Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3CBA4628C5BCEF416B6C50BD9E59EAA9D38112B7.cer
File:                     3CBA4628C5BCEF416B6C50BD9E59EAA9D38112B7.cer (raw, json)
Hash identifier:          Mo92XsOc+t9RX9OGLPI38flOW/mxXY9RqJbKgkKd9L8=
Subject key identifier:   3C:BA:46:28:C5:BC:EF:41:6B:6C:50:BD:9E:59:EA:A9:D3:81:12:B7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       64C682F6D65F45862CEED81A08726BA419626B48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/1/3CBA4628C5BCEF416B6C50BD9E59EAA9D38112B7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Jan 2024 12:03:38 +0000
Certificate not after:    Tue 07 Jan 2025 12:08:38 +0000
Subordinate resources:    AS: 269148
                          IP: 45.180.200.0/22
                          IP: 2804:6024::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c6:82:f6:d6:5f:45:86:2c:ee:d8:1a:08:72:6b:a4:19:62:6b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  9 12:03:38 2024 GMT
            Not After : Jan  7 12:08:38 2025 GMT
        Subject: CN=3CBA4628C5BCEF416B6C50BD9E59EAA9D38112B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a9:6e:27:ab:e5:5f:c2:fd:7e:c7:8f:fe:fc:
                    1e:a0:e3:24:d1:65:af:d9:29:0a:a0:5b:87:69:40:
                    e0:b0:8f:a8:cc:18:a3:6e:49:1f:f0:3a:00:8b:e0:
                    0a:3a:79:57:96:a9:ce:0a:17:98:6b:d5:88:8e:fe:
                    f8:e1:e0:48:88:5b:d0:af:5a:b2:3c:35:a8:ff:41:
                    32:0c:bf:78:8d:6a:c0:d1:7a:51:fc:cb:60:aa:be:
                    1f:36:0b:56:c3:c9:42:fe:6d:d3:d7:ed:d4:e3:51:
                    3a:a0:0e:45:64:17:ae:33:91:9d:49:e0:75:88:04:
                    8c:27:34:aa:9e:80:8e:3f:2a:d9:b8:2a:3b:79:4e:
                    d6:cc:74:63:21:ab:d1:43:3d:4e:49:ba:99:14:06:
                    b0:3a:8e:0d:27:83:71:0d:ab:cf:af:58:d0:b0:1c:
                    35:1e:77:2e:7e:b9:98:86:a2:1b:5b:c4:f3:32:23:
                    25:8b:4f:cb:82:43:64:d7:85:a6:7d:6d:ba:72:fa:
                    05:04:1b:a3:12:66:2d:f8:42:d0:2c:69:ea:aa:1c:
                    de:a2:d3:ef:ae:ab:9d:61:7e:58:0f:66:4d:e7:52:
                    f2:aa:d2:21:b3:4b:ed:1a:cd:42:e3:c0:50:31:1f:
                    19:fc:22:79:3b:7f:e5:32:59:14:6a:e6:da:0c:07:
                    26:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:BA:46:28:C5:BC:EF:41:6B:6C:50:BD:9E:59:EA:A9:D3:81:12:B7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/1/3CBA4628C5BCEF416B6C50BD9E59EAA9D38112B7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.200.0/22
                IPv6:
                  2804:6024::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269148

    Signature Algorithm: sha256WithRSAEncryption
         54:7e:71:da:20:c5:2b:00:66:99:7d:2c:45:ce:78:50:09:f5:
         98:71:52:d4:3d:40:ab:91:2a:71:23:74:48:a0:12:29:8f:3c:
         ab:a3:ba:50:f0:bf:c7:eb:0c:34:f1:4f:da:79:b3:be:b6:1b:
         c9:50:b3:5c:89:c5:8f:38:0d:35:fc:54:d2:ac:81:d9:6f:50:
         bc:64:b0:53:96:8b:dd:2b:89:b5:c7:4e:61:f6:e8:23:29:14:
         47:7a:5c:75:d7:99:6b:84:89:d3:6f:9a:29:e0:8e:d8:4f:52:
         53:eb:8c:a5:77:d6:5a:40:bf:1b:2a:03:14:05:ab:ec:63:be:
         57:6f:23:49:d7:8f:5d:d1:e7:01:bb:6b:c0:6f:a6:03:8e:55:
         41:d8:d0:cd:55:e4:8f:4b:ef:b0:9b:a4:99:76:61:79:1f:42:
         81:89:39:79:76:6d:a5:22:ef:76:ef:91:44:49:d6:f9:97:fc:
         7e:31:12:41:e7:33:c5:22:28:72:cf:84:79:da:f3:21:db:a4:
         11:25:8e:77:30:78:36:3b:52:9a:db:05:61:90:38:83:13:bf:
         7c:8f:a1:81:86:23:20:b7:68:1e:34:41:46:87:e4:78:3d:83:
         41:aa:57:4b:36:e8:4e:b7:df:fb:f4:cc:b1:4c:cd:e7:29:14:
         b5:e8:f3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org