Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.cer
File:                     3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.cer (raw, json)
Hash identifier:          MUwU8ohMJiNboyePZDfFvRwF9yZG4LGhMIlIoEpmgS8=
Subject key identifier:   3D:C4:EF:0A:2B:33:6F:8F:53:61:AC:AB:D8:52:7F:04:BC:5E:D5:C9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1C86D265A3AEB21F7F298887B3DA89AADA13E823
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Jan 2024 21:04:07 +0000
Certificate not after:    Tue 31 Dec 2024 21:09:07 +0000
Subordinate resources:    AS: 265928
                          IP: 131.196.132.0/22
                          IP: 2804:4004::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:86:d2:65:a3:ae:b2:1f:7f:29:88:87:b3:da:89:aa:da:13:e8:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  2 21:04:07 2024 GMT
            Not After : Dec 31 21:09:07 2024 GMT
        Subject: CN=3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:03:8b:e0:54:6c:50:7b:c2:ea:69:c1:8d:87:
                    66:fa:fd:69:cf:4a:f0:9b:66:38:1e:39:c9:c7:15:
                    26:54:8a:ac:b7:61:e1:84:14:e9:6a:f2:58:36:22:
                    6f:27:78:1a:77:6d:14:fd:6d:a4:a9:77:16:e2:de:
                    61:a8:61:b9:1d:16:ed:8b:1c:b2:b5:60:6a:ea:06:
                    b7:fc:1b:28:2f:e0:e6:2f:a5:1f:44:e7:e2:4a:90:
                    71:6a:1f:2e:ba:c6:5c:26:ff:06:80:39:0a:de:43:
                    92:97:ee:5a:2b:00:a3:6d:bb:40:9e:d4:45:15:a3:
                    d8:ea:4c:c8:33:72:9f:61:4c:3f:53:4a:fe:80:e7:
                    5c:67:fc:46:7a:95:c9:b8:e1:73:8f:0c:c5:03:87:
                    01:56:86:d1:6e:1e:44:c4:28:73:25:42:bf:af:74:
                    0a:76:4f:04:69:4d:ac:2f:1d:d0:bf:f7:1e:71:72:
                    ca:6d:06:83:b6:ac:9c:62:4c:ff:ed:19:56:89:79:
                    a7:f5:56:cd:62:cb:1f:ee:32:a2:48:92:94:2c:fe:
                    6f:09:f6:a4:29:88:9f:81:6d:7a:2d:2c:89:76:0f:
                    21:08:fc:31:08:4b:65:87:cd:49:05:a9:b2:e6:53:
                    06:b4:14:97:c7:36:1a:cb:44:27:77:f1:95:01:9e:
                    57:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3D:C4:EF:0A:2B:33:6F:8F:53:61:AC:AB:D8:52:7F:04:BC:5E:D5:C9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/3DC4EF0A2B336F8F5361ACABD8527F04BC5ED5C9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.132.0/22
                IPv6:
                  2804:4004::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265928

    Signature Algorithm: sha256WithRSAEncryption
         34:34:43:c0:1b:c8:91:6d:67:62:98:c9:d9:55:aa:df:f7:23:
         a6:cd:59:c5:01:3f:01:f3:80:14:af:97:fb:d0:42:cc:e4:e0:
         b9:47:01:c2:a6:24:fe:1a:7c:a0:cb:81:76:f2:90:b9:38:0c:
         f4:88:c2:59:57:3a:a5:01:9a:09:31:75:fe:91:2b:48:c4:ef:
         9d:92:6e:a6:b8:14:1d:df:f6:b8:2a:40:b3:fd:2d:40:31:9b:
         27:3c:51:7c:8f:3d:52:d1:b3:e5:97:7e:ed:98:4d:1e:53:a4:
         d7:f9:78:9c:21:10:d1:60:77:41:dd:1a:31:b0:9d:8a:9c:4e:
         14:e8:e3:6d:85:1a:0d:19:32:53:81:54:76:0b:bf:1e:76:46:
         2b:af:9b:2c:b1:42:04:99:fc:c8:75:d3:dc:39:3e:ee:0e:3f:
         a8:9c:5a:9d:44:6a:24:73:0a:38:c4:94:91:07:f2:92:72:be:
         36:7d:7d:d6:cd:a6:84:0b:d0:bd:e5:80:34:e0:ce:10:0f:5c:
         36:a0:13:39:4e:73:5c:0e:f1:ab:cc:75:c3:fb:2a:e2:51:d4:
         94:1d:b9:0b:f3:bc:5b:e7:02:ae:48:b9:c7:a1:dc:d8:9e:8e:
         d9:f7:06:fb:25:39:05:16:45:5c:80:93:a4:cf:f5:ac:1a:36:
         05:73:8c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org