Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3E50F9492057107D2EE0967B5BAA0A5A801A59E2.cer
File:                     3E50F9492057107D2EE0967B5BAA0A5A801A59E2.cer (raw, json)
Hash identifier:          hc67caSJq6V5F3f1fFnAryfeqkEUqv3SvNNzzSRSAf4=
Subject key identifier:   3E:50:F9:49:20:57:10:7D:2E:E0:96:7B:5B:AA:0A:5A:80:1A:59:E2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       48F89835DC1C83F59DD679A75203071CA4BF3F3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/3E50F9492057107D2EE0967B5BAA0A5A801A59E2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Mar 2024 11:09:16 +0000
Certificate not after:    Fri 28 Feb 2025 11:14:16 +0000
Subordinate resources:    AS: 271260
                          IP: 190.171.84.0/22
                          IP: 2804:78b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f8:98:35:dc:1c:83:f5:9d:d6:79:a7:52:03:07:1c:a4:bf:3f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  1 11:09:16 2024 GMT
            Not After : Feb 28 11:14:16 2025 GMT
        Subject: CN=3E50F9492057107D2EE0967B5BAA0A5A801A59E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f6:04:12:ac:e7:21:63:63:f0:13:5b:9e:eb:
                    cc:f3:b4:48:62:cd:71:3b:bd:30:c0:6e:7a:a5:04:
                    58:cd:e6:a6:21:eb:aa:d1:b2:d6:02:d7:38:87:8a:
                    ca:45:16:7a:85:a4:24:00:b0:f1:7b:b6:62:8d:b4:
                    a9:ed:d0:d8:dc:2e:5c:63:a9:74:47:98:b3:c5:21:
                    c4:1c:c1:1d:43:08:b8:b8:13:b0:d2:99:dc:2b:a0:
                    1e:a0:26:7b:5c:16:41:d6:41:40:5b:8e:c7:89:49:
                    53:53:54:e5:70:65:2f:c3:1a:7f:f1:c3:5b:a5:56:
                    2d:31:78:9d:d5:7b:c4:bd:e9:91:2d:b6:f1:22:46:
                    c4:02:a2:b8:f1:06:ae:10:99:ec:c2:f9:e4:05:87:
                    6f:ff:f1:8f:3d:95:14:ae:e9:49:ff:d0:4d:5c:b7:
                    7c:55:8d:8e:11:9d:34:32:7a:3b:fc:cc:1c:40:24:
                    70:33:13:b0:94:cf:3d:ff:59:45:fe:95:08:51:5a:
                    63:23:58:f8:a6:fc:ab:25:d4:2e:e0:3e:9e:95:d1:
                    a8:c2:d1:5e:0c:d7:3d:0a:c7:b1:c9:77:63:e7:86:
                    84:4d:d9:5b:50:f6:f1:b9:db:aa:e5:17:3c:76:89:
                    68:c8:55:7a:87:ae:71:8e:eb:03:55:56:82:df:67:
                    aa:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:50:F9:49:20:57:10:7D:2E:E0:96:7B:5B:AA:0A:5A:80:1A:59:E2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/0/3E50F9492057107D2EE0967B5BAA0A5A801A59E2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.84.0/22
                IPv6:
                  2804:78b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271260

    Signature Algorithm: sha256WithRSAEncryption
         4f:57:8f:7b:f9:2f:98:79:06:60:24:fc:d6:fa:2f:0a:d2:fa:
         d3:03:8e:24:66:32:52:57:e0:b7:0e:3c:3e:aa:72:94:a5:29:
         00:1d:d7:2a:cf:43:7b:14:8a:0a:43:3f:28:b6:53:44:8c:ed:
         ab:f7:c4:12:dd:59:a2:d6:fa:23:69:20:09:1f:1c:d0:1a:f6:
         83:d9:b6:bc:c5:44:b5:d9:84:62:a9:fd:61:68:34:69:b0:60:
         de:28:c2:d0:26:e7:d6:ae:69:a1:1f:6c:38:84:75:ac:32:7f:
         be:a7:6c:8c:12:04:42:a0:57:9d:38:b2:85:e5:8c:05:3b:f2:
         4c:73:6f:8c:fd:d1:fc:80:ca:83:58:e9:2f:2d:b0:fd:b7:1d:
         e3:ec:ca:b3:7e:b9:f1:2b:dc:34:85:0a:a9:26:6b:58:ec:b7:
         a5:51:75:5d:e1:02:6d:dd:ec:30:2b:ec:2c:d9:ed:58:a7:d5:
         5c:a3:0c:02:b2:91:a0:c7:9e:8e:ac:9d:2f:85:11:13:98:8f:
         22:fe:23:de:d3:e3:ec:01:87:f7:e0:67:be:1e:de:93:7f:8f:
         ad:21:0f:63:5f:61:7a:74:0d:c7:23:e8:f6:2b:33:e5:30:8a:
         56:57:ac:24:b1:27:c3:19:b6:95:41:88:6d:9a:3c:d6:28:7a:
         59:cf:ed:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org