Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3AF9ACDF6871ABB0B488D7A16E6F97947FCD7798.cer
File:                     3AF9ACDF6871ABB0B488D7A16E6F97947FCD7798.cer (raw, json)
Hash identifier:          /1i040bPrFQubN+mh0ioE0NlE2bJG8DSEynD3/tE0co=
Subject key identifier:   3A:F9:AC:DF:68:71:AB:B0:B4:88:D7:A1:6E:6F:97:94:7F:CD:77:98
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0E664E6B1AD33FC81ABA151F1603752C9523113A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DFWWvhjkbx23GKbs7vQTkGmDMMsmTsmwvxNAeE3HHaYC/0/3AF9ACDF6871ABB0B488D7A16E6F97947FCD7798.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DFWWvhjkbx23GKbs7vQTkGmDMMsmTsmwvxNAeE3HHaYC/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 May 2023 20:26:48 +0000
Certificate not after:    Mon 06 May 2024 20:31:48 +0000
Subordinate resources:    AS: 268833
                          IP: 45.173.232.0/22
                          IP: 2804:5b4c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:66:4e:6b:1a:d3:3f:c8:1a:ba:15:1f:16:03:75:2c:95:23:11:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  8 20:26:48 2023 GMT
            Not After : May  6 20:31:48 2024 GMT
        Subject: CN=3AF9ACDF6871ABB0B488D7A16E6F97947FCD7798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8b:7f:30:bb:a9:c9:a3:8a:93:56:43:83:f4:
                    3f:31:59:9f:4b:55:6c:06:20:5e:d6:43:85:23:4b:
                    02:b9:ce:18:ca:ad:84:6b:23:5e:66:57:63:fa:7e:
                    fc:c1:61:42:be:7d:88:88:b5:83:2f:33:82:25:58:
                    b6:64:8b:99:ed:1d:93:74:3d:4c:6b:64:92:9f:db:
                    be:ec:be:8f:45:e5:02:0c:48:a7:36:71:68:d9:f3:
                    43:40:8f:4d:db:71:09:01:0d:88:d6:3a:05:11:4d:
                    43:2a:a7:fa:84:45:ac:8c:ca:c1:4c:47:85:f3:aa:
                    b2:0b:d7:cc:88:62:d4:6b:d3:5b:98:b5:96:72:d4:
                    69:38:e1:0c:4a:ee:25:38:89:82:25:0c:33:e7:f5:
                    eb:33:8f:f7:1a:b4:fb:bd:12:63:4c:f1:d1:81:ff:
                    a5:ec:77:00:b0:42:05:cc:d7:19:33:fa:68:6b:ff:
                    78:01:c7:b0:69:53:39:d6:df:c0:eb:2a:7c:6b:e7:
                    ce:51:25:cd:e1:af:60:ac:50:98:58:3a:55:90:70:
                    8c:d0:6e:03:8e:d5:c9:c5:af:75:14:dd:46:7c:7f:
                    77:cb:f3:7b:08:df:f5:ee:f2:b9:a5:3c:8b:7f:95:
                    d9:9e:86:17:dd:d6:d4:61:a4:ee:7e:dd:14:f0:24:
                    51:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:F9:AC:DF:68:71:AB:B0:B4:88:D7:A1:6E:6F:97:94:7F:CD:77:98
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DFWWvhjkbx23GKbs7vQTkGmDMMsmTsmwvxNAeE3HHaYC/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DFWWvhjkbx23GKbs7vQTkGmDMMsmTsmwvxNAeE3HHaYC/0/3AF9ACDF6871ABB0B488D7A16E6F97947FCD7798.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.232.0/22
                IPv6:
                  2804:5b4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268833

    Signature Algorithm: sha256WithRSAEncryption
         77:7c:61:0e:a1:05:24:7d:c6:12:a6:cb:39:53:7d:85:ae:63:
         03:b0:8d:fc:07:47:47:8d:65:8d:3a:5a:5d:35:ed:ab:f0:c6:
         26:9c:c6:8e:da:2a:61:9c:7d:65:73:9d:e2:d4:d5:2e:a0:bc:
         91:d3:8b:ab:59:29:47:17:c8:c0:ac:94:c4:52:2f:a8:65:51:
         8f:b3:00:dc:5f:ba:30:29:56:9e:55:07:ee:06:1b:c9:30:f5:
         99:87:7e:73:47:d8:96:07:77:9c:ba:d4:ae:73:cf:20:1e:cf:
         36:61:ba:1c:43:fa:93:94:5e:a3:19:4e:97:d0:40:cb:44:a1:
         b8:10:05:2e:37:42:74:79:e0:5c:54:b4:ba:f1:3e:25:91:35:
         5a:ec:14:69:f7:73:b7:05:b1:95:12:06:13:7d:1e:18:4a:5a:
         f2:b6:c0:35:76:de:b3:37:8f:91:07:d3:ed:14:30:3d:27:14:
         6b:7b:d5:46:bf:c1:fa:b5:b6:f4:79:b6:fa:a2:31:a1:a9:92:
         23:ff:76:2f:53:e6:28:03:ed:e1:4d:d1:1e:a4:6d:79:68:7b:
         af:5c:f8:73:a9:c1:76:cc:4d:4b:57:09:ca:8c:d5:86:78:b1:
         ea:6c:6d:55:62:66:a7:42:56:97:3e:14:ce:79:7e:0b:10:0e:
         ba:cb:b1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org