Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3AC6959CD824080D479373BCCC2F356CCF6F4F7C.cer
File:                     3AC6959CD824080D479373BCCC2F356CCF6F4F7C.cer (raw, json)
Hash identifier:          MweX+x1iW7rmoceICNem5/O7kjWvjukGUhrH1TmVrYw=
Subject key identifier:   3A:C6:95:9C:D8:24:08:0D:47:93:73:BC:CC:2F:35:6C:CF:6F:4F:7C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D14CC577944A063CBF230EE8B0A02649BB48B27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FyFHAd2MhesANeK2QY5bQ4HSvuRcBmY5SRPx6aK1B3CG/0/3AC6959CD824080D479373BCCC2F356CCF6F4F7C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FyFHAd2MhesANeK2QY5bQ4HSvuRcBmY5SRPx6aK1B3CG/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Sep 2022 19:18:00 +0000
Certificate not after:    Fri 08 Sep 2023 19:23:00 +0000
Subordinate resources:    AS: 265437
                          IP: 168.195.176.0/22
                          IP: 2804:3420::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:14:cc:57:79:44:a0:63:cb:f2:30:ee:8b:0a:02:64:9b:b4:8b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  9 19:18:00 2022 GMT
            Not After : Sep  8 19:23:00 2023 GMT
        Subject: CN=3AC6959CD824080D479373BCCC2F356CCF6F4F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7d:77:69:93:24:76:69:3c:00:0d:94:08:80:
                    d1:fe:28:da:40:8f:07:8b:59:29:07:23:92:fd:48:
                    61:90:11:c1:e0:b4:a6:0a:d7:9f:8e:42:c9:00:5f:
                    e1:b1:46:98:04:6d:36:03:44:56:fe:57:7e:f6:f8:
                    32:eb:c7:a8:98:f1:3a:4d:35:9a:41:51:f3:cd:47:
                    be:c5:5e:a1:91:64:a1:6f:ed:79:ca:0a:49:20:44:
                    b4:51:2d:af:5a:2a:4e:5f:f7:ed:45:91:ee:1a:2f:
                    a2:91:35:7d:ee:8c:00:7d:ef:1f:4b:f4:7f:50:dd:
                    14:00:a7:f6:1e:34:b8:d7:40:0a:9a:a4:3a:b5:32:
                    e6:26:2f:cd:d5:61:a8:52:51:38:99:67:33:92:1d:
                    82:6b:32:bc:f0:bc:f7:49:7e:13:46:09:c3:21:2c:
                    e5:86:00:6c:bb:a6:12:69:92:5a:13:91:a0:0c:de:
                    65:3b:fc:f2:e7:07:8c:c3:eb:ab:1d:d7:3b:44:29:
                    c2:34:b1:75:1c:e6:dd:15:42:ac:90:ab:c0:d7:84:
                    28:8d:17:1f:5e:4b:e2:6a:6b:6a:b9:6c:bc:48:e4:
                    31:2d:d1:27:7b:3d:ed:db:fb:50:73:15:8c:ba:04:
                    dc:3d:05:84:e9:d1:b4:98:bb:78:47:41:7d:27:ba:
                    0f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:C6:95:9C:D8:24:08:0D:47:93:73:BC:CC:2F:35:6C:CF:6F:4F:7C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FyFHAd2MhesANeK2QY5bQ4HSvuRcBmY5SRPx6aK1B3CG/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FyFHAd2MhesANeK2QY5bQ4HSvuRcBmY5SRPx6aK1B3CG/0/3AC6959CD824080D479373BCCC2F356CCF6F4F7C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.176.0/22
                IPv6:
                  2804:3420::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265437

    Signature Algorithm: sha256WithRSAEncryption
         2b:1d:d1:65:ca:58:f0:13:a0:22:5a:57:3b:3a:07:da:f5:d7:
         c2:c2:52:ed:2b:12:7a:7b:1e:24:a1:0d:4f:75:4c:f5:6d:bf:
         c8:53:16:18:cb:eb:92:7c:77:cd:e3:1a:16:c8:e0:eb:c3:7a:
         2e:52:cd:2a:f5:0f:3e:15:b7:d5:da:df:49:ed:b2:5e:cb:36:
         34:fb:56:44:f8:0c:18:f8:4c:11:03:51:72:da:15:f5:ca:f7:
         46:04:cd:8c:aa:53:d1:b4:bb:35:e6:a7:4b:d7:fb:43:33:57:
         43:2e:ba:52:4f:f5:92:c0:14:da:cb:ea:b5:ee:6f:86:6f:82:
         2b:11:46:47:48:ac:75:60:d3:03:ae:da:9a:88:2e:a4:7f:20:
         76:97:5f:c5:bf:77:10:8a:2e:91:93:22:ce:32:48:19:db:61:
         6a:20:97:fe:9a:8b:d2:f0:7f:74:61:59:d8:cb:77:70:60:f3:
         6d:e2:6a:eb:bc:e3:9f:91:86:5c:e6:75:2f:27:c1:59:a0:c3:
         c0:45:42:92:1a:16:3e:4a:0a:c7:f6:2e:ca:31:ff:01:63:a7:
         9c:21:57:43:73:ed:de:5f:b6:36:86:d3:af:f9:ef:1b:00:38:
         71:a0:54:24:99:99:5f:0f:1b:3e:fd:0a:5e:7b:b6:ef:2e:e9:
         c1:2b:c7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org