Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3C776B31532492FD7BCB413400F3F842372D17A0.cer
File:                     3C776B31532492FD7BCB413400F3F842372D17A0.cer (raw, json)
Hash identifier:          AvJAWwOt7OwBQj/xzE30b4fGIzA3tzw/wN3fYoB8zCI=
Subject key identifier:   3C:77:6B:31:53:24:92:FD:7B:CB:41:34:00:F3:F8:42:37:2D:17:A0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       20DC923898223B1BCA21A95DCF8C03E8501D2CA8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6US3bqmhAWZaXCkQTtd3zF39RSQ29Gnzh6wLhYEetoqo/0/3C776B31532492FD7BCB413400F3F842372D17A0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6US3bqmhAWZaXCkQTtd3zF39RSQ29Gnzh6wLhYEetoqo/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Jan 2024 02:56:21 +0000
Certificate not after:    Tue 07 Jan 2025 03:01:21 +0000
Subordinate resources:    AS: 269661
                          IP: 45.190.140.0/22
                          IP: 2804:67f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:dc:92:38:98:22:3b:1b:ca:21:a9:5d:cf:8c:03:e8:50:1d:2c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  9 02:56:21 2024 GMT
            Not After : Jan  7 03:01:21 2025 GMT
        Subject: CN=3C776B31532492FD7BCB413400F3F842372D17A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bc:38:97:42:79:ce:30:6c:63:9b:01:62:8e:
                    a9:fc:1c:6b:61:58:59:79:9c:c1:86:a4:50:fe:ab:
                    a2:d6:f3:4e:f2:a1:89:9f:17:1c:4c:ba:68:7e:21:
                    a0:57:9f:0c:dd:1e:cd:fc:aa:5a:d2:12:d9:79:31:
                    a7:a7:9f:31:01:9f:01:82:c3:c8:19:a5:08:d4:f5:
                    60:05:cc:09:ed:7f:c8:08:cf:6c:6d:d8:5d:6f:e1:
                    9c:81:56:de:2f:1f:4b:f9:a8:77:e8:1d:c8:f0:73:
                    df:55:b0:58:60:fa:9f:31:cc:42:3b:cd:07:8b:5e:
                    c4:4f:57:c3:fb:6b:1a:9e:cf:d6:ae:68:c2:83:0e:
                    7b:6a:b6:48:b9:bb:5e:62:d5:48:5a:9c:0b:c3:0e:
                    b4:41:02:8f:1e:67:ff:0b:e7:0c:bb:6a:e0:c7:94:
                    f6:d2:ff:ff:da:a4:dd:fc:52:c9:4b:17:26:0d:33:
                    bb:c0:46:db:5f:91:80:57:3d:b1:1b:18:d8:c6:ed:
                    0b:ed:48:b4:c0:e6:de:a2:cd:a1:78:1a:05:dd:bc:
                    04:cc:df:40:2c:66:7b:27:de:e2:ad:e9:15:79:e7:
                    f5:8e:62:3b:64:e3:05:44:b5:db:bd:15:31:e5:e3:
                    74:b1:ab:74:cf:6d:ec:a5:41:e7:31:53:02:18:ec:
                    23:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:77:6B:31:53:24:92:FD:7B:CB:41:34:00:F3:F8:42:37:2D:17:A0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6US3bqmhAWZaXCkQTtd3zF39RSQ29Gnzh6wLhYEetoqo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6US3bqmhAWZaXCkQTtd3zF39RSQ29Gnzh6wLhYEetoqo/0/3C776B31532492FD7BCB413400F3F842372D17A0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.140.0/22
                IPv6:
                  2804:67f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269661

    Signature Algorithm: sha256WithRSAEncryption
         34:e2:3e:75:11:66:b1:ac:e4:99:63:2c:41:f0:3b:f3:c3:50:
         fe:55:97:94:b8:bb:97:16:6b:cd:de:e3:8a:71:57:b9:52:c2:
         e6:b7:bd:52:f5:f7:6c:b2:77:b8:97:85:30:a0:7e:cb:3a:c5:
         99:1c:a8:10:4f:60:f9:de:8e:62:75:9b:ae:e7:20:f5:b8:ce:
         2c:07:f6:5d:9d:ce:b7:6d:bc:3b:6a:aa:1d:b3:9a:36:2e:46:
         de:7f:94:51:cd:40:91:23:21:b4:f7:05:7a:a1:e3:fb:6c:e0:
         6f:17:73:00:5b:6a:cb:c1:18:d9:45:16:3b:e1:e5:7f:c6:e7:
         47:75:d2:4d:01:c0:0a:2e:c5:09:a4:61:36:85:d3:1d:b8:c9:
         e8:69:82:bf:5b:99:b9:65:30:4a:ab:82:e1:4c:51:34:d0:eb:
         62:97:e0:77:35:7b:bc:89:e7:b9:0e:44:73:70:42:6a:11:7b:
         20:2c:c8:52:03:e9:37:28:2f:19:c2:f5:a9:2e:fb:51:67:9f:
         f7:9b:90:bb:f0:35:89:45:3e:c1:c2:8c:ad:99:3c:eb:26:5d:
         bd:7f:53:12:d6:c5:a2:55:15:1c:fa:58:0c:cc:26:d0:e2:11:
         8c:58:70:85:1a:7a:ab:6b:52:94:d3:ce:14:2c:46:2e:d2:1b:
         ad:92:2a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org