Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3B37C2C485106C1192DC4462E27FBBA779AA590B.cer
File:                     3B37C2C485106C1192DC4462E27FBBA779AA590B.cer (raw, json)
Hash identifier:          lFZmbeXCgIYlC7NmiXgUYnarTLElKybtWyWZGWqNAts=
Subject key identifier:   3B:37:C2:C4:85:10:6C:11:92:DC:44:62:E2:7F:BB:A7:79:AA:59:0B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7043BC63D8BCF8AA47428394D077B8C7D935901D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/3B37C2C485106C1192DC4462E27FBBA779AA590B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 27 Aug 2023 14:02:33 +0000
Certificate not after:    Sun 25 Aug 2024 14:07:33 +0000
Subordinate resources:    AS: 271425
                          IP: 200.39.44.0/22
                          IP: 2804:7b54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:43:bc:63:d8:bc:f8:aa:47:42:83:94:d0:77:b8:c7:d9:35:90:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 27 14:02:33 2023 GMT
            Not After : Aug 25 14:07:33 2024 GMT
        Subject: CN=3B37C2C485106C1192DC4462E27FBBA779AA590B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e4:a3:ea:4f:72:86:f1:0c:e3:fd:01:d0:10:
                    a3:17:0b:1e:48:1a:c7:6a:37:5e:d7:b8:98:c9:ae:
                    51:4f:89:61:5b:43:50:74:ec:5c:9c:3e:11:3f:7a:
                    0b:30:da:7f:73:56:d0:ee:d3:92:eb:cd:fc:15:18:
                    a6:18:1d:ed:88:b1:13:1f:f8:e6:7c:a0:39:b4:a6:
                    54:60:93:7b:40:1f:85:2b:77:b4:99:97:06:1d:cb:
                    86:0c:cd:04:ea:04:39:09:c3:00:aa:a3:41:84:29:
                    d1:ad:b1:80:be:a2:83:9f:c3:44:31:5f:25:86:61:
                    4f:e6:5f:16:1e:8c:81:af:91:9c:b8:90:2a:99:4f:
                    96:c2:07:47:ad:eb:4d:73:0e:ed:e4:5b:be:ba:8a:
                    06:9f:c1:77:0d:7b:94:a6:5c:24:84:35:50:31:80:
                    d5:a2:b7:c6:3d:dc:61:ab:6a:6a:e3:c9:9e:6e:f6:
                    b1:54:be:bd:47:51:f9:cc:d7:36:f5:4f:ad:f5:25:
                    1b:fc:db:27:7b:d9:b4:ed:74:3f:d6:81:f8:fa:1a:
                    24:71:51:5c:09:cd:a2:b4:44:a6:8d:40:19:7b:4b:
                    67:1d:f9:0b:eb:ba:d4:7b:0d:53:5b:f3:ff:36:98:
                    3b:88:f4:3f:be:fa:d1:4a:69:3b:ac:95:47:41:42:
                    13:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:37:C2:C4:85:10:6C:11:92:DC:44:62:E2:7F:BB:A7:79:AA:59:0B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/3B37C2C485106C1192DC4462E27FBBA779AA590B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.44.0/22
                IPv6:
                  2804:7b54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271425

    Signature Algorithm: sha256WithRSAEncryption
         19:4c:ac:c5:0d:87:17:8b:44:35:40:82:d3:11:ce:8a:27:01:
         16:67:22:83:43:4b:59:d7:a2:fd:9c:84:69:b6:e6:93:b2:b0:
         70:6c:b6:25:65:23:f7:1b:76:3f:09:5c:fd:66:e6:5d:03:93:
         c4:f1:10:2c:f9:aa:85:12:b7:41:9b:f8:4d:e0:e1:c7:a6:98:
         70:29:7b:d5:da:f1:8f:5f:9e:b0:e2:ee:e5:10:12:71:9b:89:
         05:da:9c:5b:43:e7:fa:e5:d0:69:db:e7:18:13:b9:3b:3f:5f:
         a5:22:be:4d:2b:61:93:27:35:33:4d:53:c0:a7:2b:85:ca:97:
         bb:5f:6e:94:da:ed:92:c7:a4:2d:9d:b3:dc:16:cc:cb:d7:40:
         88:00:57:ae:fa:f5:ca:fa:ee:6a:2c:46:52:ef:ed:bf:d4:9a:
         b1:17:a3:55:20:0f:ca:ae:66:d8:01:1c:41:bb:b0:ab:5b:50:
         6a:79:bc:6b:04:18:70:b1:ba:cb:0f:b2:c1:c6:bf:8a:ed:30:
         df:3d:ac:94:5a:e2:c7:cd:50:f9:4f:98:50:17:d0:54:6b:9a:
         9c:da:b2:81:9c:eb:c2:f7:af:d6:77:0a:9f:dc:ee:92:5c:c4:
         25:74:7d:0a:18:69:67:e9:1d:8e:6c:7a:08:d2:df:43:87:f3:
         7c:64:7b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----