Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3756FE6943C84EC780FBC3F021FE18842DE8989D.cer
File:                     3756FE6943C84EC780FBC3F021FE18842DE8989D.cer (raw, json)
Hash identifier:          m8/S2RnAitIF4LqZAXTbMt4zFLOyWztI+Ds+WFYXZ68=
Subject key identifier:   37:56:FE:69:43:C8:4E:C7:80:FB:C3:F0:21:FE:18:84:2D:E8:98:9D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4694A62033155F62FF0E7ED8D0D34186B247317F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/3756FE6943C84EC780FBC3F021FE18842DE8989D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 17 Nov 2022 13:00:41 +0000
Certificate not after:    Thu 16 Nov 2023 13:05:41 +0000
Subordinate resources:    AS: 263433
                          IP: 177.91.80.0/21
                          IP: 2804:11b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:94:a6:20:33:15:5f:62:ff:0e:7e:d8:d0:d3:41:86:b2:47:31:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 17 13:00:41 2022 GMT
            Not After : Nov 16 13:05:41 2023 GMT
        Subject: CN=3756FE6943C84EC780FBC3F021FE18842DE8989D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:51:22:51:f9:4a:5e:b8:fb:55:4e:0f:60:89:
                    03:a1:d8:01:8d:02:84:40:3c:14:3a:d4:0f:93:3c:
                    4a:1e:06:14:a5:0f:ca:07:65:a2:64:f8:9b:b0:02:
                    34:10:2e:ea:ca:89:b7:b8:1d:4a:a4:77:6a:30:f2:
                    2d:b1:99:74:e8:1f:c0:11:ef:b3:cb:8f:b2:f1:45:
                    41:56:52:22:6a:f6:f9:9f:3b:ee:f8:cd:c8:1d:81:
                    75:fe:3f:26:8b:90:17:10:a9:de:dd:6a:ba:d8:e4:
                    02:e3:90:14:2e:b9:e7:f6:22:cf:59:45:19:0e:40:
                    a3:a9:1c:11:d6:b8:54:19:a4:8c:dc:a6:fc:3d:db:
                    9b:01:d7:07:42:06:fa:d6:60:d9:f2:c2:7a:51:29:
                    e7:cb:c2:70:44:09:e2:fb:0f:97:6a:63:9f:32:53:
                    d5:29:e1:e3:fd:10:ec:c6:8a:f2:01:d6:9d:d2:c5:
                    59:8f:b5:52:4a:b5:96:90:3c:46:6e:34:15:67:a8:
                    91:5a:34:1c:72:71:1f:72:34:e8:9b:23:f5:9e:df:
                    35:4c:f2:e0:b7:f7:8b:52:d4:88:3a:6c:b2:67:13:
                    0c:a9:39:59:86:f9:b5:ee:aa:d5:25:00:1b:a3:13:
                    86:d9:7f:72:09:03:9a:74:11:00:fb:27:8a:a4:5c:
                    92:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                37:56:FE:69:43:C8:4E:C7:80:FB:C3:F0:21:FE:18:84:2D:E8:98:9D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/3756FE6943C84EC780FBC3F021FE18842DE8989D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.80.0/21
                IPv6:
                  2804:11b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263433

    Signature Algorithm: sha256WithRSAEncryption
         55:72:ce:e8:d3:14:8f:ad:17:db:57:12:4c:62:9a:fa:2a:54:
         ae:f3:17:77:dc:67:50:c5:37:31:df:47:d2:47:a7:61:d5:c8:
         b9:8e:df:f1:cb:86:5c:42:18:5a:c5:c8:d1:a7:c6:9b:49:8f:
         de:46:69:af:95:b5:be:e7:d9:d1:89:d8:08:8d:57:1c:28:2d:
         55:e4:d3:ef:64:b7:8a:85:67:5b:98:08:58:97:d3:44:66:2a:
         6d:85:8d:26:78:d8:76:3d:d7:77:b2:4c:37:5f:8f:5a:a7:7c:
         ba:e4:3a:a2:61:5c:d5:08:40:0d:3f:b5:ac:e4:c7:08:4a:1f:
         ec:7a:cc:b7:a4:67:f3:7e:81:79:27:07:35:b4:36:9d:6a:4f:
         34:80:e6:c5:0c:da:a9:bc:74:dd:43:3a:81:cb:b3:c7:c1:1d:
         3e:e8:47:ef:4d:cb:f8:55:67:77:48:ae:24:12:2d:1a:f9:f7:
         1e:7b:cd:b5:a8:2f:a2:3d:dc:01:16:8d:ac:65:99:14:29:10:
         c8:ab:73:1f:d1:da:62:be:70:7e:ac:78:33:f0:36:c0:0e:38:
         46:dd:27:e1:48:1f:8f:b0:52:81:80:37:80:d7:0c:b8:5d:53:
         1e:3c:fa:b9:0a:ff:20:1a:a8:54:86:97:e8:e9:d8:52:7b:b8:
         d0:a7:97:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org