Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3B37043581C63D12F9F834F7AAA8A5CCAB61A786.cer
File:                     3B37043581C63D12F9F834F7AAA8A5CCAB61A786.cer (raw, json)
Hash identifier:          9Q72kNg8GMrHDC11QNkAWgMBQgnb4XeQ4Y/4IX2kOmg=
Subject key identifier:   3B:37:04:35:81:C6:3D:12:F9:F8:34:F7:AA:A8:A5:CC:AB:61:A7:86
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4988E7A55E35F677C67ED8C64EB788C1E56E80D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ExkTHHoibuMaUZHXoT2hDEdsa47LEcCB5j8XSYUNEZvc/0/3B37043581C63D12F9F834F7AAA8A5CCAB61A786.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ExkTHHoibuMaUZHXoT2hDEdsa47LEcCB5j8XSYUNEZvc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Dec 2023 14:22:58 +0000
Certificate not after:    Tue 24 Dec 2024 14:27:58 +0000
Subordinate resources:    AS: 22431
                          IP: 189.113.16.0/20
                          IP: 200.162.160.0/20
                          IP: 2804:b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:88:e7:a5:5e:35:f6:77:c6:7e:d8:c6:4e:b7:88:c1:e5:6e:80:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 26 14:22:58 2023 GMT
            Not After : Dec 24 14:27:58 2024 GMT
        Subject: CN=3B37043581C63D12F9F834F7AAA8A5CCAB61A786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a4:a6:43:89:77:2f:02:a4:17:57:5a:59:05:
                    5d:ac:9e:a2:44:7d:92:62:82:d4:4c:b3:0a:b7:a1:
                    0a:21:ee:d0:92:ac:1d:ab:5e:b8:63:a7:e4:86:29:
                    c9:1a:20:79:1e:10:76:93:08:94:c2:d0:21:66:1d:
                    70:ba:58:23:50:0d:06:5e:7a:75:8e:c7:6f:eb:99:
                    6e:9d:e0:e9:13:07:ec:ee:08:80:ef:2c:e3:47:6a:
                    aa:09:b0:95:52:45:50:db:de:4d:bf:45:d0:5d:b2:
                    50:0d:05:e2:d0:dc:8c:ef:b0:5a:ff:97:5e:8f:b4:
                    47:4c:05:c2:c7:31:45:c2:c4:69:a6:30:3b:f3:b3:
                    6c:d5:a1:6d:ca:7d:b4:68:42:00:74:5d:28:b8:ed:
                    f4:2c:8b:ab:1c:0e:46:2a:f8:70:e1:b2:09:57:5e:
                    bd:fe:0a:9e:93:09:0a:69:c9:37:f7:f1:0e:24:1a:
                    1a:d7:4e:af:2e:1d:7b:e7:33:18:72:9a:60:65:c1:
                    43:b2:2e:41:f1:da:c0:e4:f7:a6:6c:5a:14:ec:c1:
                    7f:76:21:f0:d9:83:c5:53:e9:6a:4b:75:79:84:b8:
                    be:7d:fe:fc:db:f3:36:f7:07:eb:b5:87:e0:f1:b0:
                    27:8b:7d:30:74:0d:1c:68:93:3d:e8:1e:2e:b4:90:
                    fb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:37:04:35:81:C6:3D:12:F9:F8:34:F7:AA:A8:A5:CC:AB:61:A7:86
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ExkTHHoibuMaUZHXoT2hDEdsa47LEcCB5j8XSYUNEZvc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ExkTHHoibuMaUZHXoT2hDEdsa47LEcCB5j8XSYUNEZvc/0/3B37043581C63D12F9F834F7AAA8A5CCAB61A786.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.16.0/20
                  200.162.160.0/20
                IPv6:
                  2804:b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22431

    Signature Algorithm: sha256WithRSAEncryption
         aa:23:20:48:a8:58:0b:0f:a0:d8:81:76:a0:57:42:80:f3:36:
         23:90:82:d4:49:d1:30:5a:77:50:64:97:26:3a:02:68:90:6d:
         98:31:37:2f:72:ac:e1:b7:7c:6a:ec:75:4b:77:64:1f:fc:a8:
         a6:43:fd:5b:4c:52:0d:9c:59:0d:f4:4d:65:c6:4c:d8:ff:06:
         d0:eb:d3:69:8f:1f:9e:e9:e7:9e:d5:88:a4:ff:0b:b8:2e:b7:
         a7:84:4c:70:a2:48:c7:a2:8c:ab:ed:6f:9b:27:fc:78:58:1e:
         bb:de:45:46:18:61:e9:b8:85:1d:fa:fc:01:c4:9e:e2:24:5d:
         70:03:ad:56:59:6e:ec:d1:89:a8:98:11:9c:8f:5f:be:f1:86:
         e2:23:1b:45:87:93:07:6d:04:ee:3a:8a:59:b8:88:25:45:31:
         5e:08:ed:00:f2:6b:ed:d5:18:85:65:04:20:f1:b9:5f:6a:d0:
         69:e1:46:9f:8a:4c:ed:c7:20:21:73:eb:1f:10:18:04:38:d0:
         78:3d:7a:54:ae:79:a3:37:98:0a:94:a1:d5:d0:b4:59:d2:83:
         a0:5a:f7:66:96:6b:af:79:7e:91:91:1d:1f:ee:08:6f:6a:06:
         8a:f7:b3:8c:52:1a:82:b2:87:4d:9c:0d:e2:45:7e:99:80:d6:
         1f:f6:e9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org