Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
File:                     3622354098DA9E8445BAD24445F56C57EE638E0E.cer (raw, json)
Hash identifier:          WW2aUccrCxfG0AwZr/Z53I5nwjlSLjqO/V1EbEWkFdA=
Subject key identifier:   36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       13DF542D0DFFA6304E0A2C9958F5BADCFECCAC84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Sep 2023 23:32:02 +0000
Certificate not after:    Tue 03 Sep 2024 23:37:02 +0000
Subordinate resources:    AS: 28220
                          IP: 45.4.64.0/22
                          IP: 138.0.100.0/22
                          IP: 168.227.108.0/22
                          IP: 168.228.68.0/22
                          IP: 170.82.92.0/22
                          IP: 177.89.0.0/16
                          IP: 177.137.192.0/20
                          IP: 179.96.192.0/21
                          IP: 179.96.240.0/20
                          IP: 179.190.128.0/17
                          IP: 186.192.16.0/20
                          IP: 186.193.96.0/20
                          IP: 186.208.208.0/21
                          IP: 186.235.0.0/20
                          IP: 186.236.192.0/19
                          IP: 186.251.112.0/21
                          IP: 187.49.192.0/20
                          IP: 187.60.64.0/19
                          IP: 187.61.128.0/17
                          IP: 187.86.96.0/20
                          IP: 187.87.112.0/20
                          IP: 187.108.64.0/20
                          IP: 187.109.176.0/20
                          IP: 187.111.224.0/19
                          IP: 189.45.16.0/20
                          IP: 189.124.128.0/17
                          IP: 191.241.40.0/21
                          IP: 200.233.80.0/20
                          IP: 201.148.188.0/22
                          IP: 2804:54::/32
                          IP: 2804:2140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:df:54:2d:0d:ff:a6:30:4e:0a:2c:99:58:f5:ba:dc:fe:cc:ac:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  5 23:32:02 2023 GMT
            Not After : Sep  3 23:37:02 2024 GMT
        Subject: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d3:47:fd:69:b6:fa:be:58:a3:25:8a:99:2e:
                    81:6e:ee:85:1d:8b:f5:d0:07:5f:14:37:69:e1:83:
                    ae:72:de:9f:60:17:38:67:42:b3:34:2d:d0:80:5f:
                    9b:6e:ad:ae:6a:62:c9:a9:8e:60:81:08:bc:76:29:
                    c4:01:e7:07:d3:32:60:32:4f:fc:a8:e7:04:ae:25:
                    d2:af:3e:cc:b4:35:d6:59:b3:92:f5:c5:8a:7d:94:
                    d2:59:4a:5f:d1:bd:24:00:b9:4c:81:58:f2:7e:82:
                    fb:b4:99:33:a4:e4:b0:b2:51:b2:97:bf:24:80:c1:
                    75:c5:83:03:62:88:6a:c4:3e:2e:1e:fa:eb:d0:e8:
                    bb:da:e1:a5:cc:3c:c0:f9:fa:60:85:cc:6d:e0:bc:
                    3a:b0:42:df:56:b1:04:6a:f0:c7:16:25:bc:9a:2d:
                    86:4e:a0:96:16:23:17:38:b8:6b:c3:84:30:0f:47:
                    36:0d:f2:f7:27:8e:81:e6:50:0c:a7:ab:91:70:18:
                    55:14:b2:09:33:24:89:85:5b:19:64:e4:62:b2:50:
                    39:44:72:40:f1:2e:f3:06:63:ee:16:e9:7f:bf:c8:
                    5b:0f:d1:f8:b6:ba:d7:5a:f1:4f:78:07:a4:9c:53:
                    43:9b:23:bf:c7:e1:d5:99:a5:6b:6d:c0:f2:44:99:
                    e5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.64.0/22
                  138.0.100.0/22
                  168.227.108.0/22
                  168.228.68.0/22
                  170.82.92.0/22
                  177.89.0.0/16
                  177.137.192.0/20
                  179.96.192.0/21
                  179.96.240.0/20
                  179.190.128.0/17
                  186.192.16.0/20
                  186.193.96.0/20
                  186.208.208.0/21
                  186.235.0.0/20
                  186.236.192.0/19
                  186.251.112.0/21
                  187.49.192.0/20
                  187.60.64.0/19
                  187.61.128.0/17
                  187.86.96.0/20
                  187.87.112.0/20
                  187.108.64.0/20
                  187.109.176.0/20
                  187.111.224.0/19
                  189.45.16.0/20
                  189.124.128.0/17
                  191.241.40.0/21
                  200.233.80.0/20
                  201.148.188.0/22
                IPv6:
                  2804:54::/32
                  2804:2140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28220

    Signature Algorithm: sha256WithRSAEncryption
         56:63:27:88:97:62:67:32:61:0b:0f:d0:5f:46:1e:3b:d5:b2:
         04:39:d1:ac:fe:20:c8:b6:35:19:71:5f:a1:be:e9:6f:f9:fe:
         db:2a:8d:1d:79:34:43:a4:ce:85:8f:4c:ea:bb:b5:35:0c:85:
         7e:22:9f:bd:3d:a9:93:c0:a6:cd:5d:9f:9d:89:cf:19:b8:0c:
         2c:ce:ec:6a:7c:12:c5:bb:5d:2e:d6:1b:c4:d5:23:98:7f:58:
         37:60:82:5d:de:42:81:72:2b:1b:67:71:5f:ca:5a:fe:12:a1:
         34:e9:86:22:ba:34:f1:73:0c:35:0e:81:6d:7a:f5:6e:40:af:
         42:a0:45:2c:3b:e2:a6:6f:49:0b:83:cc:28:10:6d:4b:14:59:
         37:60:d9:14:73:e3:51:f6:a8:c7:fa:c7:6f:fc:cd:d4:33:34:
         19:fa:ff:2c:b6:c4:60:89:03:d6:8f:19:3f:ff:91:eb:e3:d3:
         93:b0:24:cd:eb:4a:a3:b5:67:67:d6:7f:b3:90:7b:dd:bf:ad:
         93:03:5f:e1:33:e6:75:54:5d:46:13:a5:2e:8c:dd:52:11:f4:
         a0:73:0e:b1:eb:11:86:40:53:ec:a9:21:e5:57:70:be:af:c4:
         76:b4:3f:75:04:54:9d:30:8c:a6:04:e0:79:81:58:80:a4:05:
         b8:04:b0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org