Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3B343946F3FD21D5939F0642FCE83BCD3BDC05CE.cer
File:                     3B343946F3FD21D5939F0642FCE83BCD3BDC05CE.cer (raw, json)
Hash identifier:          1X4HNmjTW4lD40LiTUf1+6oNwsBiTLhYyUxV4nWYwds=
Subject key identifier:   3B:34:39:46:F3:FD:21:D5:93:9F:06:42:FC:E8:3B:CD:3B:DC:05:CE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       645B1261D5168689FDC01976A7D08286947D9FFE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/3B343946F3FD21D5939F0642FCE83BCD3BDC05CE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 15:03:16 +0000
Certificate not after:    Wed 23 Oct 2024 15:08:16 +0000
Subordinate resources:    AS: 264269
                          IP: 138.118.248.0/22
                          IP: 2804:2544::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:5b:12:61:d5:16:86:89:fd:c0:19:76:a7:d0:82:86:94:7d:9f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 15:03:16 2023 GMT
            Not After : Oct 23 15:08:16 2024 GMT
        Subject: CN=3B343946F3FD21D5939F0642FCE83BCD3BDC05CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:96:2c:39:bb:25:ef:87:9a:a3:c9:09:1b:99:
                    8a:e1:11:49:8a:c5:de:93:cf:2d:fc:e0:75:76:91:
                    7e:1f:e8:2b:38:62:c1:b2:64:d4:01:19:e5:5f:4a:
                    c5:b4:d2:f4:9c:bb:4b:46:9c:07:1c:6c:9d:f3:d8:
                    71:1a:96:28:88:fa:40:ae:28:52:2d:25:67:d9:2e:
                    e0:f8:e4:84:99:c7:ef:bf:f5:e9:b9:66:78:74:88:
                    7a:dc:9f:a6:0c:62:2d:b7:96:60:68:60:a1:ea:34:
                    47:43:ea:8f:d5:4c:f3:09:4c:2a:64:90:19:45:0f:
                    e6:ce:9b:fc:4d:d5:81:5a:6a:52:f8:5f:7b:1e:40:
                    2f:d8:f5:02:17:7e:91:72:3b:86:ec:f9:64:11:54:
                    fa:bd:01:5a:d0:11:72:c2:d0:75:8a:ee:9d:53:fa:
                    60:aa:3c:f4:dd:bf:af:ca:d4:a6:7e:77:3f:4d:9e:
                    c2:b0:93:5f:e2:47:0e:61:9b:34:c7:d6:0d:a0:ef:
                    0c:85:db:4b:33:29:b3:fd:7a:dd:4c:d6:91:91:28:
                    98:c5:bd:aa:3e:e8:58:84:73:d5:3a:6f:fa:48:3f:
                    9d:be:ed:a9:dc:fc:0f:d1:98:d7:a5:a1:b7:37:66:
                    b9:e6:94:b1:03:1b:91:ca:91:e3:3a:74:ad:92:5b:
                    72:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:34:39:46:F3:FD:21:D5:93:9F:06:42:FC:E8:3B:CD:3B:DC:05:CE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/3B343946F3FD21D5939F0642FCE83BCD3BDC05CE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.248.0/22
                IPv6:
                  2804:2544::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264269

    Signature Algorithm: sha256WithRSAEncryption
         43:f9:6f:fd:bb:af:e8:ae:04:c5:56:25:8c:6e:81:3c:6b:9a:
         9e:88:dd:6e:e1:d6:e8:5b:30:14:55:45:a3:27:60:ca:cf:92:
         27:20:28:b2:f8:3d:c4:1b:cc:83:0e:4e:08:9b:55:1f:94:53:
         d5:b2:cc:89:19:40:d7:33:8e:dd:ed:80:ee:b3:6d:a1:b9:b7:
         05:84:fd:42:d0:04:ab:02:74:10:a9:2a:11:af:9a:e3:73:f3:
         0f:7c:68:e4:cb:e9:c0:75:b2:04:bc:77:1e:8b:19:53:88:a5:
         ca:70:1f:bc:dd:93:14:60:f4:e5:9a:89:ab:59:93:e3:68:86:
         f8:69:f4:c1:8b:8f:d8:12:55:c5:74:33:4f:41:2a:f0:26:19:
         89:5c:c3:bd:28:db:b4:d7:16:71:68:52:d2:66:c4:c3:fb:b6:
         16:7b:69:1d:fa:16:25:00:9a:bd:cf:28:16:2d:d8:2a:f9:3a:
         b4:e2:28:63:65:94:c4:94:d7:b8:fe:58:4b:22:3d:2f:23:6f:
         ee:a3:0a:45:8e:ea:88:bc:e1:70:48:aa:2d:53:44:45:f6:bd:
         a3:47:57:65:80:12:40:72:9c:7b:10:4f:0f:86:9c:2c:db:2b:
         d2:75:c2:f8:74:35:7c:ec:59:85:5c:de:92:68:1e:40:94:3c:
         9b:5e:d4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:23 2024 by rpki-client on console-ams.rpki-client.org