Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3DC614D9856D01B3BD4450376CE8C929A7290481.cer
File:                     3DC614D9856D01B3BD4450376CE8C929A7290481.cer (raw, json)
Hash identifier:          3exY66gBkOtVyVqH+O30mfFsNB5moeoW8CH1uS8+HuY=
Subject key identifier:   3D:C6:14:D9:85:6D:01:B3:BD:44:50:37:6C:E8:C9:29:A7:29:04:81
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F11144AF5A346EBEC8E13882CFC3580B53FF4FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3DC614D9856D01B3BD4450376CE8C929A7290481.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Sep 2023 17:12:33 +0000
Certificate not after:    Tue 17 Sep 2024 17:17:33 +0000
Subordinate resources:    AS: 52951
                          IP: 143.0.204.0/22
                          IP: 170.79.164.0/22
                          IP: 177.11.176.0/21
                          IP: 186.250.140.0/22
                          IP: 2804:2928::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:11:14:4a:f5:a3:46:eb:ec:8e:13:88:2c:fc:35:80:b5:3f:f4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 19 17:12:33 2023 GMT
            Not After : Sep 17 17:17:33 2024 GMT
        Subject: CN=3DC614D9856D01B3BD4450376CE8C929A7290481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b8:06:48:ef:07:a2:4c:77:2d:46:dd:13:1d:
                    81:ec:d0:9a:a7:0c:4b:6e:e7:8f:75:b9:d1:62:d5:
                    28:a2:6c:64:52:9d:30:ff:47:c1:f3:cf:b1:78:5f:
                    5c:34:26:02:4d:62:4d:a7:41:d0:7f:a7:98:ca:64:
                    f4:32:ee:7f:cf:88:d4:fb:e2:15:44:e3:0b:ec:0f:
                    bb:75:91:85:93:bc:01:d3:18:01:25:9f:39:17:63:
                    00:fc:0a:60:35:cd:fa:2a:29:45:25:af:b5:1b:e3:
                    05:55:b7:2b:fb:e0:70:e6:c2:ba:04:d9:b0:fa:c2:
                    a6:59:50:c2:ab:7e:b0:33:87:2b:be:61:b2:b9:80:
                    2e:ff:09:1f:4d:8f:2d:65:1a:97:df:0e:69:30:8f:
                    4a:3a:24:87:14:16:1e:14:e9:6e:d9:4b:03:0a:91:
                    83:6b:cb:bf:50:95:e6:06:b7:90:0f:7c:df:de:7d:
                    66:94:4d:95:73:98:e8:b2:13:f0:2a:70:01:e9:04:
                    06:61:aa:9a:7b:60:6f:e4:f2:27:33:db:e6:55:e5:
                    bd:69:68:5b:ec:40:6a:dd:53:0b:65:50:f8:c8:52:
                    a5:e2:91:6f:23:89:83:86:e6:33:4b:e2:8a:a7:52:
                    e7:8e:6b:bf:0d:52:1a:db:6e:07:66:8d:03:6f:be:
                    d7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3D:C6:14:D9:85:6D:01:B3:BD:44:50:37:6C:E8:C9:29:A7:29:04:81
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/0/3DC614D9856D01B3BD4450376CE8C929A7290481.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.204.0/22
                  170.79.164.0/22
                  177.11.176.0/21
                  186.250.140.0/22
                IPv6:
                  2804:2928::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52951

    Signature Algorithm: sha256WithRSAEncryption
         56:e2:56:54:e3:33:6d:80:f3:09:9b:1d:cd:3d:b7:32:c8:00:
         77:e8:2c:8a:73:20:a3:77:f6:37:12:99:a4:10:11:19:2a:ea:
         24:3a:2e:53:18:7c:f5:ec:b7:67:e1:42:bd:ed:04:e3:27:7c:
         02:8c:1a:c8:b1:81:5d:d8:31:6e:50:ba:df:60:ba:79:40:19:
         8c:0e:2d:85:65:43:83:80:18:d4:f2:8c:5b:44:0c:94:cb:63:
         a1:36:90:80:3b:75:16:de:2c:cc:3a:d0:e6:95:64:64:1b:31:
         b3:4e:c2:aa:f7:03:b5:44:63:8a:8c:5b:3e:5d:0f:6e:ac:54:
         bc:38:72:61:f1:cc:7f:19:99:95:a2:2b:53:b7:ae:f8:ec:ee:
         21:5e:27:e2:ef:fa:c3:91:96:c0:9e:35:0a:9d:0e:b9:e5:a1:
         1a:10:9b:23:3c:07:e5:99:05:ac:ec:42:81:a6:ab:49:45:77:
         7e:03:5b:1d:2a:00:63:66:b8:6f:30:a4:4f:e6:aa:63:aa:61:
         78:18:73:23:c0:82:2f:b7:6a:ee:4e:93:13:4f:4f:0d:32:4e:
         54:88:82:fd:71:8c:c0:46:27:c3:e5:a5:5f:e2:1e:8a:0d:81:
         9c:9e:f7:40:49:22:81:3c:ec:e8:5f:53:b6:c2:46:1a:c4:01:
         70:11:21:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:08 2025 by rpki-client