Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3D007F252708D7FCB8DF6212C88805348E3381C2.cer
File:                     3D007F252708D7FCB8DF6212C88805348E3381C2.cer (raw, json)
Hash identifier:          hKxfFEL4CKiZ7xO/M0mwBHF1PXbM/tXqHNsZvk6JZeA=
Subject key identifier:   3D:00:7F:25:27:08:D7:FC:B8:DF:62:12:C8:88:05:34:8E:33:81:C2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2353542E775619B5964A23662BF7219209E9B4AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EBSuCmQesbVxaxjn7Arm3fx4aowZu5jpoL5wSWTxf7Nq/0/3D007F252708D7FCB8DF6212C88805348E3381C2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EBSuCmQesbVxaxjn7Arm3fx4aowZu5jpoL5wSWTxf7Nq/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 27 Jan 2023 14:46:40 +0000
Certificate not after:    Fri 26 Jan 2024 14:51:40 +0000
Subordinate resources:    AS: 270576
                          IP: 189.126.88.0/22
                          IP: 2804:6e1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:53:54:2e:77:56:19:b5:96:4a:23:66:2b:f7:21:92:09:e9:b4:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 27 14:46:40 2023 GMT
            Not After : Jan 26 14:51:40 2024 GMT
        Subject: CN=3D007F252708D7FCB8DF6212C88805348E3381C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3c:84:83:73:f6:21:b7:b2:80:f5:07:e2:dd:
                    3f:a6:a1:70:f6:8b:96:73:32:a8:07:ed:be:55:db:
                    75:37:78:5b:f1:ce:db:19:59:9a:e1:52:05:77:8b:
                    8f:69:d2:eb:2d:c7:10:1e:23:fb:46:b1:67:14:34:
                    4a:69:40:6d:00:89:8d:cb:c8:49:f9:17:13:65:76:
                    d1:46:5f:16:bb:40:f3:0e:e9:f0:89:a9:58:c7:cf:
                    f6:50:36:f2:b9:c5:57:a6:82:e1:36:7a:5c:d9:8f:
                    46:11:f4:4d:90:10:81:30:41:ad:49:11:02:f8:08:
                    92:5a:67:16:55:6a:37:b3:f6:e2:0b:85:e7:59:86:
                    e2:53:1d:f2:2b:15:de:04:a8:df:16:35:58:3a:d0:
                    7f:78:6e:df:fd:dc:ed:a3:37:f2:c2:db:9b:a6:b1:
                    dd:9a:1b:95:92:b3:1d:bf:c0:95:a2:b8:dd:a9:8e:
                    5b:60:79:0c:23:f3:81:e9:12:46:5c:f3:54:99:58:
                    b3:fb:af:62:93:d4:f6:41:f2:af:fd:f1:57:c8:48:
                    ca:18:6a:7a:a8:30:07:c2:02:61:13:78:61:e5:e3:
                    d9:e8:9c:14:2c:68:0e:53:ef:03:c6:e3:4c:11:c4:
                    f3:be:fe:85:a2:39:11:1c:f5:94:dc:ef:4b:2b:10:
                    e0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3D:00:7F:25:27:08:D7:FC:B8:DF:62:12:C8:88:05:34:8E:33:81:C2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EBSuCmQesbVxaxjn7Arm3fx4aowZu5jpoL5wSWTxf7Nq/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EBSuCmQesbVxaxjn7Arm3fx4aowZu5jpoL5wSWTxf7Nq/0/3D007F252708D7FCB8DF6212C88805348E3381C2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.88.0/22
                IPv6:
                  2804:6e1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270576

    Signature Algorithm: sha256WithRSAEncryption
         20:83:5d:90:b9:c0:63:eb:d3:62:d0:52:de:66:4c:17:12:2c:
         12:6d:bb:b9:af:61:db:4e:ab:20:2a:8e:82:18:7a:db:dd:b0:
         68:df:85:cc:a5:39:cd:8a:9c:8e:a5:b9:4f:22:28:93:63:2b:
         d9:8a:85:8a:02:4b:74:db:fd:95:24:9e:99:b8:55:01:4d:fe:
         c9:f1:cd:3e:55:86:61:08:8f:13:9d:b7:9c:90:79:5a:15:2f:
         30:06:5f:df:8e:76:02:d0:a9:b8:b1:6f:bb:b0:4c:d4:e0:3a:
         50:15:ec:8b:ec:c4:52:50:78:fd:29:b9:d9:d6:44:92:06:f5:
         34:4f:d7:d1:8a:76:9a:db:f0:ee:02:d9:1c:7d:e7:b4:b5:76:
         35:3c:11:09:45:09:d2:9c:8f:7b:92:93:97:9e:9a:07:70:91:
         d1:b6:38:32:5f:54:2d:76:89:04:c2:d9:a6:65:8f:3e:57:cd:
         45:6b:70:55:57:56:cb:c8:08:d5:ad:48:c7:07:83:24:4f:ff:
         bf:57:eb:4f:1f:64:73:d1:76:2a:b0:12:f0:12:61:e9:7b:53:
         04:f6:ce:63:d1:a2:84:4d:91:98:aa:f8:7a:8f:af:06:f0:31:
         0e:9e:a3:d1:31:ad:a5:8f:67:63:d7:54:bc:72:83:fe:19:55:
         5c:14:57:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org