Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/37F64A2B29EDA50E6EA543D7B6EE064CFBF0B07C.cer
File:                     37F64A2B29EDA50E6EA543D7B6EE064CFBF0B07C.cer (raw, json)
Hash identifier:          +Z275MBBy4Icw3Ou1Bf/QpDMyaAmn8ONneMWnbC/Oxs=
Subject key identifier:   37:F6:4A:2B:29:ED:A5:0E:6E:A5:43:D7:B6:EE:06:4C:FB:F0:B0:7C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5F07DA6347F1E7DB2A4B2ECD0D8AADC7ACE0D201
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/37F64A2B29EDA50E6EA543D7B6EE064CFBF0B07C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 07 Jan 2023 08:30:24 +0000
Certificate not after:    Sat 06 Jan 2024 08:35:24 +0000
Subordinate resources:    AS: 267332
                          IP: 45.233.244.0/22
                          IP: 2804:4bd8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:07:da:63:47:f1:e7:db:2a:4b:2e:cd:0d:8a:ad:c7:ac:e0:d2:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  7 08:30:24 2023 GMT
            Not After : Jan  6 08:35:24 2024 GMT
        Subject: CN=37F64A2B29EDA50E6EA543D7B6EE064CFBF0B07C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:0f:ee:74:8d:ef:f6:81:70:71:cc:f1:7d:
                    a7:b8:f6:cf:b6:12:b5:51:98:da:6e:65:45:3e:3e:
                    3d:a9:16:14:24:54:b2:2a:49:3d:e5:1f:2c:08:9b:
                    30:6f:51:10:15:a7:63:89:5a:51:97:e3:77:e7:56:
                    21:42:21:59:e7:ae:59:89:50:b0:8a:51:5b:a0:72:
                    0e:c9:89:d5:b1:ee:3f:c4:34:99:a0:e9:9f:56:23:
                    f1:3d:4e:df:aa:3e:a8:6f:f2:c0:df:5c:fc:b4:2a:
                    a3:cc:91:9f:20:94:04:24:f0:43:07:c4:8b:c1:02:
                    48:be:93:d3:44:36:c4:a0:1b:0b:47:f8:dd:d2:3f:
                    3b:0d:15:5e:09:8a:f4:dc:2b:20:dc:f0:20:30:95:
                    8d:6b:a5:ac:31:42:26:49:9e:26:c7:bb:d3:7e:f5:
                    3f:5b:70:d7:c6:b0:1f:0b:eb:4b:42:4b:4e:71:fc:
                    54:9c:b1:33:c1:cf:53:18:b4:f5:6c:f6:91:63:dd:
                    d2:6d:b4:78:3e:0b:a3:d0:a1:9e:31:8a:e1:f0:c0:
                    6e:c6:ba:d9:a1:5a:ad:ec:68:da:8f:7e:a7:50:e3:
                    9f:76:78:d3:57:1e:13:2f:b6:0a:3c:54:a1:16:ed:
                    c0:27:f4:80:64:bd:b7:7f:8b:9a:9f:b0:39:2c:55:
                    ff:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                37:F6:4A:2B:29:ED:A5:0E:6E:A5:43:D7:B6:EE:06:4C:FB:F0:B0:7C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/37F64A2B29EDA50E6EA543D7B6EE064CFBF0B07C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.244.0/22
                IPv6:
                  2804:4bd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267332

    Signature Algorithm: sha256WithRSAEncryption
         42:04:36:85:09:64:35:9a:28:e0:f8:a3:f7:28:9f:90:be:43:
         65:fb:59:78:73:ee:08:6e:c9:ab:d4:82:bd:f4:04:cf:77:81:
         5a:a6:fa:cb:1a:97:82:6b:6d:df:9b:0d:de:62:2e:f9:d3:52:
         d5:eb:bb:da:fc:3b:eb:8b:09:80:a7:9a:bc:58:df:e7:16:4a:
         67:cc:f6:6c:ae:4b:f2:55:ca:c5:53:9f:ed:a0:b6:34:c4:84:
         58:4d:8c:c5:67:f5:42:e7:32:7e:e5:f1:32:e4:93:c0:6b:ce:
         a0:d2:de:1e:2b:fc:5d:2b:a2:72:d1:cb:44:ba:6e:a9:f6:56:
         d4:e8:ea:67:3e:1a:1c:08:63:ea:32:50:c4:5c:8e:d0:3e:96:
         eb:df:19:8b:66:67:62:3f:85:36:5e:dd:5e:36:e8:c1:aa:4f:
         45:96:63:dd:ad:dc:e3:f1:0d:4e:9f:ff:ae:e9:73:f9:15:83:
         73:38:de:a9:37:af:b5:bb:a5:66:76:fe:57:3c:eb:cb:f8:82:
         d8:b9:f4:6d:1c:17:ad:6a:d0:22:70:d7:66:e0:eb:8c:f4:a9:
         fb:d9:bd:4d:92:27:32:e9:a1:c2:c0:d0:4a:73:ce:19:04:4c:
         c5:e4:09:d4:a1:b1:63:cc:2b:e8:40:61:2f:75:86:39:34:75:
         32:e2:1b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org