Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3894D8226D8DE38887812D39103AE1FA7F305173.cer
File:                     3894D8226D8DE38887812D39103AE1FA7F305173.cer (raw, json)
Hash identifier:          9FMqfG5mN0LMQ14s2C1X+ydGUUdVY+zRrokp2Y9l0+Q=
Subject key identifier:   38:94:D8:22:6D:8D:E3:88:87:81:2D:39:10:3A:E1:FA:7F:30:51:73
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3042AA57C24050DC235784345C40C302E8117363
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/3894D8226D8DE38887812D39103AE1FA7F305173.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 May 2023 17:58:46 +0000
Certificate not after:    Wed 29 May 2024 18:03:46 +0000
Subordinate resources:    AS: 53080
                          IP: 45.175.80.0/22
                          IP: 138.186.36.0/22
                          IP: 170.82.64.0/22
                          IP: 170.150.4.0/22
                          IP: 186.194.176.0/20
                          IP: 187.95.0.0/20
                          IP: 191.253.0.0/20
                          IP: 201.216.100.0/22
                          IP: 2804:71c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:42:aa:57:c2:40:50:dc:23:57:84:34:5c:40:c3:02:e8:11:73:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 31 17:58:46 2023 GMT
            Not After : May 29 18:03:46 2024 GMT
        Subject: CN=3894D8226D8DE38887812D39103AE1FA7F305173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:57:41:87:84:79:f6:bb:09:b1:8c:49:68:57:
                    28:6e:f0:fb:24:b8:2f:48:75:d1:6b:33:86:6c:a4:
                    18:73:0d:f1:12:72:88:4d:9f:41:dc:d2:dd:81:bd:
                    64:d7:49:49:76:28:29:a0:ac:0c:d3:f8:63:02:af:
                    c6:46:48:95:40:7d:2f:9d:d2:59:72:7c:b0:a9:02:
                    89:ce:02:21:7f:f9:a0:46:58:79:3a:77:27:c3:79:
                    6e:a0:4a:bf:f8:5f:b4:35:f5:24:49:a2:dd:09:5f:
                    c3:22:e7:03:5b:e6:7b:26:14:6b:8f:e2:f9:9f:ea:
                    61:f6:e5:2f:93:50:d8:a4:14:6f:8e:e7:81:be:71:
                    98:09:58:98:d9:dc:26:b2:48:d5:df:64:f9:30:98:
                    94:6f:9e:9d:b6:78:4f:53:3e:7e:6a:64:b5:ec:64:
                    45:88:fc:b0:d6:e3:ff:6a:d2:39:ca:d5:eb:c7:b6:
                    74:35:82:5a:f9:86:6a:61:ad:06:85:1a:8a:81:45:
                    4a:9c:7e:ed:25:d8:5e:25:2a:ed:72:7a:c3:9d:a4:
                    13:56:43:7d:6a:65:a8:ce:be:3c:6b:32:26:c0:b7:
                    92:3d:18:26:55:e7:0e:1f:4a:9c:08:99:47:f1:60:
                    cd:0e:5f:ce:c0:e1:0c:ee:7b:71:d7:53:df:b8:1c:
                    46:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:94:D8:22:6D:8D:E3:88:87:81:2D:39:10:3A:E1:FA:7F:30:51:73
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/3894D8226D8DE38887812D39103AE1FA7F305173.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.80.0/22
                  138.186.36.0/22
                  170.82.64.0/22
                  170.150.4.0/22
                  186.194.176.0/20
                  187.95.0.0/20
                  191.253.0.0/20
                  201.216.100.0/22
                IPv6:
                  2804:71c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53080

    Signature Algorithm: sha256WithRSAEncryption
         7b:a6:4b:5f:dc:e6:f5:a2:39:05:f2:df:a4:1e:d7:3e:ca:2e:
         15:8f:2f:90:e5:23:53:4c:da:a8:68:57:28:9f:a0:43:36:00:
         5d:c4:f1:b3:cb:b8:70:00:b5:e5:05:24:41:de:ac:fa:1c:6e:
         5f:64:2c:4a:db:1a:7a:4e:74:5e:ed:dc:94:d1:cf:08:5e:5e:
         46:c2:59:2e:1a:51:cd:e7:cf:79:92:d6:92:2e:9d:54:85:24:
         f6:49:8b:b9:7d:4c:eb:dc:86:e9:21:60:b7:85:14:85:f7:d1:
         fa:fa:1c:da:17:b8:07:88:d8:b9:06:b1:4c:67:f0:2b:df:44:
         49:c1:0d:5c:cb:d7:08:44:9c:3c:88:67:e4:a2:fd:d7:34:38:
         15:cb:b4:15:51:83:aa:c0:b8:a3:b8:18:40:52:45:ac:25:5e:
         58:dc:03:87:a9:39:fe:97:f6:02:ee:5a:33:9b:89:eb:ad:95:
         d7:31:a7:53:f4:d7:41:37:4a:a3:89:95:33:73:f7:6c:59:4b:
         2a:32:fd:3c:62:92:01:86:1b:0d:be:70:7c:8b:be:d9:44:ed:
         8c:72:92:94:7a:96:0d:a8:36:4a:13:84:2b:2c:ef:0b:ce:ad:
         85:5e:e4:85:1c:8d:d7:c6:8d:6c:fe:cb:40:bd:b9:a0:05:6b:
         ba:4f:66:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org