Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3C4101973F3741AA7FD920C82809162B188C085A.cer
File:                     3C4101973F3741AA7FD920C82809162B188C085A.cer (raw, json)
Hash identifier:          5CDo9SWyaOMWthXP34ndgoxhLbVCwmkZsQq4UZTEV9w=
Subject key identifier:   3C:41:01:97:3F:37:41:AA:7F:D9:20:C8:28:09:16:2B:18:8C:08:5A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7DD955286417DD46692F239AE5CD33801851A26D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3C4101973F3741AA7FD920C82809162B188C085A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Jul 2023 15:37:07 +0000
Certificate not after:    Wed 24 Jul 2024 15:42:07 +0000
Subordinate resources:    AS: 262659
                          IP: 177.185.224.0/20
                          IP: 179.127.48.0/20
                          IP: 186.193.64.0/19
                          IP: 187.1.64.0/20
                          IP: 187.85.0.0/19
                          IP: 200.52.16.0/20
                          IP: 201.33.240.0/20
                          IP: 2804:58::/32
                          IP: 2804:e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d9:55:28:64:17:dd:46:69:2f:23:9a:e5:cd:33:80:18:51:a2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 26 15:37:07 2023 GMT
            Not After : Jul 24 15:42:07 2024 GMT
        Subject: CN=3C4101973F3741AA7FD920C82809162B188C085A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b7:b5:37:af:7e:a4:d3:44:99:57:54:bd:b0:
                    3b:9e:10:be:e5:eb:06:3c:06:89:9c:37:71:34:0e:
                    83:24:78:d5:81:96:e3:80:3d:fe:16:62:e9:78:50:
                    ec:2d:41:3a:f7:ad:7e:58:af:55:af:b6:f4:db:3b:
                    da:fc:a8:ba:3e:d7:70:f6:9b:37:54:e1:42:3f:fa:
                    42:74:41:c6:7a:ba:8e:3c:16:c2:4b:0f:98:dc:8b:
                    03:34:76:b0:07:94:a2:05:00:10:7c:0f:d0:9a:59:
                    9d:15:d6:c5:55:68:47:29:dd:95:e5:c3:73:e3:f2:
                    38:39:42:67:4e:e8:52:06:ea:85:b1:e2:69:33:22:
                    fe:89:92:d5:cb:ab:e7:55:42:51:a3:23:f9:b1:ab:
                    3c:fa:76:f3:de:65:9b:f4:0b:01:c2:89:21:25:ea:
                    db:a0:59:4a:27:27:85:4b:f7:55:c2:89:a9:a0:8e:
                    fe:4f:08:f2:c9:af:51:4a:00:bc:36:91:53:ec:e0:
                    f1:0b:f9:66:eb:2c:df:e8:1d:d7:51:48:4c:32:b7:
                    7f:7e:50:a4:8f:6d:d8:12:7e:67:c6:b5:61:a9:63:
                    b8:2e:15:40:7a:9e:5c:ad:7c:46:8b:a2:62:0f:25:
                    ef:56:a3:63:c9:0c:2e:54:6c:d5:4a:1b:fd:a9:e0:
                    99:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:41:01:97:3F:37:41:AA:7F:D9:20:C8:28:09:16:2B:18:8C:08:5A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3C4101973F3741AA7FD920C82809162B188C085A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.224.0/20
                  179.127.48.0/20
                  186.193.64.0/19
                  187.1.64.0/20
                  187.85.0.0/19
                  200.52.16.0/20
                  201.33.240.0/20
                IPv6:
                  2804:58::/32
                  2804:e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262659

    Signature Algorithm: sha256WithRSAEncryption
         46:f4:51:e8:b5:e1:73:52:ce:2c:fc:99:7b:90:8d:3c:52:d5:
         27:0b:6e:11:4e:36:57:9e:67:9d:3d:88:aa:77:e5:04:31:d6:
         5a:61:50:f8:da:20:6e:fa:d0:22:66:5e:07:69:8b:16:ab:76:
         05:77:49:71:db:39:12:e0:d6:4c:e8:5d:01:17:9a:ee:67:a2:
         55:6b:47:a1:dd:4d:47:5c:ea:7d:53:4f:13:d9:ed:4d:31:a0:
         22:ac:56:f3:95:47:c4:3e:8b:3b:68:3f:08:bf:28:7d:ba:ef:
         4e:d2:8b:0d:dd:9b:88:49:12:58:96:01:b3:f9:f3:fe:3e:ac:
         d0:44:eb:ae:bd:f6:10:23:03:32:6a:6a:a5:d6:13:25:1a:be:
         c8:f6:58:27:f0:10:35:87:3d:ac:e6:7d:e3:73:85:e7:78:b6:
         5a:68:55:56:ec:0b:36:39:3a:dc:03:c4:d9:4a:2f:0e:ee:7f:
         6e:69:a8:8a:4c:da:77:44:a5:0f:e2:b2:64:54:42:5c:8f:56:
         2a:c2:d5:15:8f:a3:5e:f6:2a:d3:6b:85:60:15:54:f2:21:4b:
         56:35:c1:bf:d8:48:f0:de:e8:e6:a2:16:8d:db:88:29:b9:8b:
         46:77:c9:c2:ad:79:ee:3e:4e:48:f2:0a:6f:9c:8a:d2:5b:cc:
         7a:5c:38:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org