Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3A16325DA076D0729C22B3F9C55ED3560488A0C6.cer
File:                     3A16325DA076D0729C22B3F9C55ED3560488A0C6.cer (raw, json)
Hash identifier:          s4+MZRjGAjbp0MRGY9p5gyGohIsXooXnGhaHiDD1fok=
Subject key identifier:   3A:16:32:5D:A0:76:D0:72:9C:22:B3:F9:C5:5E:D3:56:04:88:A0:C6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3B3DFD8C9C97C5E1944532C2420537A1B0FF2EF7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/3A16325DA076D0729C22B3F9C55ED3560488A0C6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 21:18:34 +0000
Certificate not after:    Tue 18 Jun 2024 21:23:34 +0000
Subordinate resources:    AS: 269457
                          IP: 45.187.60.0/22
                          IP: 2804:64e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3d:fd:8c:9c:97:c5:e1:94:45:32:c2:42:05:37:a1:b0:ff:2e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 20 21:18:34 2023 GMT
            Not After : Jun 18 21:23:34 2024 GMT
        Subject: CN=3A16325DA076D0729C22B3F9C55ED3560488A0C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:40:cf:64:d1:9c:6d:cf:02:08:fe:d3:30:cf:
                    8a:3c:8d:13:a7:53:ec:1d:ed:62:ee:cb:80:66:a8:
                    f9:d2:31:d5:9b:31:e7:62:3d:a3:1d:51:24:8f:5f:
                    46:e2:a8:4a:28:c8:db:06:11:cf:ad:ae:0c:b2:8d:
                    38:c0:78:2d:68:df:c5:29:94:74:d4:52:48:2d:d9:
                    b8:98:b6:1f:4c:a0:5f:18:90:c6:69:2d:d2:32:44:
                    be:84:dd:e2:15:cb:15:46:1a:82:e2:6d:9a:67:e5:
                    d1:f6:9e:fd:8c:f1:15:0d:fc:9a:fb:5f:18:61:50:
                    eb:65:8c:44:79:0a:47:c8:a6:b0:5c:29:27:3d:0f:
                    79:0f:6f:12:3b:3b:f7:2f:43:2a:d7:f7:6d:ad:24:
                    b6:6d:84:d2:2e:3b:aa:96:b4:35:ac:87:c1:56:a6:
                    7d:c2:b3:1b:90:d2:d5:a2:57:81:3d:da:48:13:c6:
                    12:8b:0b:9c:0d:2a:4f:cb:a2:a1:4f:f3:ba:b2:c9:
                    89:44:21:e8:b1:1b:c9:2f:5b:b6:6a:bd:56:e7:fc:
                    d7:77:57:51:a2:0b:5b:ed:06:92:38:b2:b4:e5:e5:
                    62:22:d6:dc:41:52:b6:c2:b9:bc:d7:82:52:d9:22:
                    ec:f3:d8:4b:f0:c5:3d:bb:1a:0f:6b:c4:70:82:ba:
                    a5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:16:32:5D:A0:76:D0:72:9C:22:B3:F9:C5:5E:D3:56:04:88:A0:C6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/3A16325DA076D0729C22B3F9C55ED3560488A0C6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.60.0/22
                IPv6:
                  2804:64e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269457

    Signature Algorithm: sha256WithRSAEncryption
         99:49:2f:0f:d5:c5:fc:ca:47:89:ef:85:78:ac:68:42:0e:24:
         c7:ec:a5:5a:35:80:4d:f1:b1:4b:90:55:82:0f:bd:75:4b:53:
         e3:b2:da:c6:dd:a4:f0:82:d2:30:0e:1e:70:ee:15:11:e7:78:
         86:07:00:2c:5c:b4:ad:47:b6:77:4a:db:13:f6:6d:cd:55:50:
         a3:ac:98:ef:92:b6:84:d7:a2:60:07:e5:cf:fb:48:de:5f:3f:
         32:65:70:f2:7e:10:1a:e0:a9:4a:b9:71:90:fd:78:b2:15:69:
         ef:d3:46:98:a0:8c:96:4a:1e:a3:7f:d3:bb:78:88:76:16:6e:
         f6:e1:8c:80:7e:ec:dd:af:eb:4b:02:81:02:a4:fc:13:7c:31:
         5c:7a:68:a6:95:4e:34:2f:df:3a:8e:33:b0:67:65:16:52:4f:
         7b:e5:b6:7f:b1:fe:83:ae:36:8f:3e:0c:28:f8:f7:a4:c3:96:
         8b:fb:ec:ce:cf:dd:49:60:93:08:c3:f3:28:8c:e1:9a:cb:4b:
         16:cd:a5:1a:de:f1:36:82:59:18:3a:d1:8a:1f:c3:bf:68:07:
         4e:9a:2c:5f:05:c9:d6:9f:1a:8b:e0:6c:51:28:76:d6:78:c9:
         ef:c9:2f:f1:9b:06:81:39:2b:8c:78:40:f0:28:22:80:dd:30:
         46:b7:94:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org