Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3AED0DD2CE74A2C7AE4158FF144676DFB485348B.cer
File:                     3AED0DD2CE74A2C7AE4158FF144676DFB485348B.cer (raw, json)
Hash identifier:          wkd+5VLuxcQcXstE4mnIjo4U4B5W0F5NiLMgYFiYsFU=
Subject key identifier:   3A:ED:0D:D2:CE:74:A2:C7:AE:41:58:FF:14:46:76:DF:B4:85:34:8B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7DE98585529D48FD0B0CEDC5DDDFEECDB66EC7F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/3AED0DD2CE74A2C7AE4158FF144676DFB485348B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Feb 2024 23:40:55 +0000
Certificate not after:    Thu 06 Feb 2025 23:45:55 +0000
Subordinate resources:    AS: 268216
                          IP: 45.235.248.0/22
                          IP: 2804:4dbc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e9:85:85:52:9d:48:fd:0b:0c:ed:c5:dd:df:ee:cd:b6:6e:c7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  8 23:40:55 2024 GMT
            Not After : Feb  6 23:45:55 2025 GMT
        Subject: CN=3AED0DD2CE74A2C7AE4158FF144676DFB485348B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:07:77:a3:37:29:c1:dd:2e:bd:1c:4a:d6:38:
                    74:c8:69:81:14:47:70:7b:3a:d1:bb:64:c7:00:09:
                    61:0c:e2:31:d0:34:14:f1:29:48:43:8a:76:c9:3d:
                    07:c9:6a:83:9b:ad:c2:0f:40:2e:0f:9a:0b:35:74:
                    93:57:d3:1b:cb:f9:a9:9b:3b:6d:2c:c3:32:8a:be:
                    35:0d:76:32:e0:d2:97:a0:25:20:f3:bf:35:7a:96:
                    f2:50:0b:69:ee:89:62:c3:11:ac:54:91:98:0c:62:
                    c3:92:83:4f:fd:5d:72:9f:03:37:f0:ae:2f:20:30:
                    c4:e1:9a:bc:27:fd:aa:8a:7f:9f:28:4e:e6:e8:69:
                    6d:c3:53:19:42:b3:25:1b:26:fa:95:7e:4b:34:a2:
                    17:94:e9:fc:52:bc:3a:d7:21:45:2c:dd:9e:be:13:
                    e9:14:d4:a3:9c:b9:10:c9:44:c2:66:3a:9a:44:96:
                    21:74:40:2e:3d:c0:85:0e:56:00:25:a1:86:55:54:
                    07:11:23:60:2b:5f:d6:b4:ba:6a:4d:82:a3:1a:98:
                    cb:ca:a9:fb:3e:a8:4b:fa:86:83:07:97:92:57:0a:
                    26:cc:c2:bd:3d:23:05:45:5f:bb:dc:60:36:79:89:
                    f3:79:b2:8d:7f:db:bc:11:e7:3a:29:9d:ce:04:7e:
                    0d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:ED:0D:D2:CE:74:A2:C7:AE:41:58:FF:14:46:76:DF:B4:85:34:8B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/3AED0DD2CE74A2C7AE4158FF144676DFB485348B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.248.0/22
                IPv6:
                  2804:4dbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268216

    Signature Algorithm: sha256WithRSAEncryption
         4b:e8:18:3b:c9:29:4b:f3:2d:7e:50:08:37:c5:96:a7:89:fe:
         a4:8a:63:93:1f:a6:da:c3:22:89:74:5e:e0:d4:a5:d9:20:8b:
         be:a5:60:0e:18:bf:a7:a1:d9:e0:46:7b:fe:f9:01:50:7f:04:
         e9:87:51:b6:07:92:7c:4d:92:ed:cb:54:8f:58:75:2b:2e:a9:
         55:0c:57:f8:2f:71:dc:dd:75:7a:f9:2c:c0:4e:c2:70:c9:dd:
         a4:98:23:c7:d6:9d:c2:90:1e:84:90:85:be:89:fc:39:39:8b:
         de:a1:8b:e8:3e:d1:f3:2b:9f:2e:17:9a:df:c8:70:e8:fd:8d:
         40:84:c5:78:b3:a5:fa:ec:15:12:ca:6e:01:0c:b5:0e:33:61:
         76:84:3c:fe:ff:b9:db:98:a2:fc:fe:17:17:e6:8a:49:19:57:
         31:12:eb:05:d6:b1:ad:c6:a9:76:63:68:ec:8a:46:f0:79:fb:
         fe:0e:02:a6:27:68:53:19:4f:b8:54:03:e1:de:ba:e5:1a:b0:
         a0:1c:10:0c:75:b7:9b:59:52:2b:8c:ac:5e:e1:78:44:79:d6:
         d5:a6:3c:a8:d1:ec:e0:5d:54:69:e5:ad:da:cd:59:ae:32:a8:
         88:c2:b2:c2:05:80:de:02:fa:90:6b:19:8f:b8:c7:b5:49:ae:
         b7:ab:f7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:23 2024 by rpki-client on console-ams.rpki-client.org