Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/34FC8088363FBE17F0AA6CF64A89E8E5C3292056.cer
File:                     34FC8088363FBE17F0AA6CF64A89E8E5C3292056.cer (raw, json)
Hash identifier:          pYjptacKgKTLIAyiB2ValCXI2JOYtWXgq+gzF0BYw10=
Subject key identifier:   34:FC:80:88:36:3F:BE:17:F0:AA:6C:F6:4A:89:E8:E5:C3:29:20:56
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       344FCD03F8880B996D2417A037EFDD3A961C4DFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/34FC8088363FBE17F0AA6CF64A89E8E5C3292056.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Jan 2024 22:44:43 +0000
Certificate not after:    Thu 02 Jan 2025 22:49:43 +0000
Subordinate resources:    AS: 266194
                          IP: 45.5.176.0/22
                          IP: 2804:3c2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4f:cd:03:f8:88:0b:99:6d:24:17:a0:37:ef:dd:3a:96:1c:4d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  4 22:44:43 2024 GMT
            Not After : Jan  2 22:49:43 2025 GMT
        Subject: CN=34FC8088363FBE17F0AA6CF64A89E8E5C3292056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:72:08:73:a4:8f:67:1f:d2:28:78:65:fa:1e:
                    f0:0e:b4:45:60:89:b7:93:54:24:86:73:94:1f:dd:
                    28:d8:46:c8:02:c7:af:f3:9a:00:ae:fe:f5:90:ee:
                    42:fd:52:5e:9e:d9:e3:f2:48:b5:dc:d2:e9:3b:2d:
                    50:6c:72:d2:c0:34:02:b7:7f:c1:41:65:f5:6a:f4:
                    8a:8b:8e:1f:19:0f:e0:5e:84:d7:3b:dd:1a:0d:65:
                    c2:d0:92:3a:57:58:eb:c3:98:d1:87:91:69:8d:b1:
                    78:ac:7d:a0:72:9b:b8:b1:68:42:ff:37:1a:ca:97:
                    18:92:43:ee:2f:91:a5:2f:68:5c:83:a2:8c:b6:51:
                    1d:eb:1a:0d:e6:fc:82:9b:1d:8a:4d:e9:31:ac:ba:
                    8d:25:f3:8a:96:ba:fe:e7:9c:e5:10:c8:55:0e:12:
                    57:93:53:57:15:ef:bd:21:96:14:39:26:bb:08:00:
                    3e:7d:d4:4e:e5:00:80:33:dd:5a:37:06:ca:67:e3:
                    84:ea:99:d4:95:6c:7c:ec:83:b9:c1:c3:9e:0b:2e:
                    84:2c:c1:3c:35:c2:72:41:f9:fa:51:69:d1:ac:dc:
                    02:4c:00:3e:39:17:da:a0:22:c0:d9:e5:b1:f1:f8:
                    79:70:85:79:6c:7e:66:bd:5c:c9:ae:66:47:a1:26:
                    f6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:FC:80:88:36:3F:BE:17:F0:AA:6C:F6:4A:89:E8:E5:C3:29:20:56
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/34FC8088363FBE17F0AA6CF64A89E8E5C3292056.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.176.0/22
                IPv6:
                  2804:3c2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266194

    Signature Algorithm: sha256WithRSAEncryption
         b3:28:ab:22:a6:bd:37:b5:1f:76:c5:91:89:b4:9c:bc:68:ec:
         ff:fc:eb:e1:0b:ae:d7:22:f9:6c:4b:bd:ed:29:44:3b:d2:de:
         cb:fa:be:b0:a2:a7:2d:c0:f6:44:dd:50:1e:01:06:d0:7f:d0:
         81:56:7d:ab:70:89:dc:d5:b4:e8:7c:69:85:6e:4d:3f:15:2c:
         3e:53:1d:9a:d4:24:e6:c2:9e:ff:a8:99:cb:24:03:5e:49:15:
         e1:a9:13:2d:44:17:f1:d3:57:bb:05:75:51:4a:f6:8d:f9:33:
         38:b3:7f:88:52:6c:33:f7:b1:93:5a:9c:e9:f6:11:dd:4f:50:
         f5:67:d7:57:5a:58:37:ec:9e:84:1b:d8:29:27:86:dd:ed:dc:
         c9:11:47:47:e8:9b:a8:36:77:57:29:7c:53:9a:6c:bb:6f:cb:
         04:75:cb:8b:61:36:35:e7:c4:96:0e:7b:1a:c1:94:dd:61:76:
         37:bd:2b:9b:66:27:04:8b:f4:8d:45:de:4b:f8:f1:4e:89:66:
         8b:e5:bb:7a:8f:3f:94:6a:88:00:75:f4:1c:f8:3f:91:c0:83:
         39:d7:9b:34:5c:fa:fc:84:9a:e0:61:d1:66:25:03:b0:c2:1c:
         73:be:a7:52:1c:40:c3:65:70:ef:88:94:d6:8d:20:72:fa:62:
         3c:de:0a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org