Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3BBA01760B938E3E03C1B281649113959DCDB7A4.cer
File:                     3BBA01760B938E3E03C1B281649113959DCDB7A4.cer (raw, json)
Hash identifier:          W76pC3rQZKanSwOl29DGFgAtbF6b8sF1NLzJf7SJPi0=
Subject key identifier:   3B:BA:01:76:0B:93:8E:3E:03:C1:B2:81:64:91:13:95:9D:CD:B7:A4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       57C529D8CED84A1D16AE56754BE294EA92A42589
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3BBA01760B938E3E03C1B281649113959DCDB7A4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Feb 2024 19:48:45 +0000
Certificate not after:    Tue 18 Feb 2025 19:53:45 +0000
Subordinate resources:    AS: 264208
                          IP: 138.97.224.0/22
                          IP: 2804:2434::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c5:29:d8:ce:d8:4a:1d:16:ae:56:75:4b:e2:94:ea:92:a4:25:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 20 19:48:45 2024 GMT
            Not After : Feb 18 19:53:45 2025 GMT
        Subject: CN=3BBA01760B938E3E03C1B281649113959DCDB7A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9d:6c:d9:4d:2b:27:d7:a0:9d:1b:ad:a0:cd:
                    03:41:b0:69:7f:ab:9f:40:1c:c9:a4:9d:51:cd:19:
                    3e:c3:8d:4c:54:5d:e9:ae:67:9e:a2:2a:d9:ad:a1:
                    ab:de:c4:07:da:5a:5c:32:f5:1a:87:8e:5d:59:cd:
                    11:da:8b:0e:77:c3:e7:68:d5:b6:63:66:fa:6c:4e:
                    91:f2:4e:5c:0b:4d:15:42:ab:3d:37:58:8d:54:1c:
                    7c:5a:f4:1e:6a:84:f8:8d:16:57:0e:b1:d9:59:f5:
                    2d:7e:db:0c:18:ba:8b:23:b0:c0:f0:4f:a9:2b:44:
                    cd:9c:74:08:99:bf:8c:6b:4e:3c:bf:66:df:42:75:
                    2a:1b:c0:ff:9f:97:dd:e2:4d:05:c4:90:dd:5d:67:
                    99:d9:fa:7d:df:0c:59:ea:df:8f:ef:f9:33:5d:06:
                    f4:fb:59:ab:7d:e3:40:d9:ec:34:d9:52:d0:e3:be:
                    85:0c:a3:a7:90:5a:ee:cc:39:b2:08:95:c7:2c:61:
                    a5:95:1a:dd:fa:e0:88:bb:48:a5:c9:57:81:07:64:
                    ae:0a:bb:74:a1:7a:22:eb:3f:06:f9:95:fe:38:7e:
                    97:12:a4:05:36:53:de:e0:13:f9:6f:ec:06:0f:1c:
                    ca:9c:92:ec:42:58:80:21:31:30:12:58:d6:06:7d:
                    36:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:BA:01:76:0B:93:8E:3E:03:C1:B2:81:64:91:13:95:9D:CD:B7:A4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3BBA01760B938E3E03C1B281649113959DCDB7A4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.224.0/22
                IPv6:
                  2804:2434::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264208

    Signature Algorithm: sha256WithRSAEncryption
         03:5d:05:a7:a9:9e:d5:fc:c4:41:e9:9d:35:0a:43:8c:fe:d5:
         33:4e:b2:8f:95:a5:de:01:fb:18:b1:63:77:ee:f8:7e:b6:3a:
         32:f4:30:72:a3:2f:6c:9e:47:d6:0d:d8:c1:45:57:32:c2:7f:
         c3:3d:16:68:fa:63:70:b2:2d:ef:1f:84:0d:af:a7:f2:c8:06:
         2b:f5:72:85:43:ef:3a:81:45:81:27:07:42:a4:e8:18:e0:bf:
         1e:cd:6d:4e:01:d4:3f:45:93:06:a0:50:9e:7a:7c:11:7b:b8:
         bb:65:17:20:4e:d9:5d:e9:81:5b:55:d0:07:48:21:e5:31:07:
         75:5e:31:b6:4d:a0:e5:c9:89:54:1e:0f:a6:79:68:e7:4f:36:
         07:53:fa:aa:1b:19:24:10:89:2c:a3:07:84:f3:83:2a:10:66:
         37:6c:6c:62:6b:31:40:0f:97:7d:df:86:2d:e4:7b:72:db:77:
         fb:9d:fa:26:ee:f5:a6:b3:2f:25:2d:32:01:66:b0:d8:82:0a:
         9e:c6:5f:1d:43:97:5e:e5:56:a7:7d:c3:bc:9c:b0:10:b3:f6:
         48:54:c3:9a:e4:10:14:9b:68:29:c7:38:ba:25:69:82:e2:57:
         a8:63:bb:bc:ca:85:8b:71:bc:29:d6:c2:98:b9:2c:9a:06:4a:
         81:3f:e4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org