Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3B7612BC93EE3E5C4C4A4903B99366EF5A6E41D5.cer
File:                     3B7612BC93EE3E5C4C4A4903B99366EF5A6E41D5.cer (raw, json)
Hash identifier:          Hi1sZ/TKG1bkWwlXc91DCk8dh45n5dw1y3j/TDjl0vY=
Subject key identifier:   3B:76:12:BC:93:EE:3E:5C:4C:4A:49:03:B9:93:66:EF:5A:6E:41:D5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0199A1FC00FA67897EE9BEA386C4843FDB018555
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/3B7612BC93EE3E5C4C4A4903B99366EF5A6E41D5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Dec 2022 10:57:24 +0000
Certificate not after:    Thu 28 Dec 2023 11:02:24 +0000
Subordinate resources:    AS: 266632
                          IP: 128.201.148.0/22
                          IP: 2804:3ef8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:a1:fc:00:fa:67:89:7e:e9:be:a3:86:c4:84:3f:db:01:85:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 29 10:57:24 2022 GMT
            Not After : Dec 28 11:02:24 2023 GMT
        Subject: CN=3B7612BC93EE3E5C4C4A4903B99366EF5A6E41D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ed:29:b3:60:57:8f:e9:d8:35:10:c9:2e:02:
                    b6:38:2a:0f:c8:24:43:53:c6:9e:0b:83:de:bf:e2:
                    3a:dc:9d:f1:9e:2a:1c:f4:7b:0f:69:bd:91:f2:8d:
                    76:26:d0:5d:bf:15:34:9a:2b:c1:89:64:4d:be:fa:
                    03:8d:9a:07:28:3d:4c:01:70:c5:55:c1:f4:43:f7:
                    0b:81:64:3f:62:67:6a:4b:4f:b0:08:34:d5:f1:83:
                    75:26:4c:43:3b:7f:96:73:7a:1e:f4:d0:15:8b:1b:
                    6c:af:61:0d:8f:b5:76:0a:e0:3f:29:b7:48:63:29:
                    84:07:8e:79:00:18:78:cd:ae:bc:a3:8b:ee:bd:8b:
                    7e:5c:03:95:3e:a8:7d:1c:f6:5c:63:4e:0f:4c:c9:
                    df:a2:e7:b2:29:71:ea:65:a9:84:6d:6e:b6:a0:4c:
                    a4:92:51:c9:13:43:90:10:8e:ce:ef:38:c4:89:e2:
                    26:6c:1f:28:c7:68:72:58:9a:eb:c9:70:6d:3d:a2:
                    62:d0:1b:88:c4:b4:ec:7a:d2:75:20:65:89:b2:16:
                    9d:79:c1:16:b0:fd:e8:f2:04:38:f2:60:89:f4:27:
                    a3:12:f1:e4:b5:9a:37:ac:16:02:55:ce:3e:da:f1:
                    44:b6:39:43:1a:da:4a:41:08:2c:7f:bd:47:50:5c:
                    1e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:76:12:BC:93:EE:3E:5C:4C:4A:49:03:B9:93:66:EF:5A:6E:41:D5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/0/3B7612BC93EE3E5C4C4A4903B99366EF5A6E41D5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.148.0/22
                IPv6:
                  2804:3ef8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266632

    Signature Algorithm: sha256WithRSAEncryption
         52:d7:f6:d5:03:60:7b:b5:a0:74:85:98:42:83:33:06:e6:41:
         74:3b:ed:71:57:ed:15:6f:32:8a:c9:ba:a1:f3:5c:31:9a:07:
         e9:8c:2c:62:b8:13:e2:71:2c:5d:89:88:32:57:61:f2:f5:d8:
         8d:7b:44:30:f7:57:49:6b:e3:58:d5:d1:9f:28:9c:8b:c5:f6:
         54:de:16:7c:7c:60:70:c9:5e:50:2f:ab:8f:5a:50:21:23:e6:
         3a:44:74:ac:05:ca:1e:f1:ff:69:b5:b5:43:0d:b2:23:15:dc:
         68:a3:1e:0b:c9:7c:1d:44:07:91:9c:cc:ce:3b:ef:48:5a:95:
         e6:9b:7c:14:52:44:27:e4:39:9b:72:9c:f6:77:1b:da:f4:63:
         01:f9:4a:a6:88:01:d5:07:d2:43:f0:5c:ba:f3:3e:85:3a:f5:
         f9:5e:f0:39:19:ab:f0:83:ba:34:f9:93:cf:d8:58:0c:78:74:
         aa:3d:b9:cf:85:d4:a8:99:b6:d3:dc:44:b5:3e:63:3c:45:9c:
         df:89:6b:82:98:1f:f4:f2:b0:16:b7:a8:c9:5b:43:1c:e7:a6:
         2e:62:c1:be:67:3d:1f:4e:0e:ce:fe:15:09:ab:80:65:a4:cc:
         59:0e:b2:f6:86:5a:c1:25:48:7e:bd:e9:48:94:c5:62:cd:e6:
         fe:3d:35:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:00 2025 by rpki-client