Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3A44B331C6A6EDF262A5A9C01AC913CA35960F41.cer
File:                     3A44B331C6A6EDF262A5A9C01AC913CA35960F41.cer (raw, json)
Hash identifier:          fOO4cxgThOTiBr9ZGC055XLRhSqp+I03cOK3T9WDB1M=
Subject key identifier:   3A:44:B3:31:C6:A6:ED:F2:62:A5:A9:C0:1A:C9:13:CA:35:96:0F:41
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4D675A95810FCCC55788673B9C4089CB976FBCE7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EwM9Runqn2PePPN1WYxCcrNpv6N9VLLbA1av5TdMjS8o/0/3A44B331C6A6EDF262A5A9C01AC913CA35960F41.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EwM9Runqn2PePPN1WYxCcrNpv6N9VLLbA1av5TdMjS8o/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Feb 2024 19:42:11 +0000
Certificate not after:    Wed 12 Feb 2025 19:47:11 +0000
Subordinate resources:    AS: 266571
                          IP: 45.7.108.0/22
                          IP: 2804:3e10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:67:5a:95:81:0f:cc:c5:57:88:67:3b:9c:40:89:cb:97:6f:bc:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 14 19:42:11 2024 GMT
            Not After : Feb 12 19:47:11 2025 GMT
        Subject: CN=3A44B331C6A6EDF262A5A9C01AC913CA35960F41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:97:da:d9:13:d7:ee:3a:87:41:84:d3:e5:79:
                    92:b5:5a:0a:b5:16:64:2d:1e:a7:42:98:c6:39:56:
                    12:9c:49:f5:f4:e3:99:a0:56:40:81:51:b6:48:1d:
                    84:35:52:e1:01:88:d0:84:5f:5d:ae:f8:12:de:cc:
                    a1:50:e8:2c:60:6d:e5:4e:2b:b3:dc:74:20:db:68:
                    4a:60:15:57:71:c5:c1:18:13:13:bd:ff:92:e9:dc:
                    c0:40:e3:4e:16:bf:ed:93:d0:d4:64:e7:41:cb:02:
                    7b:0d:04:35:cf:43:10:ac:ae:41:c1:e9:7b:10:6d:
                    fd:3d:00:15:9c:4c:58:e4:80:d5:86:12:c0:79:1d:
                    86:ed:cd:52:39:65:af:1d:08:76:be:c0:a4:0b:b3:
                    e1:3d:98:bd:7e:ca:16:e5:9b:fc:9a:7c:d6:7d:5f:
                    65:af:1a:f0:04:a7:03:00:c1:70:d8:6f:f7:0a:c8:
                    a4:12:3e:ac:b6:08:c0:d8:fd:50:10:a8:60:a9:10:
                    a1:a0:50:62:e9:3e:b0:d4:c3:e1:86:16:6c:d2:99:
                    b2:86:fb:ee:8f:42:9d:15:59:3f:0d:cd:72:cd:02:
                    c6:af:c6:b0:d8:fe:fc:7c:6c:27:74:75:85:44:f0:
                    42:35:4a:11:ec:9c:7e:2c:32:9a:30:4c:6d:cd:5d:
                    9b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:44:B3:31:C6:A6:ED:F2:62:A5:A9:C0:1A:C9:13:CA:35:96:0F:41
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EwM9Runqn2PePPN1WYxCcrNpv6N9VLLbA1av5TdMjS8o/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EwM9Runqn2PePPN1WYxCcrNpv6N9VLLbA1av5TdMjS8o/0/3A44B331C6A6EDF262A5A9C01AC913CA35960F41.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.108.0/22
                IPv6:
                  2804:3e10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266571

    Signature Algorithm: sha256WithRSAEncryption
         1c:b4:85:09:ab:05:a4:7a:28:37:f5:a2:61:85:c0:9e:40:d0:
         cc:bb:b9:4e:d5:74:95:d8:5e:38:74:0f:20:8d:c4:83:86:c3:
         40:04:db:cf:79:f7:85:b1:d9:29:82:0c:89:39:e8:03:08:04:
         93:8f:05:b3:05:68:40:36:27:73:54:77:24:f1:e2:7e:80:92:
         3c:8e:b9:fe:2d:8b:70:23:98:ed:5f:7c:f9:58:ef:3a:63:81:
         99:6d:cd:a3:60:b2:b1:48:9a:16:f5:ee:c2:3c:21:39:f0:57:
         7c:6d:95:63:5a:a8:ad:24:41:22:07:dc:62:18:07:fb:5c:ca:
         0d:28:2f:59:1b:54:8f:cc:37:34:9a:19:c3:c6:5a:f9:87:05:
         e0:ee:cd:aa:eb:75:96:56:36:7f:c6:72:43:e0:e4:e5:d5:86:
         3e:2e:4a:a8:e0:35:6f:31:f3:64:7a:06:fa:03:ee:ef:f7:eb:
         b3:8d:1a:87:5c:88:95:44:54:74:eb:ce:74:35:11:8c:a5:2b:
         be:d5:0f:37:a9:86:05:04:c6:7c:07:52:34:bc:00:16:45:72:
         da:66:24:4a:e6:1f:82:6c:bc:a9:cf:55:95:bb:e0:25:11:e0:
         8a:55:8f:9c:b5:c0:66:a8:71:c9:cd:e4:13:32:00:74:80:a5:
         97:9d:7f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:23 2024 by rpki-client on console-ams.rpki-client.org