Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3D64C79AD4F66EF02CD8551B93DF76F078BBB0AB.cer
File:                     3D64C79AD4F66EF02CD8551B93DF76F078BBB0AB.cer (raw, json)
Hash identifier:          JF2BaaEUT9z3QxDUyFPtp7t+t1BQzVu2fUhjthfr/B4=
Subject key identifier:   3D:64:C7:9A:D4:F6:6E:F0:2C:D8:55:1B:93:DF:76:F0:78:BB:B0:AB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4A13087B6E5C242D8A7BFBE19FF2873AAE65FBDD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/3D64C79AD4F66EF02CD8551B93DF76F078BBB0AB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 17:39:08 +0000
Certificate not after:    Tue 03 Dec 2024 17:44:08 +0000
Subordinate resources:    AS: 273321
                          IP: 2804:8ce4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:13:08:7b:6e:5c:24:2d:8a:7b:fb:e1:9f:f2:87:3a:ae:65:fb:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 17:39:08 2023 GMT
            Not After : Dec  3 17:44:08 2024 GMT
        Subject: CN=3D64C79AD4F66EF02CD8551B93DF76F078BBB0AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:5d:43:40:88:5a:74:47:c3:ef:66:ea:df:
                    f8:81:ba:10:45:f9:ca:9a:e0:07:dd:6d:28:f0:88:
                    0c:ac:1d:7c:7b:73:8e:fa:c5:6b:ca:83:e7:c3:bd:
                    4b:f3:ae:a3:51:5c:77:3a:5b:c7:b1:c4:c4:b9:7f:
                    4c:32:28:97:ea:d2:4f:ce:8f:57:32:be:05:cc:83:
                    56:67:62:24:6d:e4:cd:67:ce:4d:3d:c7:0a:d7:f4:
                    48:7e:09:57:c0:02:14:6e:23:5a:7f:a8:a5:2d:49:
                    50:f3:57:d9:7a:e4:b1:af:e1:c3:e5:4f:fd:bc:b6:
                    91:ac:d8:34:fd:cf:e9:95:b7:41:f3:78:e0:26:ab:
                    aa:05:db:b6:8c:79:74:1a:74:0f:e1:31:b6:84:59:
                    18:ba:ef:1c:8b:2f:d6:e9:90:05:aa:e9:6e:ff:51:
                    9c:c8:5e:c4:17:23:44:ba:83:f1:26:74:72:50:15:
                    71:a6:25:13:d1:be:ba:b9:c2:d8:94:28:e5:96:1b:
                    6a:ed:c0:1d:c0:d3:80:ed:2d:0e:e4:45:4a:85:de:
                    e8:80:bc:52:75:92:f7:bc:11:a4:45:6a:d4:7e:13:
                    b2:64:7d:89:4d:c3:fe:77:d0:38:10:d8:93:d6:89:
                    15:6d:c7:bc:ca:5d:fe:99:bf:ec:15:74:36:e3:dd:
                    f7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3D:64:C7:9A:D4:F6:6E:F0:2C:D8:55:1B:93:DF:76:F0:78:BB:B0:AB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/3D64C79AD4F66EF02CD8551B93DF76F078BBB0AB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ce4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273321

    Signature Algorithm: sha256WithRSAEncryption
         78:48:1b:97:b8:ff:96:67:53:df:c4:c5:71:ba:18:70:3f:c6:
         12:8e:3c:82:a2:1f:c0:1b:a5:69:12:81:d6:37:08:db:75:3b:
         d3:3a:42:a2:70:32:c6:c1:6a:cc:f8:f7:ff:a6:95:ca:67:2d:
         a2:d2:63:79:d1:27:61:35:7c:0a:cc:79:0a:ac:46:61:b2:4c:
         67:4a:ff:37:9e:4b:b6:c4:95:28:11:85:42:6a:f7:8d:d8:84:
         de:18:c4:eb:50:59:af:eb:4b:20:6e:b0:9f:24:23:62:9f:b4:
         73:78:21:8c:02:7e:bf:89:bb:35:a4:c0:09:f9:50:b6:5a:3e:
         81:eb:67:cb:d4:5d:6c:d4:08:17:94:b0:3c:10:e9:80:67:6e:
         28:08:c1:3e:c9:46:4c:2a:12:ee:20:13:a7:a0:3c:06:91:19:
         e2:03:81:2b:e8:6c:6a:a9:8f:de:65:a6:70:dd:67:98:63:ae:
         a6:54:9f:5a:98:2e:de:57:c7:0d:a0:ac:e1:0d:20:06:7e:3f:
         ae:5e:22:f1:32:e2:0e:e8:27:b6:bf:d6:e4:b8:79:73:ca:09:
         7f:85:8a:66:fe:c8:87:0e:45:e2:6c:13:e5:65:3c:f4:6d:dc:
         fe:40:11:95:6e:e2:a6:6b:1a:2d:78:cd:f9:1f:38:15:0d:b4:
         ff:11:47:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org