b3:c9:
                    d1:58:5f:a3:80:1a:c1:ce:7b:a0:a9:5d:f5:24:a0:
                    e2:ca:66:d9:ce:07:66:ab:30:5c:bb:f6:74:aa:98:
                    bf:7b:1c:01:63:e6:5a:bf:8a:1d:92:e3:4e:a4:a2:
                    1a:28:e2:b3:9f:50:69:fc:8b:28:95:50:f7:70:a7:
                    68:fd:18:f6:3b:1a:a9:f0:12:a9:db:1f:0a:91:09:
                    50:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:BD:B7:EA:10:14:41:91:77:00:71:E6:9A:21:24:25:A2:FF:91:0E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/1/34BDB7EA10144191770071E69A212425A2FF910E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.128.0/22
                IPv6:
                  2804:5e50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269025

    Signature Algorithm: sha256WithRSAEncryption
         17:c4:44:15:0e:46:f8:ce:79:fd:68:95:bc:a3:f5:bc:39:d9:
         02:65:c6:29:69:25:9e:66:bd:c2:5f:d8:3d:74:a8:b9:9b:71:
         33:55:a9:7f:fa:51:ec:29:fa:d7:72:08:bd:c6:ac:d2:f9:57:
         db:86:ed:12:d4:8d:35:e8:46:2b:74:98:ed:57:b9:a5:2d:af:
         30:79:ef:59:10:ff:e4:a2:36:02:0a:8d:eb:a7:89:d6:ed:0d:
         cf:2f:84:54:14:eb:ed:90:f7:d6:5d:67:7d:e9:2c:77:4e:07:
         19:f7:1a:10:ea:8c:46:d1:81:f9:8d:44:44:d5:88:f7:42:64:
         f2:8e:d7:d7:f2:be:10:5d:45:29:f6:0e:93:f4:17:84:70:4f:
         81:59:69:b1:92:c9:0b:87:b1:b9:31:52:73:43:94:d6:d5:c0:
         ee:60:7b:f7:99:00:35:f4:1f:2f:16:4a:b3:9d:4c:5a:29:8c:
         3d:8c:f5:b7:5d:a2:2c:5e:36:1a:aa:c3:e4:70:fe:22:00:3e:
         f0:89:e5:f0:e2:e7:7c:3a:b8:53:c9:b6:37:fd:c3:7d:a8:17:
         f4:58:90:19:97:21:7e:bb:93:71:82:5e:d0:b1:7b:2b:a4:9e:
         7c:6c:90:ae:1e:52:2d:dc:85:a1:6e:66:e5:e1:2d:59:60:82:
         34:36:ef:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org