Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3BBEAF7C89270546CC0F41447D11417F1D00B099.cer
File:                     3BBEAF7C89270546CC0F41447D11417F1D00B099.cer (raw, json)
Hash identifier:          ZCHbzQ/u6pv9/cN/DaYSf/LgaHCl9KGPGL96pqFO8Kg=
Subject key identifier:   3B:BE:AF:7C:89:27:05:46:CC:0F:41:44:7D:11:41:7F:1D:00:B0:99
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3190436331CF45C5E81694DB7CDA0F4C75358E29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4pYUfja9aM5WXaFJLvB96469zenRzBcdQmfzxcMJErW9/0/3BBEAF7C89270546CC0F41447D11417F1D00B099.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4pYUfja9aM5WXaFJLvB96469zenRzBcdQmfzxcMJErW9/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Dec 2021 18:40:34 +0000
Certificate not after:    Tue 06 Dec 2022 18:45:34 +0000
Subordinate resources:    AS: 61588
                          IP: 138.59.124.0/22
                          IP: 143.255.76.0/22
                          IP: 170.233.224.0/22
                          IP: 170.245.24.0/22
                          IP: 186.219.216.0/21
                          IP: 2804:ebc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:90:43:63:31:cf:45:c5:e8:16:94:db:7c:da:0f:4c:75:35:8e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  7 18:40:34 2021 GMT
            Not After : Dec  6 18:45:34 2022 GMT
        Subject: CN=3BBEAF7C89270546CC0F41447D11417F1D00B099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9e:6d:b6:cc:b1:c8:0f:dd:a9:37:55:29:58:
                    cb:b9:be:aa:d6:76:84:ab:6a:fc:8c:3a:a0:cc:63:
                    5b:d8:8f:1e:41:d2:67:b1:25:ff:d7:93:5a:44:9d:
                    d8:05:4d:65:dd:02:75:fc:10:00:6f:ff:68:f3:82:
                    b1:e4:f5:7d:48:6a:7c:37:ef:63:6f:c6:43:45:6d:
                    48:71:61:9a:e9:35:83:41:95:fb:b8:cf:3d:68:14:
                    a9:4b:7a:56:71:f7:6d:b9:dd:a2:36:d3:ff:f3:81:
                    46:db:4e:5b:44:c4:b9:7f:33:4f:d0:65:42:c8:50:
                    ec:cc:93:ae:f0:31:9c:ae:ac:a1:51:be:81:6c:7e:
                    e3:91:b5:13:e9:f1:cb:a5:85:9e:8c:19:70:71:fc:
                    3a:d4:21:0c:c8:e8:b7:d2:54:ff:7c:d5:8c:1a:d2:
                    97:5b:fd:96:ce:10:78:51:c2:1d:65:48:31:70:06:
                    4c:c0:23:e7:06:b4:b8:64:17:34:b4:e7:5d:bd:71:
                    b0:88:f7:c3:71:9e:29:52:24:39:f3:86:03:87:0c:
                    8b:23:3e:d8:61:76:14:c9:60:fb:36:49:ff:92:61:
                    5e:27:ee:76:b8:36:6e:35:38:2c:90:0f:1f:85:4b:
                    35:ec:b0:3e:fa:f8:06:6d:45:1c:95:75:23:ce:9b:
                    88:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:BE:AF:7C:89:27:05:46:CC:0F:41:44:7D:11:41:7F:1D:00:B0:99
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4pYUfja9aM5WXaFJLvB96469zenRzBcdQmfzxcMJErW9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4pYUfja9aM5WXaFJLvB96469zenRzBcdQmfzxcMJErW9/0/3BBEAF7C89270546CC0F41447D11417F1D00B099.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.124.0/22
                  143.255.76.0/22
                  170.233.224.0/22
                  170.245.24.0/22
                  186.219.216.0/21
                IPv6:
                  2804:ebc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61588

    Signature Algorithm: sha256WithRSAEncryption
         81:56:4c:be:61:17:b8:56:51:e0:00:64:9e:59:6b:34:75:33:
         72:36:da:cb:2a:f8:a5:4c:cc:c6:4a:b2:88:0f:75:df:1a:80:
         03:20:6d:9d:98:9e:e5:8c:59:93:b6:e0:dc:de:3c:fc:6e:a9:
         9e:0f:c0:85:3e:da:2c:d9:c4:b3:b4:d6:a7:0e:dd:18:bc:63:
         0b:1e:bd:58:1f:30:22:be:47:5b:c3:da:da:f8:ca:26:09:ab:
         87:12:19:24:88:a4:3f:b1:b4:cc:31:da:7f:a0:72:fc:78:d0:
         67:87:03:4a:7d:48:f2:22:c7:a3:6f:1e:17:25:b8:7a:15:ca:
         da:01:ff:df:e7:43:d4:96:04:4a:a4:c2:12:b4:8c:4a:a0:bc:
         17:c2:36:6f:7c:aa:7e:fe:28:fa:1c:fb:31:e7:0d:3d:56:73:
         5b:8c:7d:1c:6a:06:3a:ed:c0:fe:a2:ec:62:f0:ab:b4:2f:ff:
         00:c1:d8:04:e6:2d:96:a1:8b:79:5a:f0:7d:ac:29:e3:2f:34:
         bf:3a:5b:8c:81:fb:64:e7:5a:37:e2:f8:e8:de:88:a2:90:17:
         f4:2d:a8:ef:e1:e4:6b:b6:63:4e:48:ee:fc:02:77:a4:ba:cf:
         de:83:67:90:eb:31:a3:9e:58:59:1b:55:1d:62:56:5d:e5:0c:
         19:09:a0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org