Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5.cer
File:                     3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5.cer (raw, json)
Hash identifier:          s3BqWgYDyWIeJCggsexUR5IyKHFvs8PBHH9UDPtztQE=
Subject key identifier:   3C:E5:9A:22:55:B0:F6:DB:40:FE:D1:C9:7D:0E:B3:93:55:0A:FA:A5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       42CCD28F8868B158347AD17973BC3768F35C1A61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Mar 2024 21:59:45 +0000
Certificate not after:    Thu 27 Mar 2025 22:04:45 +0000
Subordinate resources:    AS: 271599
                          IP: 45.174.196.0/22
                          IP: 2804:7e0c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:cc:d2:8f:88:68:b1:58:34:7a:d1:79:73:bc:37:68:f3:5c:1a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 28 21:59:45 2024 GMT
            Not After : Mar 27 22:04:45 2025 GMT
        Subject: CN=3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:93:5a:74:03:f3:59:bc:00:a1:05:a3:68:8a:
                    37:3d:5b:55:3d:79:ab:49:44:23:d3:5e:3a:bc:c1:
                    eb:c1:5c:30:12:30:cc:9c:22:e9:f6:bb:e4:89:7d:
                    c6:1a:0d:58:1a:e2:98:d9:72:fd:e4:ca:49:16:35:
                    1d:b0:29:57:0f:98:e2:da:53:32:52:8a:3e:c7:75:
                    50:ea:ad:86:89:73:7c:29:0e:14:2c:7d:9b:87:88:
                    0a:4f:ec:fa:bf:0c:9a:c9:99:cb:18:e0:09:71:88:
                    61:8c:0a:3c:df:b4:1d:70:3b:a2:25:84:09:f2:dc:
                    34:53:aa:b7:d5:25:3f:10:b1:2a:ee:9b:ff:e4:6a:
                    c7:86:b0:83:cd:42:07:0d:07:53:b8:db:d2:39:80:
                    95:e1:3b:6f:60:72:30:3c:c2:85:82:f3:f6:7e:0e:
                    23:95:36:a1:d0:e6:2e:81:b5:34:04:5e:83:d9:ab:
                    ab:fb:22:e7:d5:87:30:2d:24:68:6d:8b:9f:b6:81:
                    b7:87:6d:2f:79:19:dd:5c:69:c2:f2:25:8d:62:cd:
                    85:60:90:af:f9:5f:2d:b3:01:92:42:12:fe:30:32:
                    07:17:f9:cb:bd:88:20:ba:04:cb:f8:d1:e9:63:c4:
                    48:58:86:3c:17:69:ae:3c:0d:99:76:9a:e7:7a:77:
                    66:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:E5:9A:22:55:B0:F6:DB:40:FE:D1:C9:7D:0E:B3:93:55:0A:FA:A5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.196.0/22
                IPv6:
                  2804:7e0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271599

    Signature Algorithm: sha256WithRSAEncryption
         20:21:2d:17:7c:ae:e2:57:0c:b7:d7:01:18:c0:ec:71:0b:ba:
         8d:29:f6:b8:d1:f5:d4:58:e2:02:79:3f:32:30:07:d7:22:bd:
         56:ce:e5:96:ad:d1:a9:09:46:3c:9e:d1:31:b2:72:6b:6a:2e:
         85:53:42:48:bd:df:ee:2d:17:44:80:fa:f9:9f:65:46:86:f3:
         66:f9:95:99:9b:ca:79:06:80:76:ce:7f:37:90:4e:f4:d4:63:
         d0:90:b8:af:d8:1f:b0:b1:7b:40:a5:53:c0:13:0c:18:8d:f6:
         cc:7a:37:e8:ce:e8:af:72:56:2a:e4:97:de:5d:db:df:90:ec:
         85:5f:90:9b:99:52:15:94:23:d4:3f:9b:4e:8e:d3:71:8b:43:
         c9:dd:30:ce:0f:35:73:45:ba:01:65:88:36:a8:ce:6c:37:63:
         99:41:b7:9c:63:5f:4b:7e:05:21:ce:ad:d3:aa:33:22:08:45:
         e4:60:64:39:17:fd:3e:25:da:d8:72:2a:ab:58:82:36:f6:dd:
         ca:77:c8:27:cf:0a:4e:e6:bc:96:ea:e7:7a:aa:a9:ac:bc:e9:
         fa:e2:cc:0d:1f:a9:64:1d:e8:2b:fd:99:9a:88:c1:f0:6b:8a:
         09:8d:80:71:77:24:55:a9:cb:9a:f6:45:d3:69:4e:eb:13:c3:
         fa:b8:58:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:38 2024 by rpki-client on console-ams.rpki-client.org