Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3BB0EBF5569F560AB751A23E2DD86568033C6262.cer
File:                     3BB0EBF5569F560AB751A23E2DD86568033C6262.cer (raw, json)
Hash identifier:          m2zUbkcspdlhOZUrHy0e7Im9YhwbEXcDMx/ZJLO3Dgc=
Subject key identifier:   3B:B0:EB:F5:56:9F:56:0A:B7:51:A2:3E:2D:D8:65:68:03:3C:62:62
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       332865DC22F6DD055454003D7F95FB201DB08453
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/3BB0EBF5569F560AB751A23E2DD86568033C6262.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 24 Jul 2021 21:15:45 +0000
Certificate not after:    Sat 23 Jul 2022 21:20:45 +0000
Subordinate resources:    AS: 267585
                          IP: 45.70.192.0/22
                          IP: 2804:43b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:28:65:dc:22:f6:dd:05:54:54:00:3d:7f:95:fb:20:1d:b0:84:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 24 21:15:45 2021 GMT
            Not After : Jul 23 21:20:45 2022 GMT
        Subject: CN=3BB0EBF5569F560AB751A23E2DD86568033C6262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1d:ca:39:5d:e7:b2:7f:90:ad:d5:c3:3e:6c:
                    07:e6:f2:7a:ee:38:9c:be:7d:b8:78:7e:4e:1a:80:
                    ab:07:1c:19:1e:5e:28:71:d3:e8:8f:ea:71:02:0f:
                    0d:4c:23:5a:f5:d7:9f:df:77:58:04:97:31:70:df:
                    17:99:ea:bc:07:46:96:aa:e6:36:ed:db:52:19:2a:
                    49:e3:77:19:fe:9b:92:f0:57:ac:4a:5b:6e:ff:5a:
                    fc:50:c8:37:ee:b9:ac:33:b4:57:4a:ba:f4:85:9d:
                    07:13:95:38:21:05:2d:e8:39:e0:a3:75:03:41:2a:
                    d6:1f:9b:e4:bc:ae:12:ef:ed:48:79:32:1d:fc:70:
                    7f:a0:9d:bd:8b:4b:c9:9b:b1:95:01:42:2b:cc:11:
                    fa:76:bb:55:dc:65:6f:37:48:1c:7e:29:9f:a2:ea:
                    d1:9d:f6:44:7d:23:59:45:46:0a:bb:a8:fe:f1:db:
                    29:45:1f:a0:58:ad:93:e4:df:84:a0:b9:16:d9:67:
                    5c:e7:07:c7:ad:c0:96:18:59:49:b7:db:ec:1d:9c:
                    47:7b:15:a2:57:b0:0c:bf:1e:3a:b3:1e:f4:05:92:
                    1c:3b:f6:0b:49:cf:f1:d8:2d:ed:44:ec:7b:a0:73:
                    56:d2:f4:4a:d8:d2:d9:2d:38:eb:84:2b:28:2d:27:
                    84:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:B0:EB:F5:56:9F:56:0A:B7:51:A2:3E:2D:D8:65:68:03:3C:62:62
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DwQxnFqziithwRm3cVCMKqLKU3689FDMJMMRLC7gwbUZ/0/3BB0EBF5569F560AB751A23E2DD86568033C6262.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.192.0/22
                IPv6:
                  2804:43b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267585

    Signature Algorithm: sha256WithRSAEncryption
         91:e3:a4:48:64:30:87:b4:34:34:c8:8e:37:f2:dc:e2:61:f4:
         38:8e:93:b4:03:49:1c:73:70:27:a1:38:a6:cb:de:96:b2:b9:
         06:cd:7c:2a:8d:db:d1:ee:3b:1b:6c:12:a6:0f:2c:68:6a:fd:
         4a:18:2f:0a:8e:4a:3b:67:3e:23:0e:68:4c:ac:50:6e:05:42:
         66:51:ae:a5:58:37:ed:87:73:d6:d4:4c:ee:a8:26:2a:34:ce:
         b7:6d:f2:55:1c:5c:71:ac:dc:35:6c:5e:f4:b9:87:71:8f:4a:
         fc:a6:30:3e:c0:be:f3:d4:9b:f6:cf:3d:39:6c:dd:ce:97:bc:
         3f:84:7d:f8:d1:f7:90:34:30:ee:ed:55:51:e1:1a:71:28:81:
         3b:30:47:14:0e:1e:be:2d:87:af:31:06:f3:ee:5f:c8:fb:5f:
         60:e5:50:70:e8:5d:ed:62:1c:4b:b6:77:da:2f:02:d2:fe:01:
         77:bd:8e:87:cb:e6:54:25:a5:d0:95:b3:1a:c3:10:b1:68:fd:
         82:dd:d2:3f:69:2c:99:a5:65:e5:7d:e7:76:c8:8c:ae:21:4c:
         b0:52:71:53:74:d1:ec:40:19:eb:06:33:8a:dd:49:2a:d8:e5:
         d1:78:7d:70:dd:da:3d:6d:e3:2a:36:45:81:f0:6a:b7:4c:5c:
         9a:0f:b6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:23 2024 by rpki-client on console-ams.rpki-client.org