Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3A83B135478F545898B32693E9AB8FD0C1699DEA.cer
File:                     3A83B135478F545898B32693E9AB8FD0C1699DEA.cer (raw, json)
Hash identifier:          SVXAEqbxzYM6n1gnm11mW8oqhYDq55pEftM3uiI/kjA=
Subject key identifier:   3A:83:B1:35:47:8F:54:58:98:B3:26:93:E9:AB:8F:D0:C1:69:9D:EA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       38C7ADF1119FAD19E6EE2ECF1EACCFBF78A8B665
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/3A83B135478F545898B32693E9AB8FD0C1699DEA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Aug 2023 16:15:29 +0000
Certificate not after:    Tue 20 Aug 2024 16:20:29 +0000
Subordinate resources:    AS: 28263
                          IP: 187.17.160.0/20
                          IP: 201.49.64.0/19
                          IP: 2804:4f8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c7:ad:f1:11:9f:ad:19:e6:ee:2e:cf:1e:ac:cf:bf:78:a8:b6:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 22 16:15:29 2023 GMT
            Not After : Aug 20 16:20:29 2024 GMT
        Subject: CN=3A83B135478F545898B32693E9AB8FD0C1699DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:20:ba:12:92:1d:24:8c:e5:b9:21:f8:46:
                    9c:92:df:02:b9:4c:67:2f:2b:33:51:29:e1:fd:ea:
                    4d:9e:1e:19:63:b5:79:f8:a3:e4:db:39:fd:04:d3:
                    a7:57:e4:c5:76:54:ee:0f:72:7e:17:ad:e4:87:4b:
                    da:0d:a7:f6:6d:26:b5:7e:85:18:0e:6a:8e:36:9a:
                    0d:13:ed:f1:43:f8:03:51:57:47:59:a1:f4:1a:da:
                    86:92:cb:f6:3d:02:4e:71:d5:79:43:4f:40:b5:c0:
                    24:cf:fb:2a:3c:fd:8e:7e:08:15:37:f5:c5:d9:6b:
                    80:72:85:90:c6:02:53:49:f4:6c:e3:83:c2:12:e8:
                    1b:40:b9:fb:70:59:72:42:fe:aa:69:72:81:8d:fc:
                    09:e2:57:e3:1a:0d:aa:03:21:4d:1c:6d:77:e7:3e:
                    e8:15:f0:5c:1e:6e:7c:53:9e:79:2f:a8:3c:fd:9e:
                    e7:24:25:80:ff:49:0b:0e:27:44:a5:4e:39:6b:cf:
                    f4:e8:38:ae:83:bd:2c:f5:28:d5:d1:63:b0:1b:7c:
                    14:a9:00:13:b2:da:cc:8f:2e:ef:e7:f6:1b:11:a0:
                    e3:25:3f:2e:2e:0b:8c:13:49:07:a1:8c:10:46:73:
                    53:55:16:55:00:d4:fa:8f:7d:ce:f0:ff:0a:1e:28:
                    df:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:83:B1:35:47:8F:54:58:98:B3:26:93:E9:AB:8F:D0:C1:69:9D:EA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/3A83B135478F545898B32693E9AB8FD0C1699DEA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.160.0/20
                  201.49.64.0/19
                IPv6:
                  2804:4f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28263

    Signature Algorithm: sha256WithRSAEncryption
         19:a1:51:5a:f9:ed:28:d8:5a:e3:81:15:80:ac:2e:6a:f6:8c:
         b0:5c:8b:c5:7b:75:ea:c2:8b:26:be:97:6f:63:a2:59:1b:f3:
         ec:98:b2:7d:41:01:5c:78:84:20:bf:b1:f8:21:22:89:60:9d:
         43:5d:cc:be:e5:d7:0c:21:17:f2:6a:6c:bb:18:5c:67:02:71:
         89:2f:7b:00:f5:d0:e6:0e:5e:81:49:d5:aa:81:c9:2a:69:e4:
         c5:ff:bd:1a:2e:29:03:cb:62:8c:80:84:43:43:a7:9a:3e:bb:
         34:97:1f:d6:f5:f9:00:fe:80:c0:bb:8b:57:18:14:85:37:d2:
         bc:25:7b:a2:98:23:6c:bf:51:75:26:1b:b7:47:97:62:8d:67:
         ba:b5:ed:08:19:a2:ff:40:7b:ff:d2:be:be:6e:a9:0f:98:12:
         f9:ec:1d:54:e6:cf:3b:62:18:69:0f:75:15:20:a8:57:51:44:
         64:82:b0:7d:2f:5a:3b:55:d5:5f:5d:6f:19:7e:af:08:87:16:
         41:2e:51:63:06:be:89:1c:73:50:ba:92:c7:de:f7:4a:85:1a:
         32:2e:b3:c7:6d:13:d0:a1:94:24:8a:cf:4d:78:c8:59:de:4f:
         4b:83:df:a6:8f:ca:b5:5b:c3:65:1a:60:d3:40:0c:6e:6e:d8:
         9e:a2:d2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:49:14 2025 by rpki-client