Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3E22537BD7B9DCBFA49ACBD859EC4F5CC5D92B04.cer
File:                     3E22537BD7B9DCBFA49ACBD859EC4F5CC5D92B04.cer (raw, json)
Hash identifier:          E7w6muJz6RC6HVZ4+fWTY1kANczLj2QfalVnPfTXiZw=
Subject key identifier:   3E:22:53:7B:D7:B9:DC:BF:A4:9A:CB:D8:59:EC:4F:5C:C5:D9:2B:04
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       330607898AE6734EB216CDAAFCBD7267BA2ADA06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9ud3AEduXKYobZCU5u2tXAgv4kgdwkgwhpkizFD9XhmB/0/3E22537BD7B9DCBFA49ACBD859EC4F5CC5D92B04.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9ud3AEduXKYobZCU5u2tXAgv4kgdwkgwhpkizFD9XhmB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Jan 2024 21:10:22 +0000
Certificate not after:    Mon 06 Jan 2025 21:15:22 +0000
Subordinate resources:    AS: 267630
                          IP: 45.71.6.0/24
                          IP: 2801:80:2260::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:06:07:89:8a:e6:73:4e:b2:16:cd:aa:fc:bd:72:67:ba:2a:da:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  8 21:10:22 2024 GMT
            Not After : Jan  6 21:15:22 2025 GMT
        Subject: CN=3E22537BD7B9DCBFA49ACBD859EC4F5CC5D92B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fd:2c:60:f3:59:b7:ac:ff:0c:48:0d:16:3e:
                    1a:63:30:78:d7:47:b5:e0:e6:9a:2e:a9:14:88:5d:
                    ed:b5:86:3b:c9:fb:e1:39:5b:28:0a:d2:f3:69:62:
                    6e:9d:63:62:81:22:9c:d7:ae:dd:41:7d:69:33:5d:
                    d4:7d:23:33:8b:c2:e5:a6:cf:99:38:e8:da:57:2d:
                    e5:ae:5c:8c:6d:14:c9:2a:b8:b1:c2:9e:8f:91:53:
                    7c:85:2f:b3:b8:94:eb:b4:c4:91:58:b1:59:93:9b:
                    d8:9a:00:42:13:c2:70:ea:22:42:ce:85:d8:0e:26:
                    10:ef:35:b8:8c:c0:a2:33:74:d9:3c:fc:c7:bd:60:
                    9c:bf:06:6d:06:99:2b:f8:f3:90:1b:4d:80:09:ed:
                    80:31:dd:9e:f0:dc:1b:95:10:05:f9:9f:99:db:da:
                    6d:c1:3f:de:48:26:aa:06:80:b9:04:d5:07:c2:c6:
                    b5:53:9a:0c:de:e0:04:21:d9:d6:7c:68:d3:d6:e6:
                    18:f6:94:51:da:e5:34:aa:87:21:a0:82:a3:dc:52:
                    aa:99:de:a9:8e:b1:ae:44:7c:98:a6:fa:08:9c:93:
                    04:e4:e6:a3:4e:de:df:57:08:c1:59:19:fa:93:36:
                    24:34:41:63:68:dc:e2:39:98:8d:db:60:49:6a:cf:
                    5a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:22:53:7B:D7:B9:DC:BF:A4:9A:CB:D8:59:EC:4F:5C:C5:D9:2B:04
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9ud3AEduXKYobZCU5u2tXAgv4kgdwkgwhpkizFD9XhmB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9ud3AEduXKYobZCU5u2tXAgv4kgdwkgwhpkizFD9XhmB/0/3E22537BD7B9DCBFA49ACBD859EC4F5CC5D92B04.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.6.0/24
                IPv6:
                  2801:80:2260::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267630

    Signature Algorithm: sha256WithRSAEncryption
         12:08:9b:76:77:42:5c:b6:ff:f2:b1:df:db:c2:87:df:90:42:
         3c:94:26:ed:aa:68:12:3b:b8:48:8a:84:eb:38:65:0d:0a:87:
         d7:9a:54:80:d5:6c:0c:48:4e:11:e6:fd:62:c4:2f:a6:df:a8:
         95:86:4b:c3:1c:69:41:ce:99:bf:fe:af:3c:4f:b2:65:d8:74:
         3c:30:fe:54:0c:47:2d:32:07:ce:19:0b:89:d9:6b:bc:a8:cc:
         54:9f:f7:af:94:72:42:a5:70:42:42:78:d2:54:73:7c:2c:55:
         06:a8:4c:f3:ad:05:b6:62:72:e9:70:e8:07:3a:ae:fc:9c:38:
         02:1f:53:b7:6c:a7:8f:58:f3:74:01:63:9c:36:b0:8a:a4:dd:
         fd:d9:42:b0:2a:ca:64:b4:c1:8e:2e:8b:d3:76:b0:a5:17:79:
         c5:7c:71:97:f0:9d:33:dc:e0:f2:d6:0e:e0:de:98:45:64:71:
         36:29:d7:f9:4c:c8:f5:27:ee:67:40:50:ce:9f:71:e3:b9:37:
         92:59:45:aa:b7:25:b8:59:ef:c0:71:ea:5f:7e:0e:6b:38:85:
         bf:c4:34:fc:62:94:da:c7:63:f9:a2:e0:46:9e:d0:ed:41:8e:
         16:b7:6c:01:52:2f:7a:68:33:26:ba:60:66:1b:5d:ab:7f:4e:
         60:11:ea:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org