Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3DDCE25111940B746EFDCBF0F3DC3E23EF917239.cer
File:                     3DDCE25111940B746EFDCBF0F3DC3E23EF917239.cer (raw, json)
Hash identifier:          qgDEbYRu3TpQslmPeDXEaPBj9Q5n2je7XS6NuVjkrl8=
Subject key identifier:   3D:DC:E2:51:11:94:0B:74:6E:FD:CB:F0:F3:DC:3E:23:EF:91:72:39
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       60BEFABC91377B48AA8570D82A15CAB7C608FFC2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/3DDCE25111940B746EFDCBF0F3DC3E23EF917239.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Apr 2024 19:31:13 +0000
Certificate not after:    Tue 01 Apr 2025 19:36:13 +0000
Subordinate resources:    AS: 269213
                          IP: 45.182.24.0/22
                          IP: 2804:611c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:be:fa:bc:91:37:7b:48:aa:85:70:d8:2a:15:ca:b7:c6:08:ff:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  2 19:31:13 2024 GMT
            Not After : Apr  1 19:36:13 2025 GMT
        Subject: CN=3DDCE25111940B746EFDCBF0F3DC3E23EF917239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:0f:ae:7f:cc:81:ef:25:e5:2c:f8:49:0e:
                    4f:0d:a5:75:65:5f:aa:24:9f:88:84:a7:62:73:88:
                    13:be:8a:9d:09:c6:23:ff:1e:3b:a3:88:98:e5:29:
                    8e:61:f8:d6:6b:0c:50:b0:09:78:cc:98:e4:69:cc:
                    c8:7d:46:02:90:65:95:ac:0f:eb:91:ed:25:63:61:
                    00:38:14:37:6b:db:48:65:2b:d0:54:8e:a8:2e:1f:
                    63:d1:06:34:cc:10:73:df:1d:31:ee:7d:40:50:0c:
                    a1:33:b9:c4:64:e4:43:c0:0b:d6:aa:74:a0:d2:18:
                    b9:2e:b8:39:53:f6:56:37:75:a1:13:e4:6d:98:e2:
                    e8:fb:53:58:04:c4:fa:09:c4:63:45:e0:0c:8a:c7:
                    a2:5b:c2:7f:f7:2a:26:26:9e:59:1c:b4:36:f8:11:
                    26:71:ef:89:a1:0a:a9:e2:10:c3:5c:e2:9c:f2:ad:
                    80:e5:08:fa:da:5f:69:30:a3:f9:49:37:31:9f:ec:
                    dd:46:87:c2:44:38:56:67:e1:cd:39:8b:af:94:c9:
                    8b:a4:c4:5e:3a:ef:44:3c:b3:3c:53:c1:80:9b:64:
                    be:60:7d:35:d2:76:b6:02:15:a3:d9:c7:69:0f:d6:
                    8b:e0:a8:f7:95:8d:55:c2:41:4a:63:62:18:90:47:
                    df:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3D:DC:E2:51:11:94:0B:74:6E:FD:CB:F0:F3:DC:3E:23:EF:91:72:39
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/3DDCE25111940B746EFDCBF0F3DC3E23EF917239.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.24.0/22
                IPv6:
                  2804:611c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269213

    Signature Algorithm: sha256WithRSAEncryption
         85:9c:b5:49:25:8b:c1:0a:79:f6:ed:52:3c:ce:63:9e:a7:dd:
         ab:41:3f:50:f2:49:72:89:69:ee:9f:62:38:a2:44:ae:42:a0:
         74:27:10:bf:31:d0:20:2a:2d:b6:ea:8e:8d:42:db:c2:ff:27:
         10:99:56:1b:ed:fe:55:d0:33:9a:22:19:cf:f2:10:d4:a0:86:
         9f:d1:3e:3f:5f:db:c7:dc:c2:58:32:15:11:ed:ac:5e:90:a9:
         8f:02:b9:0a:2d:bc:b2:bf:10:38:a7:33:3f:30:2e:28:8e:ba:
         6a:a0:c4:4e:a3:26:bf:21:0e:88:b3:3e:2f:65:05:b2:17:2d:
         a9:7d:1d:32:a7:80:ed:ce:b8:35:18:cd:20:89:00:16:0e:3c:
         8f:3d:05:37:f8:c0:26:10:40:10:dd:38:75:c4:26:c3:11:0b:
         d9:d3:c4:47:fc:e6:21:13:86:1e:51:a3:c3:e0:9a:80:7e:14:
         f5:88:eb:f4:6a:26:57:72:24:62:5f:dc:01:73:f9:48:66:a3:
         1c:db:d5:df:6f:ea:b0:d6:96:e9:58:01:17:0b:de:ab:3e:ee:
         95:35:77:02:56:8d:09:75:2d:80:b6:67:47:41:ff:52:44:ae:
         61:20:20:44:30:ef:b9:17:f0:df:83:f3:70:96:22:dd:a4:3f:
         e5:fd:d9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:38 2024 by rpki-client on console-ams.rpki-client.org