Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/381C4D4CA3E1AEE9BF36AA1B5691B8C1310ADBEB.cer
File:                     381C4D4CA3E1AEE9BF36AA1B5691B8C1310ADBEB.cer (raw, json)
Hash identifier:          sYRBPcYgHG0Ejfmf3xWtzTGWhZjcDViyEdd1wmk451U=
Subject key identifier:   38:1C:4D:4C:A3:E1:AE:E9:BF:36:AA:1B:56:91:B8:C1:31:0A:DB:EB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3F337D146CB2B41841A71ACBC726DE5AE78BBEAE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E75dCiaujnpz5MnPogNsKZSxhKpjwVhq6PNoarBWo7j2/0/381C4D4CA3E1AEE9BF36AA1B5691B8C1310ADBEB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E75dCiaujnpz5MnPogNsKZSxhKpjwVhq6PNoarBWo7j2/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Nov 2022 13:04:09 +0000
Certificate not after:    Thu 09 Nov 2023 13:09:09 +0000
Subordinate resources:    AS: 271064
                          IP: 179.48.28.0/22
                          IP: 2804:75b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:33:7d:14:6c:b2:b4:18:41:a7:1a:cb:c7:26:de:5a:e7:8b:be:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 10 13:04:09 2022 GMT
            Not After : Nov  9 13:09:09 2023 GMT
        Subject: CN=381C4D4CA3E1AEE9BF36AA1B5691B8C1310ADBEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a1:5f:14:89:86:ed:d0:53:0e:92:b6:16:f5:
                    ef:ff:4a:27:9b:6f:ef:f0:89:0f:8f:c9:cb:4d:1a:
                    2e:f1:2d:be:17:0c:23:5b:be:74:b1:fc:9c:3d:e3:
                    24:49:21:c7:65:8b:6a:b0:67:ce:75:89:fe:f3:2b:
                    f5:45:7f:02:eb:01:c8:3a:e1:4e:73:31:e7:8b:79:
                    29:d9:b4:7c:05:2d:e7:47:4c:cb:a8:2e:3e:26:3e:
                    92:26:28:e0:3a:51:04:3c:3c:c0:80:c8:50:6b:07:
                    ee:31:7c:72:d0:57:bd:81:fa:bd:cf:19:bd:9c:5e:
                    af:c0:70:00:10:4a:35:41:68:1a:00:45:ba:60:db:
                    18:eb:36:67:c4:e6:a9:59:e1:61:f6:b0:6d:f4:56:
                    3f:21:be:ec:91:cc:46:0e:51:a8:54:12:88:fd:64:
                    1b:09:e3:f1:a2:2a:33:16:0e:dd:1a:36:cf:87:37:
                    f9:4e:5f:3a:12:bb:62:ef:34:b9:8e:e8:de:51:21:
                    40:2a:1e:68:f0:00:d5:50:22:17:f8:7e:dd:47:85:
                    21:69:a8:fa:03:8d:be:75:a6:06:13:99:35:0a:9f:
                    17:96:2e:13:fc:17:42:58:46:63:37:0b:ad:32:68:
                    14:79:73:cb:53:2d:77:84:48:d4:fc:70:b8:76:a7:
                    9b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:1C:4D:4C:A3:E1:AE:E9:BF:36:AA:1B:56:91:B8:C1:31:0A:DB:EB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E75dCiaujnpz5MnPogNsKZSxhKpjwVhq6PNoarBWo7j2/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E75dCiaujnpz5MnPogNsKZSxhKpjwVhq6PNoarBWo7j2/0/381C4D4CA3E1AEE9BF36AA1B5691B8C1310ADBEB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.28.0/22
                IPv6:
                  2804:75b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271064

    Signature Algorithm: sha256WithRSAEncryption
         24:dc:09:43:77:95:9e:64:ad:9b:79:69:d2:3b:c4:2c:70:ef:
         da:dd:56:af:b6:1d:bc:68:e6:33:58:2d:5f:56:cd:cf:ed:a9:
         53:91:e2:59:c3:e1:01:91:52:84:b3:11:93:da:24:7b:ed:f3:
         32:51:ef:7a:0f:d3:50:65:83:8b:5f:7c:92:00:d4:bf:83:c8:
         f5:71:2e:e1:dd:e5:9c:e3:db:65:fe:09:b4:a4:78:a2:bf:bc:
         92:c3:a2:4b:c7:b8:c5:cb:f2:0b:bc:ae:f0:b0:b2:a8:1e:23:
         bc:48:5b:b7:a1:bf:a6:f4:1c:71:71:28:e4:a9:52:d0:0b:b8:
         d2:07:c5:31:af:61:a5:98:7e:dd:80:bf:38:3a:4a:36:3c:d7:
         58:14:cb:5a:72:60:f7:63:9e:3e:8b:5c:69:c0:57:ec:4e:e6:
         f8:50:5d:f1:f3:34:76:b9:80:1a:23:b0:db:17:13:fa:bc:d1:
         e6:aa:f9:12:5f:08:79:0f:e3:8b:08:ca:8b:6b:76:d2:36:57:
         3a:6a:53:81:5b:5b:66:2b:ad:59:57:2d:ec:a5:c0:76:0b:9d:
         6c:59:1f:81:c8:b4:3a:a8:75:c3:1d:e0:f2:12:2a:e0:dc:c0:
         e6:eb:cd:68:31:57:fa:f1:7c:96:f0:79:1c:17:3c:2d:d7:f9:
         76:f3:00:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org