Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3B8E2CF1B7B033168887905F5588E804110099DB.cer
File:                     3B8E2CF1B7B033168887905F5588E804110099DB.cer (raw, json)
Hash identifier:          Gvvmg4BcrvauGvvAxUsiyhtM5Dm9KToY19hZdi0xAEY=
Subject key identifier:   3B:8E:2C:F1:B7:B0:33:16:88:87:90:5F:55:88:E8:04:11:00:99:DB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5C19089F2C5EFC5A11B6F690C3A9914A35FA155D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/0/3B8E2CF1B7B033168887905F5588E804110099DB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Mar 2024 18:03:38 +0000
Certificate not after:    Tue 18 Mar 2025 18:08:38 +0000
Subordinate resources:    AS: 269082
                          IP: 45.179.40.0/22
                          IP: 2804:5f30::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:19:08:9f:2c:5e:fc:5a:11:b6:f6:90:c3:a9:91:4a:35:fa:15:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 19 18:03:38 2024 GMT
            Not After : Mar 18 18:08:38 2025 GMT
        Subject: CN=3B8E2CF1B7B033168887905F5588E804110099DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:bf:dc:cf:7a:9b:5b:9a:20:f0:ce:55:d1:
                    24:4c:72:f5:77:3a:7d:90:53:22:08:3f:8a:27:70:
                    7a:ec:21:d1:84:61:f8:88:d0:63:b4:5e:20:8e:88:
                    5c:85:26:3d:e8:70:4b:c5:d8:73:33:45:11:1b:93:
                    f6:ba:77:59:f8:a2:31:92:b4:7e:61:cc:ac:37:94:
                    8c:eb:f8:ec:2f:45:15:a5:82:eb:90:3c:b2:38:ff:
                    bf:26:8e:9f:e5:18:cb:60:b6:65:d6:5a:5f:67:f1:
                    f7:31:39:e9:54:31:04:e9:93:87:cc:92:5b:1c:f0:
                    6f:ef:cd:28:21:45:fc:dd:d0:e4:8e:b8:1b:75:c2:
                    0b:04:af:f2:6c:6a:6e:63:07:95:3c:8c:bb:37:4f:
                    a8:28:f3:41:bb:67:66:fd:af:26:11:8c:83:ce:bd:
                    ab:29:3b:c8:54:0e:71:72:2a:6a:d2:37:c6:d5:be:
                    3d:a0:0c:ff:cf:7a:03:23:27:e8:b1:f8:87:06:e3:
                    30:b8:09:3d:08:b8:c9:28:1d:f6:ca:c5:36:29:27:
                    f8:62:b7:eb:f7:c5:37:23:f8:7e:10:bb:36:81:ba:
                    27:05:35:ed:e7:2a:c1:94:86:6f:7a:b7:c2:18:70:
                    62:a8:fc:26:30:fc:15:4d:d5:71:ea:49:2d:97:ae:
                    7f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:8E:2C:F1:B7:B0:33:16:88:87:90:5F:55:88:E8:04:11:00:99:DB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/0/3B8E2CF1B7B033168887905F5588E804110099DB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.40.0/22
                IPv6:
                  2804:5f30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269082

    Signature Algorithm: sha256WithRSAEncryption
         74:7d:1f:48:c6:70:6c:4c:0d:8c:7f:c2:2f:63:11:04:55:de:
         c5:49:29:29:5e:17:24:9a:cc:22:00:af:3a:5c:95:35:19:8e:
         d1:23:19:0f:e8:24:b9:91:c8:97:22:62:eb:6f:51:82:47:f5:
         36:7b:bc:71:ff:6e:03:60:22:0f:6e:a2:e5:88:d6:b5:c0:f3:
         bb:ce:bd:09:0c:a6:0b:23:95:17:25:19:1f:17:c9:e6:1b:af:
         27:34:d1:58:2f:67:75:d7:32:1e:7e:9a:3d:44:0a:aa:df:3a:
         ae:82:94:01:90:13:18:20:f7:0f:08:03:d8:af:de:54:67:f9:
         d2:a9:45:70:e6:1e:1f:5d:14:5b:02:54:52:56:25:02:00:b1:
         28:05:1b:4c:36:eb:77:84:20:82:ab:b2:06:6a:57:75:62:77:
         c6:04:78:0e:01:4d:05:f3:d4:6c:9f:74:1a:f7:8b:7a:e9:c1:
         93:67:6a:57:07:5e:6c:62:f3:93:45:dd:40:91:4c:0c:07:f6:
         b2:a3:a6:7e:55:f7:54:a4:ef:8a:fb:0a:dd:b8:6c:6b:27:79:
         53:45:36:c9:91:cf:6c:7e:ae:f1:f2:c5:a0:5d:cf:f5:7e:f8:
         a9:fc:c1:ad:54:a2:79:c7:45:71:80:f0:96:a3:7a:be:2e:c1:
         31:e7:08:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org