Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
File:                     3B765B701A47BF72E77B8642ADC280A3017185B9.cer (raw, json)
Hash identifier:          U3P8thKw6vDU68CjO7wpJpT6H/zAYaYD3IS+0DhODUk=
Subject key identifier:   3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5688C0EA4169842B7423F6DCA54CD45A3F2765DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 19 Aug 2023 16:25:09 +0000
Certificate not after:    Sat 17 Aug 2024 16:30:09 +0000
Subordinate resources:    AS: 262691
                          IP: 131.108.200.0/22
                          IP: 177.72.20.0/22
                          IP: 177.87.204.0/22
                          IP: 179.108.192.0 -- 179.108.239.255
                          IP: 186.194.208.0/20
                          IP: 187.94.192.0/20
                          IP: 2804:1cd8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:88:c0:ea:41:69:84:2b:74:23:f6:dc:a5:4c:d4:5a:3f:27:65:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 19 16:25:09 2023 GMT
            Not After : Aug 17 16:30:09 2024 GMT
        Subject: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:72:e0:fe:18:b8:f0:4d:2e:6d:0e:c0:08:70:
                    e6:35:15:a4:9f:63:c1:2f:96:af:6c:0c:ff:e2:1e:
                    c9:6b:62:4f:70:d2:53:a1:73:27:25:f9:ff:fd:34:
                    fa:60:5e:4d:0f:4f:8b:66:1d:9b:d2:b9:6c:05:ad:
                    b5:9d:cd:52:b2:4b:2e:38:d8:dd:eb:20:d5:25:ee:
                    ad:a6:00:8d:7c:3c:94:9a:2c:fb:8c:bc:a4:a9:c4:
                    2e:8c:8a:08:4c:e9:8d:ce:f0:df:d3:1d:45:38:e0:
                    42:90:64:bf:d1:a3:9d:da:6f:5a:bd:d5:6f:b8:6a:
                    6f:cc:45:a1:73:df:5e:c7:c7:2b:cc:df:7a:61:0a:
                    a3:f9:18:8e:c5:6b:d5:cc:b3:15:54:86:43:5a:61:
                    f1:e0:91:43:8c:e4:79:64:24:e4:a6:a2:93:a8:22:
                    e1:60:89:5c:33:11:6c:d8:00:c3:b6:32:f7:17:94:
                    73:dc:d7:03:3d:50:f1:d1:92:53:db:5b:30:e8:e1:
                    73:a9:51:9b:28:6f:d5:b2:f0:28:89:a2:b5:de:d7:
                    81:81:eb:a9:9c:b7:56:fc:5a:ba:e8:3c:95:e0:f9:
                    3f:38:20:32:c6:20:e6:a8:21:6f:64:85:e2:9d:2d:
                    1d:43:ab:02:c3:30:44:0c:98:31:c3:8c:e3:e6:1a:
                    24:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.200.0/22
                  177.72.20.0/22
                  177.87.204.0/22
                  179.108.192.0-179.108.239.255
                  186.194.208.0/20
                  187.94.192.0/20
                IPv6:
                  2804:1cd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262691

    Signature Algorithm: sha256WithRSAEncryption
         5e:ad:33:36:e7:ef:35:7d:e0:40:15:fd:f2:07:4f:14:71:ae:
         9c:6a:44:c9:a5:1e:8d:26:49:1f:3b:fd:fd:cc:93:c0:f3:b9:
         4f:ff:0f:78:49:84:76:29:57:05:7e:3d:8e:a7:ec:d0:8a:55:
         49:9b:eb:a9:9e:f5:1e:bd:aa:cd:0d:67:4f:7f:9a:14:c8:d5:
         34:cf:58:ff:4b:a9:20:28:c2:dc:52:ca:f2:73:ff:91:10:54:
         3a:91:69:12:2d:bf:92:45:24:a6:e7:33:f1:04:f0:08:4d:cf:
         34:a4:04:90:0e:84:d2:06:dc:2e:d0:51:da:2a:bd:8b:76:29:
         95:26:3d:5d:66:68:7f:b5:3c:c4:61:6c:0e:06:d6:ba:67:a5:
         d7:0d:2c:1f:ef:1e:b3:0f:34:0f:e6:46:3c:ab:84:f9:fe:a5:
         45:3b:56:d5:b7:ad:00:f7:d7:94:8d:2a:8f:3f:82:97:6e:63:
         7c:cf:0d:fb:cd:02:0b:81:2e:62:6a:20:f5:8c:2f:8b:5a:18:
         a7:ed:0b:58:30:b5:26:15:7d:52:47:38:b9:f4:52:cb:ce:3c:
         6c:b4:a0:40:ae:63:58:1c:9c:71:c7:3c:0c:cb:0f:cd:1f:cb:
         40:65:82:0e:00:75:ec:76:58:90:e3:58:da:06:14:ab:a4:e8:
         b3:8f:c9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org