Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826.cer
File:                     3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826.cer (raw, json)
Hash identifier:          WnKG+NHjFumHwIQzjF0hKCZhLH6MFP6AJHh9IJ27MT8=
Subject key identifier:   3B:2B:E0:C1:F2:F6:BF:6A:1A:80:8F:D0:7F:E1:FD:A8:71:68:C8:26
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       10C900461BB34090AC8F189F316F1B483E31A60A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Dec 2022 03:12:40 +0000
Certificate not after:    Mon 18 Dec 2023 03:17:40 +0000
Subordinate resources:    AS: 268342
                          IP: 45.238.228.0/22
                          IP: 2804:4fac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c9:00:46:1b:b3:40:90:ac:8f:18:9f:31:6f:1b:48:3e:31:a6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 19 03:12:40 2022 GMT
            Not After : Dec 18 03:17:40 2023 GMT
        Subject: CN=3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:13:42:b3:9d:bd:a4:6a:ce:0b:62:74:1f:
                    8d:ad:d0:b7:3e:40:b4:cc:3a:29:65:98:d3:e0:c5:
                    6e:41:02:81:e9:cd:98:d3:26:62:e0:11:f3:37:ed:
                    fa:46:db:86:2d:cd:e2:7b:3a:86:a3:ed:9e:6b:93:
                    25:6e:2c:4a:78:44:a6:6a:40:f3:00:46:2d:d4:22:
                    db:2c:27:0a:85:ab:f4:1a:d6:d7:e7:b5:8a:8a:9e:
                    e7:87:60:c4:31:75:e8:8c:e5:61:f5:9d:d2:cf:41:
                    20:5c:1a:e8:42:05:a5:91:af:79:44:4f:c8:9d:77:
                    d6:49:1f:51:1b:ae:b4:c8:af:89:91:7b:9e:7a:5c:
                    7f:77:eb:12:b2:85:87:5a:f6:a4:4c:bc:db:a8:33:
                    8b:df:a6:86:ae:9a:83:eb:fe:13:04:94:b3:c9:0b:
                    f6:70:7d:4f:bd:c4:ca:e2:8d:77:73:80:c8:7f:af:
                    1c:8e:33:b5:f1:80:28:db:60:40:a4:74:81:f3:c4:
                    f4:98:c8:6e:d3:aa:4d:18:1c:86:52:8e:e4:00:50:
                    a7:07:9a:3a:10:1e:67:76:82:c8:25:70:01:17:68:
                    1a:6b:51:fe:33:b8:7e:38:f4:4e:d0:82:cc:2d:9e:
                    5b:f4:8b:14:26:dc:3a:08:1d:9d:9a:23:3d:2b:77:
                    f8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:2B:E0:C1:F2:F6:BF:6A:1A:80:8F:D0:7F:E1:FD:A8:71:68:C8:26
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EEXt3fYM3i11uZnKfgfBvJ92D2gSjJcVGjimDyGBVHsz/0/3B2BE0C1F2F6BF6A1A808FD07FE1FDA87168C826.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.228.0/22
                IPv6:
                  2804:4fac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268342

    Signature Algorithm: sha256WithRSAEncryption
         61:c3:65:dc:2a:00:a6:7e:6f:55:a4:b3:88:48:d0:2b:35:1e:
         7d:ef:9a:bc:a1:5f:86:24:c5:73:63:f2:4a:04:9f:81:e0:e6:
         4b:68:69:17:8e:c9:e7:70:e2:41:5c:48:03:fc:1e:e8:ef:69:
         38:d9:a9:e0:b7:8c:6f:6f:37:78:a6:71:37:60:73:bf:80:75:
         01:11:64:61:10:70:e1:af:6f:a9:84:c2:ef:72:b7:28:94:a5:
         be:55:02:53:46:3e:1d:b8:99:2b:df:0e:a6:cc:6a:21:bd:a7:
         09:d5:60:77:90:34:a9:d5:b4:27:65:96:a4:71:df:d3:a2:b4:
         77:c8:fa:25:d2:73:a7:20:50:8e:86:d3:01:82:db:ef:1c:49:
         d3:f8:1a:e9:26:a7:97:09:88:43:f2:d3:39:bd:54:3f:35:78:
         8a:5d:c0:43:84:9a:cd:b5:93:93:6e:28:c1:c3:3f:c5:c7:ec:
         54:be:46:29:34:13:cf:22:bb:0b:f7:28:f9:7c:75:5f:5d:20:
         f5:43:42:2a:f3:89:d5:fc:e1:ac:d1:a8:52:34:7b:b4:13:51:
         b4:71:c5:5f:eb:37:5d:34:d8:b2:cd:ce:c7:98:37:66:e0:46:
         c4:49:f1:1b:62:87:43:8a:10:94:e5:5f:b8:02:79:68:c8:b7:
         1d:09:68:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:23 2024 by rpki-client on console-ams.rpki-client.org