Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3A4FD4533FB26FA260CDC10B69987573A2C066F0.cer
File:                     3A4FD4533FB26FA260CDC10B69987573A2C066F0.cer (raw, json)
Hash identifier:          Lc//uC00goHFdb61uw3bXPtGQ5JP2MQlQ7CE58fm7QU=
Subject key identifier:   3A:4F:D4:53:3F:B2:6F:A2:60:CD:C1:0B:69:98:75:73:A2:C0:66:F0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0D6DFB1637B7D3F53447AC6C3D912E1828793644
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3A4FD4533FB26FA260CDC10B69987573A2C066F0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Sep 2023 16:40:39 +0000
Certificate not after:    Wed 18 Sep 2024 16:45:39 +0000
Subordinate resources:    AS: 266002
                          IP: 181.191.92.0/22
                          IP: 2804:4114::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6d:fb:16:37:b7:d3:f5:34:47:ac:6c:3d:91:2e:18:28:79:36:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 20 16:40:39 2023 GMT
            Not After : Sep 18 16:45:39 2024 GMT
        Subject: CN=3A4FD4533FB26FA260CDC10B69987573A2C066F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8e:49:82:33:bc:b9:8a:38:73:3e:0b:02:3d:
                    c9:d1:1d:f5:e2:8c:f0:d4:eb:3c:67:e2:e8:1b:74:
                    74:7e:0e:4b:08:db:a4:b0:75:07:68:fb:4a:9c:a7:
                    a3:e0:d6:ca:e7:f1:da:e1:64:af:ea:76:41:37:1f:
                    7c:9c:41:42:33:eb:20:ff:c2:92:13:75:01:13:21:
                    86:0e:be:67:8a:0f:9d:51:04:4e:1e:01:5f:ec:e2:
                    cb:b9:12:5b:c7:84:f3:fb:5e:72:26:e4:25:4b:2f:
                    b5:d7:d9:59:e1:5d:a4:8a:6a:16:7d:7e:89:a5:0b:
                    09:f2:9f:44:c3:7b:41:0d:ad:ec:59:8d:67:59:49:
                    21:42:34:16:c4:de:db:c8:aa:c4:2d:aa:68:d5:7e:
                    db:ac:e3:eb:e0:e9:b1:74:cc:d3:b4:45:14:7b:e0:
                    40:7a:e0:6b:fe:6b:c7:b2:b8:d0:7f:a3:cc:14:4b:
                    f2:c9:0b:f0:20:f7:ae:94:b9:ba:92:26:e7:5c:0b:
                    05:92:fd:6f:ce:81:88:37:3d:72:8d:d5:35:f7:3b:
                    32:07:18:e2:bb:cf:ef:83:b1:7f:2b:d8:be:e5:0d:
                    c3:c0:e8:b5:af:97:1b:07:a5:2b:fa:8a:7c:ab:44:
                    c3:b6:70:1c:63:7f:53:61:6b:f9:5c:a8:dc:f4:9b:
                    b4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:4F:D4:53:3F:B2:6F:A2:60:CD:C1:0B:69:98:75:73:A2:C0:66:F0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/3A4FD4533FB26FA260CDC10B69987573A2C066F0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.92.0/22
                IPv6:
                  2804:4114::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266002

    Signature Algorithm: sha256WithRSAEncryption
         09:e1:5d:bd:d2:1d:c3:62:cc:3b:03:99:75:f9:74:87:d3:49:
         ec:e1:19:b6:fd:61:df:82:59:73:32:81:bd:6f:eb:9a:bf:f1:
         3d:cd:c8:27:74:a8:24:8f:c6:b8:30:71:04:d6:1d:a4:5a:2b:
         e8:1d:e0:66:60:34:3c:f3:ff:f5:b7:03:46:24:44:01:9c:1e:
         ba:de:80:ab:64:27:2f:67:4e:24:15:ba:0b:2a:e1:e7:0b:15:
         94:ea:f3:54:c1:34:ef:fd:14:da:ec:53:9a:a7:8d:22:55:7c:
         8b:06:a6:d1:0e:85:5c:7b:cd:b2:ad:af:2c:09:1d:cf:46:83:
         19:8d:3a:a4:ab:e2:35:5d:0b:4d:50:0e:80:b2:99:ff:60:f8:
         79:37:e7:8c:0c:42:75:fc:e3:dc:b2:e9:a6:f6:7c:e3:65:f6:
         19:90:0e:38:07:df:f1:ed:40:a0:cf:43:e8:74:45:f7:15:93:
         73:b8:00:a0:84:8a:63:7a:5f:a5:aa:aa:a3:a9:d6:6b:52:03:
         ad:0e:61:b2:bb:80:36:6a:9f:9d:9a:5f:a5:36:82:68:c9:11:
         ed:71:42:66:b3:e0:31:93:0d:5e:c9:24:84:4a:7f:52:ff:f5:
         95:48:4f:6a:b3:cd:cb:cb:70:6a:2c:5a:ad:b5:3a:d6:16:c2:
         eb:dc:f8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org