Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.cer
File:                     3BC3484DBFF02B8671B397AA4277D6C416FABF7B.cer (raw, json)
Hash identifier:          80guoJOZ9+SSLdRph38gDQbA1akBipos47L6PjkweFE=
Subject key identifier:   3B:C3:48:4D:BF:F0:2B:86:71:B3:97:AA:42:77:D6:C4:16:FA:BF:7B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E825165AFD6634063AB4897D99663F5C925535E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 23:13:48 +0000
Certificate not after:    Thu 11 Jul 2024 23:18:48 +0000
Subordinate resources:    AS: 268364
                          IP: 45.238.240.0/22
                          IP: 2804:5004::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:82:51:65:af:d6:63:40:63:ab:48:97:d9:96:63:f5:c9:25:53:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 23:13:48 2023 GMT
            Not After : Jul 11 23:18:48 2024 GMT
        Subject: CN=3BC3484DBFF02B8671B397AA4277D6C416FABF7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:d0:1b:86:b3:26:ef:11:e7:a9:78:05:94:
                    72:6c:2a:c6:94:7c:b7:2f:d8:23:2d:7a:15:03:c2:
                    6b:9a:8c:75:1f:10:ee:97:c2:6c:fd:18:2d:b9:85:
                    75:69:a1:84:bb:01:29:3f:df:f6:4a:32:19:06:b8:
                    29:b7:ea:7d:1e:f7:f5:d5:c5:93:31:47:12:3b:b6:
                    4c:fb:cc:f8:0e:f8:ec:a6:c2:7d:77:1d:7b:41:80:
                    53:b6:75:9d:be:b5:ce:e6:45:bd:f3:16:e0:0c:09:
                    c1:a5:93:91:58:9a:c2:74:4e:39:4a:8f:59:bb:68:
                    0d:cc:c0:69:c6:d2:29:47:b8:22:9e:c1:56:1d:0e:
                    d1:08:11:49:2c:4e:24:0a:0e:31:54:31:3b:8e:60:
                    b5:23:bf:61:08:bb:9f:5a:47:0a:ae:78:59:f0:7c:
                    a9:b6:79:f7:1f:cd:ce:0f:2b:1d:e5:f2:af:38:14:
                    79:54:15:5b:0e:52:43:27:7f:2f:4c:0d:9d:a4:37:
                    55:83:04:a8:43:56:e2:85:90:81:5a:d1:73:cd:4e:
                    a3:1b:63:85:ed:65:93:be:fd:c6:ff:e9:87:82:1c:
                    34:0b:98:c5:aa:a5:54:b8:5c:e4:ef:cb:8b:43:8c:
                    41:3a:04:9e:56:1b:3e:b8:86:7c:10:c7:34:a2:6a:
                    2b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:C3:48:4D:BF:F0:2B:86:71:B3:97:AA:42:77:D6:C4:16:FA:BF:7B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.240.0/22
                IPv6:
                  2804:5004::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268364

    Signature Algorithm: sha256WithRSAEncryption
         21:ca:e9:9e:f5:6c:a7:9c:b9:69:2a:d1:8f:ec:da:bc:6e:45:
         79:7b:ce:95:e5:ea:93:5a:2b:72:b8:7a:17:bc:cd:6a:0f:56:
         eb:6e:a3:c3:ad:ed:81:d9:d4:ce:9b:82:3f:8d:06:8f:e3:6b:
         f7:92:c0:c2:3e:43:9b:ac:d7:e9:01:4d:13:f9:e8:87:ca:2a:
         99:3f:52:79:4f:ba:4e:76:89:f2:af:e5:c4:ac:f4:5e:d6:85:
         ec:7f:b8:7f:17:56:c9:ac:c8:6e:6e:87:96:7d:b9:f7:af:f4:
         ab:8f:46:03:99:5b:1d:1b:cb:17:b3:0a:b8:09:68:e6:04:5e:
         d8:a6:06:8a:10:ad:b7:94:d3:c6:d8:19:a8:7e:08:fe:3c:d8:
         74:2a:68:7b:10:1b:36:8f:35:69:d8:92:c1:c0:98:1e:5c:04:
         29:2d:ed:3f:4a:8f:24:1a:9b:40:51:50:98:f9:ca:fb:a6:8f:
         09:82:34:6c:09:78:2b:06:b7:a5:f6:8c:58:38:62:3a:54:1e:
         de:66:b2:6a:9f:4d:b1:7b:14:d0:e3:67:56:60:e9:fb:cf:10:
         15:37:0e:bc:db:7b:c5:34:06:a8:5c:07:8a:0b:e5:61:67:45:
         7f:b2:96:e5:df:d6:6f:52:c9:79:5b:59:1c:dd:57:61:e1:7c:
         bd:ca:5b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----