Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3C4C3C3027D89C77D47071FA8A930915BA89BC2C.cer
File:                     3C4C3C3027D89C77D47071FA8A930915BA89BC2C.cer (raw, json)
Hash identifier:          82X9coP0Pdi3D6flUraz5qiK9X/m1hzwIJielz662T4=
Subject key identifier:   3C:4C:3C:30:27:D8:9C:77:D4:70:71:FA:8A:93:09:15:BA:89:BC:2C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       66FA348D74488AC6DC254F834F5B121B3733D6AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3C4C3C3027D89C77D47071FA8A930915BA89BC2C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 May 2023 15:18:42 +0000
Certificate not after:    Wed 29 May 2024 15:23:42 +0000
Subordinate resources:    AS: 263098
                          IP: 167.249.180.0/22
                          IP: 186.208.252.0/22
                          IP: 186.233.92.0/22
                          IP: 2804:176c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:fa:34:8d:74:48:8a:c6:dc:25:4f:83:4f:5b:12:1b:37:33:d6:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 31 15:18:42 2023 GMT
            Not After : May 29 15:23:42 2024 GMT
        Subject: CN=3C4C3C3027D89C77D47071FA8A930915BA89BC2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:84:bb:ab:59:0f:eb:46:3b:cf:99:4f:d0:41:
                    78:d2:1d:db:c2:15:ec:2c:87:b8:c1:b4:63:30:bc:
                    3e:a7:67:75:ed:41:7a:b6:a1:57:c3:8b:f7:ca:01:
                    1a:cc:07:49:e9:14:2f:a5:9d:d2:89:65:b6:a3:40:
                    81:71:cc:1e:cb:d1:bc:43:be:40:3c:91:2c:8a:c4:
                    07:cb:dc:3d:76:bd:e0:32:ad:66:f8:29:81:c1:81:
                    e2:9a:93:6c:0a:9d:9c:71:1c:8a:b5:07:98:b8:34:
                    cc:1f:58:b9:e7:40:36:7a:15:e6:fb:14:1f:2a:c9:
                    ad:14:60:be:ce:71:1d:dd:dc:b2:46:9c:23:d8:fd:
                    50:af:e2:36:c7:dd:65:52:31:92:aa:a5:99:67:0d:
                    42:f6:fc:c3:b1:af:54:d3:ca:b7:45:68:10:e1:cf:
                    ce:a6:dd:66:0f:f4:f0:89:85:f1:81:8b:50:e3:a9:
                    1d:a5:03:4e:8c:b4:7e:13:8b:a8:64:45:c1:29:78:
                    6b:ce:10:e7:36:ec:b3:a5:04:d4:6e:03:cc:b2:c2:
                    c6:ed:b1:59:03:8a:a6:86:f3:1a:89:f4:e8:69:56:
                    4f:71:e7:54:c8:30:0c:25:80:8a:d1:82:a0:87:f2:
                    25:b8:93:87:d3:bf:b5:1c:28:fc:8c:2c:87:cb:f7:
                    47:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:4C:3C:30:27:D8:9C:77:D4:70:71:FA:8A:93:09:15:BA:89:BC:2C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3C4C3C3027D89C77D47071FA8A930915BA89BC2C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.180.0/22
                  186.208.252.0/22
                  186.233.92.0/22
                IPv6:
                  2804:176c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263098

    Signature Algorithm: sha256WithRSAEncryption
         71:8a:e1:8d:cb:7b:e5:14:bb:3f:86:d7:43:8d:78:c2:ea:e7:
         50:67:25:39:95:d6:75:62:5c:46:55:be:e5:cc:5b:62:32:58:
         73:22:77:7c:c8:8b:2a:d5:66:f8:84:0b:89:1f:45:b1:34:35:
         87:0a:2f:d3:73:29:04:9b:3f:6e:fd:6e:f1:25:47:07:8c:55:
         59:1d:1c:7c:26:a1:7f:7c:f6:97:94:18:52:67:f1:21:c9:bd:
         42:8d:94:bb:7b:34:85:e2:42:07:39:ef:3f:d1:08:e8:38:86:
         30:db:57:e1:4e:53:ce:9b:ed:bc:29:47:08:f5:69:b2:ec:eb:
         aa:35:00:5b:c2:60:4a:41:07:ad:15:f7:10:49:5d:49:cb:80:
         0e:b5:0c:ed:d6:be:b4:2b:61:24:09:ae:bb:7b:7e:3c:1f:ae:
         ac:aa:7f:3f:1c:c4:02:3f:65:a6:10:37:fc:03:cf:8a:18:cb:
         c6:48:b9:f3:d6:3d:0b:b1:0c:c8:1a:34:60:23:ca:eb:4a:11:
         0d:fb:af:c8:27:d3:2a:4c:c7:73:13:b6:c9:3a:e4:4d:f5:74:
         2a:29:18:ff:db:a8:44:85:b6:35:66:dd:e6:93:3b:be:fd:5b:
         64:60:37:5e:3b:31:f7:52:51:11:fb:8a:5f:87:4f:9a:c0:7c:
         4a:a2:46:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org