Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3C56226A2217A64211E52D9EA9527FAAF1587160.cer
File:                     3C56226A2217A64211E52D9EA9527FAAF1587160.cer (raw, json)
Hash identifier:          /q15LwjiJd4cXGl2sztxO8c3/BMP1Ao7eJWep53zjRI=
Subject key identifier:   3C:56:22:6A:22:17:A6:42:11:E5:2D:9E:A9:52:7F:AA:F1:58:71:60
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       11382A398ACD671B00F22A8AE34095C77E771BCE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/3C56226A2217A64211E52D9EA9527FAAF1587160.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 18:49:14 +0000
Certificate not after:    Tue 28 May 2024 18:54:14 +0000
Subordinate resources:    AS: 269258
                          IP: 45.183.28.0/22
                          IP: 45.239.140.0/22
                          IP: 2804:61d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:38:2a:39:8a:cd:67:1b:00:f2:2a:8a:e3:40:95:c7:7e:77:1b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 18:49:14 2023 GMT
            Not After : May 28 18:54:14 2024 GMT
        Subject: CN=3C56226A2217A64211E52D9EA9527FAAF1587160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cc:14:03:c2:b2:44:5a:a5:c1:64:e0:13:95:
                    02:94:cf:54:08:31:e5:38:c0:f3:e0:e8:f7:45:db:
                    c9:67:fc:61:82:b5:81:bc:1d:ba:a1:fb:c8:59:fb:
                    75:c2:74:b9:b0:8a:0d:41:84:0d:7c:21:d4:57:f6:
                    3e:58:b2:58:b1:ab:f5:67:36:6c:eb:a8:27:51:9c:
                    38:4b:9c:28:7b:11:6a:6a:81:58:83:0c:c9:b0:7d:
                    0d:be:71:a3:2c:f7:57:2b:0c:97:a4:5a:11:62:65:
                    ee:15:98:f3:22:3c:da:7c:40:24:d8:7b:5c:d0:77:
                    d7:48:c1:fa:6c:8c:83:e7:30:53:d9:16:6c:91:1b:
                    01:27:31:44:1d:60:11:de:7b:f5:6c:84:7d:27:aa:
                    d4:89:95:6b:05:93:10:11:fb:be:d2:18:47:01:03:
                    75:d2:9e:e6:fd:b5:46:8d:90:e1:62:a3:4e:79:de:
                    42:f9:a1:0e:7f:24:ef:74:af:af:78:af:ac:a3:6e:
                    5c:48:fa:2e:b2:26:60:4b:20:78:cd:a3:04:3a:51:
                    c9:42:b8:7e:cd:66:65:5c:b0:85:4d:22:29:93:3d:
                    5a:1c:3b:93:97:3a:f1:58:3c:f8:e1:cf:08:f4:ce:
                    1c:f1:7d:71:a9:8e:1d:2a:03:e3:52:6e:df:a1:44:
                    ad:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:56:22:6A:22:17:A6:42:11:E5:2D:9E:A9:52:7F:AA:F1:58:71:60
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/3C56226A2217A64211E52D9EA9527FAAF1587160.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.28.0/22
                  45.239.140.0/22
                IPv6:
                  2804:61d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269258

    Signature Algorithm: sha256WithRSAEncryption
         40:fe:5e:7f:8a:76:92:d7:fd:f8:73:98:4a:2b:b0:b4:16:7a:
         85:ea:d7:85:2d:11:e8:e0:f6:cb:0f:a7:07:41:3e:27:00:b7:
         5b:34:d3:34:57:cd:5c:aa:c0:27:96:98:4e:6c:fe:3c:5b:c5:
         e2:af:94:71:a6:6a:0f:31:c8:74:ad:61:cb:08:89:86:02:4b:
         be:ec:8c:71:2b:b8:bc:04:ad:64:ba:39:e6:89:f4:6e:f5:3b:
         dd:e0:0f:2b:28:55:d9:39:be:ff:d5:37:f8:b1:0e:f0:8c:89:
         87:e6:72:08:c4:40:3c:d2:2d:e1:98:d5:b3:86:00:a3:0a:7d:
         dc:dc:b0:28:1c:52:c2:e4:5f:ba:f7:b5:d4:49:f9:84:8f:38:
         5f:51:47:35:d7:f0:9a:c8:59:aa:f2:21:cc:5c:1c:b8:f1:32:
         52:51:89:40:bb:bd:6b:b6:f6:44:38:4d:39:b6:97:bb:1f:2a:
         c1:6d:0f:72:ff:47:d4:ab:4c:30:fe:81:05:6a:85:95:0f:db:
         38:af:51:21:f6:fe:7d:06:b9:a7:79:11:d7:6a:a7:3b:0f:ea:
         07:d5:89:6d:a5:a7:bd:0a:63:a0:c4:35:6f:c3:f7:0f:92:a0:
         d3:2a:3d:b6:cd:6c:f0:81:57:57:e9:01:7f:50:11:62:25:91:
         b5:27:2d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org