Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3B6FF1683D201F90D697B0A5A29C84440B11C4CD.cer
File:                     3B6FF1683D201F90D697B0A5A29C84440B11C4CD.cer (raw, json)
Hash identifier:          PI6kjq4OkAQX+lE18GnOP6uFCFnOz3//YkkAtFCM/tM=
Subject key identifier:   3B:6F:F1:68:3D:20:1F:90:D6:97:B0:A5:A2:9C:84:44:0B:11:C4:CD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       660CE17790D76F2A2861BB9D3C601073F16FA02E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3B6FF1683D201F90D697B0A5A29C84440B11C4CD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jan 2022 12:45:54 +0000
Certificate not after:    Thu 26 Jan 2023 12:50:54 +0000
Subordinate resources:    AS: 265098
                          IP: 170.233.236.0/22
                          IP: 2804:32cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0c:e1:77:90:d7:6f:2a:28:61:bb:9d:3c:60:10:73:f1:6f:a0:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 27 12:45:54 2022 GMT
            Not After : Jan 26 12:50:54 2023 GMT
        Subject: CN=3B6FF1683D201F90D697B0A5A29C84440B11C4CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:02:67:13:e4:16:c9:06:80:57:94:6d:78:50:
                    a5:f6:d8:21:d1:62:fd:0a:46:a8:39:f7:6b:44:d1:
                    c0:55:b0:b6:60:52:d7:db:b3:33:fd:0a:a6:7c:35:
                    6e:7e:0b:7a:53:e0:0e:4f:cd:84:cc:fa:66:29:73:
                    38:b5:9d:30:21:4f:3d:b9:25:6f:f0:9a:73:26:55:
                    b4:20:b6:68:4d:67:f5:ad:96:cf:69:6e:72:93:65:
                    61:40:83:6d:a1:98:ec:89:36:e1:df:96:64:17:67:
                    87:3f:11:a4:ef:92:0c:06:d1:1b:98:cd:e5:48:44:
                    81:7a:88:cf:73:53:34:5c:65:3a:9b:f9:de:d5:77:
                    f7:b4:ba:e3:c1:91:a0:41:55:90:62:d8:75:7d:20:
                    96:ef:d4:59:c8:e9:51:0c:b5:42:2d:89:f6:a3:7b:
                    fd:94:00:b4:dd:72:82:d4:87:30:63:8b:da:4c:5a:
                    3e:61:a2:b4:5b:44:af:0c:1a:03:95:dc:2d:7d:ee:
                    27:99:80:42:66:67:a0:11:a7:8b:0e:8b:e1:a9:a3:
                    2b:30:cd:de:de:87:70:cc:cc:08:0b:c7:7b:d8:97:
                    58:28:42:71:77:8f:69:1c:b8:bb:96:07:b1:4f:ef:
                    3d:eb:ea:15:97:ef:dd:cb:6b:12:a5:18:e4:9e:51:
                    74:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:6F:F1:68:3D:20:1F:90:D6:97:B0:A5:A2:9C:84:44:0B:11:C4:CD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2UDdFBPRLT4owx99QheiQdCqUxoMPHTfgJxhcLmUpt5Q/0/3B6FF1683D201F90D697B0A5A29C84440B11C4CD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.236.0/22
                IPv6:
                  2804:32cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265098

    Signature Algorithm: sha256WithRSAEncryption
         b6:c9:8f:80:de:da:1a:46:64:62:2e:a5:77:ee:f5:5a:2d:e0:
         ab:c8:94:5c:24:97:9c:b4:45:8b:c1:ee:c8:64:88:a4:68:02:
         d3:04:8f:0c:80:3e:1e:33:cf:c1:24:71:93:43:99:51:df:93:
         24:a8:36:83:e8:01:86:9b:2d:0c:3a:8e:7e:3b:1f:b1:e1:67:
         81:4a:7d:4b:bf:db:a9:f4:9a:ff:7d:89:2d:b9:13:19:ff:98:
         e8:d8:30:10:f3:71:a7:91:8a:77:b9:50:ad:12:94:98:91:70:
         55:d1:62:17:13:68:db:ee:7e:48:c8:aa:87:14:c5:7b:d8:73:
         56:05:64:43:b3:0a:dc:fa:07:ce:cc:26:7e:73:35:4a:44:8c:
         f9:1e:29:26:7b:f9:0a:ab:62:88:1f:91:d6:12:35:27:e4:a2:
         98:db:a1:ca:4e:34:53:03:99:bf:92:1a:7e:44:b6:cb:76:4e:
         01:97:3e:61:9f:d5:49:d2:81:56:61:07:c9:89:1c:24:92:61:
         20:8e:ae:58:11:80:4e:5a:1c:d3:5b:93:72:ee:61:09:95:37:
         55:df:cb:cc:ef:48:09:e3:00:69:81:46:52:bd:a6:f5:3b:87:
         e4:f7:f5:3d:b6:ff:55:61:18:44:f4:a3:0e:ee:87:6e:87:68:
         ec:18:4b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:23 2024 by rpki-client on console-ams.rpki-client.org