Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA.cer
File:                     3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA.cer (raw, json)
Hash identifier:          ijVyQIUu2p6w7vRSldZT4liJMynwg6ryPOTvWpP7cLA=
Subject key identifier:   3C:11:4E:1D:6E:6D:B8:2E:AD:5D:41:F4:2D:C6:7A:14:53:A4:EF:AA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5CBD39F4EB99FDCE5EC07DCD1D02B649FC09A4FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Jun 2023 13:42:39 +0000
Certificate not after:    Wed 12 Jun 2024 13:47:39 +0000
Subordinate resources:    AS: 262304
                          IP: 177.87.160.0/21
                          IP: 2804:798::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:bd:39:f4:eb:99:fd:ce:5e:c0:7d:cd:1d:02:b6:49:fc:09:a4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 14 13:42:39 2023 GMT
            Not After : Jun 12 13:47:39 2024 GMT
        Subject: CN=3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a5:c4:d1:fc:b3:83:0a:de:1c:e3:a9:da:27:
                    53:6e:84:55:89:35:94:b5:1b:21:a5:4d:41:ca:e4:
                    0d:df:d9:bb:42:c4:26:f6:ba:41:94:d4:6b:89:b3:
                    12:01:d7:2c:83:e3:c3:6b:ce:9a:85:20:be:54:da:
                    85:07:c3:b3:da:d7:8c:2c:d4:4f:8f:96:2f:61:44:
                    fd:80:f8:55:94:7f:ca:70:63:93:8f:b3:d6:85:1a:
                    07:56:e6:2c:ad:ad:be:47:0f:ea:f4:1b:15:70:67:
                    0a:8d:3b:86:29:e1:16:66:28:85:f3:78:2f:91:1f:
                    1a:2a:d9:83:ec:c3:07:e6:4e:8f:87:5d:d4:72:f7:
                    a5:65:a6:7d:2a:1d:8b:e6:2f:c8:75:8e:15:d9:d9:
                    48:6d:dc:d6:88:03:d9:00:17:88:12:d1:12:c1:9a:
                    b3:29:f6:c3:aa:bd:a7:ae:92:56:28:6d:e1:d0:e9:
                    d6:25:11:dd:a1:3d:c9:69:24:a4:7e:dc:6f:c9:b3:
                    4e:b4:57:69:db:3e:ce:50:92:b2:dd:ac:37:d4:89:
                    61:76:89:38:db:f0:b9:0a:8b:24:0d:ca:77:48:76:
                    98:68:50:4f:12:c8:30:e8:4f:76:75:c2:b6:f6:f7:
                    65:0e:4c:aa:e7:76:0c:7d:1a:98:19:e0:f4:98:44:
                    ec:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:11:4E:1D:6E:6D:B8:2E:AD:5D:41:F4:2D:C6:7A:14:53:A4:EF:AA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5HHC2fK9xqQ9CTG2ZhT1curVcpTNnxkFuWzPCeN3VMJZ/0/3C114E1D6E6DB82EAD5D41F42DC67A1453A4EFAA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.160.0/21
                IPv6:
                  2804:798::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262304

    Signature Algorithm: sha256WithRSAEncryption
         33:81:b5:95:cc:39:da:0a:e3:2f:10:32:4b:68:91:ce:94:23:
         12:96:34:0a:a9:d7:d1:2b:7f:68:b9:3c:76:6d:06:28:32:cc:
         70:55:9f:9f:1e:11:59:8f:cc:75:ff:c1:c8:26:89:c1:f2:a0:
         36:82:79:ff:61:1a:41:35:80:e9:80:02:e3:d7:e1:51:fe:a7:
         2a:a9:c3:9b:07:da:2c:fa:d4:51:3a:20:d3:6e:0e:5a:ab:17:
         7a:09:e1:de:d8:b0:ca:d5:f0:57:b7:79:a8:62:fa:e9:5f:09:
         0f:12:c0:39:c5:48:30:75:36:82:ee:ef:13:4f:75:bb:73:0e:
         a8:27:02:44:20:5c:83:6c:f0:7a:65:2f:c0:e6:41:7e:48:a0:
         4a:3c:e3:2f:bf:1d:14:6c:08:e6:68:43:4c:89:88:bf:3d:7c:
         be:8c:c1:88:8b:79:d3:7b:52:ad:f0:1d:19:d0:6f:31:a7:1c:
         16:6b:14:15:25:aa:23:ca:a3:06:6e:f7:ab:e1:b1:28:16:67:
         07:d5:fd:70:46:3c:cd:20:70:77:51:3a:a5:2e:5f:74:cb:ed:
         35:3a:a8:90:87:29:3a:72:9b:ee:10:d5:92:91:51:fd:0f:68:
         e3:0d:38:cd:e3:cb:0e:e1:56:95:95:e5:e6:e1:da:cc:70:82:
         2e:df:e6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:23 2024 by rpki-client on console-ams.rpki-client.org