Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3C2271C03325023D009AB674AF80F6446990E2E7.cer
File:                     3C2271C03325023D009AB674AF80F6446990E2E7.cer (raw, json)
Hash identifier:          OVPJoit9upoxox6/Oe70onePlj4RrDNoTfcUAKH8JaE=
Subject key identifier:   3C:22:71:C0:33:25:02:3D:00:9A:B6:74:AF:80:F6:44:69:90:E2:E7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       42AA1B5B1D11DA8C663B14C07595C4540A9C6DA6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/3C2271C03325023D009AB674AF80F6446990E2E7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 05:00:34 +0000
Certificate not after:    Thu 13 Feb 2025 05:05:34 +0000
Subordinate resources:    AS: 262436
                          IP: 177.52.32.0/22
                          IP: 177.52.164.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:aa:1b:5b:1d:11:da:8c:66:3b:14:c0:75:95:c4:54:0a:9c:6d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 05:00:34 2024 GMT
            Not After : Feb 13 05:05:34 2025 GMT
        Subject: CN=3C2271C03325023D009AB674AF80F6446990E2E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0e:70:b9:49:bc:c3:ff:54:c0:67:7c:7a:6b:
                    11:74:76:f7:71:21:7c:00:93:ee:3b:47:31:0d:0c:
                    a9:ad:30:9f:b3:8b:51:ad:70:ce:d4:6f:6b:f4:74:
                    29:ee:1e:92:3f:d3:07:ef:55:99:c4:09:ab:65:35:
                    e4:50:60:4a:7c:7d:08:09:ee:96:91:40:da:8a:7b:
                    b7:24:05:18:3d:5f:c7:24:45:0d:50:51:f1:a7:6a:
                    e7:ec:8c:76:89:45:2a:76:10:4e:6f:01:5d:2e:ab:
                    08:df:b5:5a:af:9f:07:c0:71:f5:7a:8a:01:aa:34:
                    31:e5:16:21:d7:10:6e:50:9e:f6:9f:d5:72:d2:55:
                    06:09:47:64:49:ee:54:29:da:f7:be:ad:a9:86:06:
                    7a:40:95:19:9a:ba:e9:fb:da:49:f4:99:03:1d:ac:
                    a7:22:d0:76:60:5c:90:7f:36:ee:20:50:dc:98:b8:
                    fe:21:1b:c1:2f:52:bf:89:96:9e:81:ef:a3:91:53:
                    3a:42:e4:e3:2d:13:c9:c1:af:46:a8:7e:02:cf:55:
                    05:ed:2c:4d:91:56:48:5c:a7:01:89:91:be:39:04:
                    a0:38:07:29:54:03:83:0f:f8:a9:0a:d5:c0:bd:24:
                    86:d4:3c:8e:b8:b5:bb:d2:2c:44:e5:0c:a7:2f:d9:
                    34:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:22:71:C0:33:25:02:3D:00:9A:B6:74:AF:80:F6:44:69:90:E2:E7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/3C2271C03325023D009AB674AF80F6446990E2E7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.32.0/22
                  177.52.164.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262436

    Signature Algorithm: sha256WithRSAEncryption
         92:70:f9:55:8a:08:f5:f1:a6:80:ea:98:76:ee:97:e0:7a:65:
         9a:d7:2b:ed:a7:48:7c:67:1b:92:73:7f:57:14:04:1e:c0:da:
         2d:ce:f4:bf:96:b3:18:a4:3b:db:ae:ed:9d:95:06:a8:9e:40:
         c3:7b:5d:af:56:70:a2:43:98:71:2f:3e:29:57:83:38:79:0d:
         71:f6:81:13:0c:2a:54:00:a8:48:b8:68:1d:92:5e:9a:89:11:
         26:9a:ab:33:19:cd:a4:f8:69:fc:70:df:23:0d:ac:42:96:aa:
         a5:46:09:71:a9:ff:e7:e3:15:57:0e:6d:f1:e2:18:82:7b:9d:
         65:19:dd:4e:49:b5:8e:d3:69:9b:c0:e0:2d:d2:8c:19:fc:0c:
         f3:11:2e:29:7b:ec:68:c5:ac:8f:ce:d3:1b:3e:66:e0:bd:1d:
         ae:81:36:73:72:99:39:6d:3e:3d:35:53:f7:ae:89:4d:66:e4:
         a0:81:35:5e:23:a5:cf:12:04:c1:0f:22:af:3c:87:92:d8:26:
         b5:cb:b7:9b:ea:52:99:94:56:ae:62:b7:93:60:ec:35:f5:5d:
         5a:10:b1:2d:f3:91:e2:34:5a:ee:b9:46:94:6a:75:05:47:68:
         cd:54:d9:9d:dd:83:13:77:77:ad:71:50:3f:bf:b6:ba:a7:f3:
         30:8b:c3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org