Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3D779AB35CC6BE200E79F54A92CC6D9A5C0AFB3D.cer
File:                     3D779AB35CC6BE200E79F54A92CC6D9A5C0AFB3D.cer (raw, json)
Hash identifier:          7lyFyI/o7Gb72JFUyivbpxKgj0zB0PLBA6KvvW3FW9k=
Subject key identifier:   3D:77:9A:B3:5C:C6:BE:20:0E:79:F5:4A:92:CC:6D:9A:5C:0A:FB:3D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E1AD346C5C09DAE8F1CE9A1DEAD84F811928D80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3D779AB35CC6BE200E79F54A92CC6D9A5C0AFB3D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 19 Mar 2023 14:17:26 +0000
Certificate not after:    Sun 17 Mar 2024 14:22:26 +0000
Subordinate resources:    AS: 264130
                          IP: 138.97.60.0/22
                          IP: 2804:22e8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:1a:d3:46:c5:c0:9d:ae:8f:1c:e9:a1:de:ad:84:f8:11:92:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 19 14:17:26 2023 GMT
            Not After : Mar 17 14:22:26 2024 GMT
        Subject: CN=3D779AB35CC6BE200E79F54A92CC6D9A5C0AFB3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:66:fb:54:8a:07:f7:85:4f:08:92:a5:7b:31:
                    1e:5b:74:c7:68:2a:a7:43:36:14:b6:b8:3d:e6:75:
                    53:01:d9:3e:d0:c3:1f:94:3f:88:fc:a9:dc:97:7e:
                    e3:1a:a6:c1:32:eb:72:b1:4c:ac:a5:b1:d1:8f:c5:
                    32:1b:83:ae:ab:bf:72:b3:3c:54:d0:59:38:dd:bd:
                    b1:37:d4:50:73:c1:46:e7:39:37:27:6d:08:e0:19:
                    7c:e9:ed:07:3d:ca:03:54:6b:3d:60:58:77:45:9f:
                    3e:cf:d9:56:7b:14:52:6b:e4:2a:50:ba:7a:b0:7f:
                    1e:70:41:3e:39:97:d1:41:e3:9a:5e:28:0b:e2:f2:
                    d2:a7:17:dc:f6:48:13:5e:0d:45:29:71:90:6d:18:
                    2d:b5:19:b1:9c:d0:9c:be:c5:a7:f0:e2:19:e5:ff:
                    8a:d7:ac:51:85:6f:f4:c9:02:06:b8:5a:12:cd:88:
                    a9:a9:e4:21:57:00:61:99:fc:69:14:15:a3:ab:3e:
                    86:7c:61:49:af:ea:79:d2:f2:f0:18:29:f6:5d:f4:
                    16:79:f8:9a:e9:db:58:b7:12:b9:ad:42:db:41:5f:
                    79:8c:c0:95:45:03:91:09:72:44:ef:91:54:c9:48:
                    ec:63:eb:c9:66:1c:18:03:12:04:69:13:6d:88:0f:
                    7b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3D:77:9A:B3:5C:C6:BE:20:0E:79:F5:4A:92:CC:6D:9A:5C:0A:FB:3D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3D779AB35CC6BE200E79F54A92CC6D9A5C0AFB3D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.60.0/22
                IPv6:
                  2804:22e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264130

    Signature Algorithm: sha256WithRSAEncryption
         89:96:91:1e:c6:73:71:ad:c4:58:16:42:df:3c:88:9c:aa:8f:
         e5:48:0d:b3:c0:c9:4c:83:f7:7a:5f:2d:ab:9a:f9:c6:1b:5b:
         62:8b:95:90:fa:74:0e:70:6f:d7:76:af:d9:f8:8e:0b:6a:29:
         8c:e5:81:a8:05:f6:b3:50:35:bd:d4:08:78:2e:ff:c7:94:01:
         19:41:6e:61:83:a7:ce:f5:9e:83:8d:a3:7f:b2:87:a6:8d:0a:
         61:32:c3:27:bd:31:77:a9:b7:0e:54:92:59:7a:70:26:de:02:
         e2:dc:e0:e4:07:0c:98:34:08:76:63:c9:a2:54:49:66:ee:33:
         ea:9c:8a:6c:31:2b:6e:1d:db:04:00:c4:0c:1b:d2:ab:03:2c:
         cb:15:3a:5b:5d:0b:6a:45:ed:42:80:df:fc:39:0c:d8:59:a3:
         51:a0:d3:95:b0:82:59:9a:70:20:e7:67:5e:25:51:1b:0c:7b:
         9a:bd:3b:b1:6d:b7:d3:1f:c4:c7:9f:72:59:9d:44:6a:ad:9c:
         05:18:fe:3f:63:ef:f7:0f:b9:67:1c:56:1b:34:06:d9:ce:d1:
         aa:d2:31:9d:1c:95:31:22:19:3e:cc:a2:72:e5:16:81:cc:6e:
         6d:ea:65:8f:28:25:3c:68:d1:55:e9:4d:23:50:44:0e:cf:b3:
         b0:e5:25:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:58 2025 by rpki-client