Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3E7012DDC83FD6C43059A6A0938BEE70E96E9606.cer
File:                     3E7012DDC83FD6C43059A6A0938BEE70E96E9606.cer (raw, json)
Hash identifier:          GlZ5GtvHOAi6V/UJtM/KMqigyz9Ij4CHgFEyggPgnug=
Subject key identifier:   3E:70:12:DD:C8:3F:D6:C4:30:59:A6:A0:93:8B:EE:70:E9:6E:96:06
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       61B8ABE93610DBDA0E3DD890753379619C681977
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/3E7012DDC83FD6C43059A6A0938BEE70E96E9606.mft
caRepository:             rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Oct 2021 17:45:49 +0000
Certificate not after:    Fri 21 Oct 2022 17:50:49 +0000
Subordinate resources:    AS: 262502
                          IP: 167.250.80.0/22
                          IP: 177.66.184.0/21
                          IP: 190.7.176.0/20
                          IP: 2804:18a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b8:ab:e9:36:10:db:da:0e:3d:d8:90:75:33:79:61:9c:68:19:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 22 17:45:49 2021 GMT
            Not After : Oct 21 17:50:49 2022 GMT
        Subject: CN=3E7012DDC83FD6C43059A6A0938BEE70E96E9606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cf:38:16:46:f9:69:f5:9d:19:3c:11:95:4e:
                    b0:db:fd:59:f1:79:55:43:9f:f2:57:16:03:fb:ee:
                    e1:1b:06:97:a5:0f:9a:c1:0d:45:c0:bf:bf:b9:d5:
                    e8:09:ab:09:ba:4b:e1:1b:b4:10:69:a6:11:33:5a:
                    8f:0c:87:2f:eb:ee:84:04:66:ee:3b:12:4b:ed:aa:
                    dc:9a:ba:b8:9c:31:da:83:19:9f:da:ca:14:11:6f:
                    dd:75:a0:50:03:87:84:13:16:06:05:ef:ca:1a:b4:
                    38:06:b0:b9:6c:e3:7e:a5:17:de:a8:7b:e9:ae:e8:
                    3a:7f:55:03:7a:4f:32:0d:b9:64:16:ae:90:66:7b:
                    74:f4:3f:a2:82:41:2a:1a:2c:e4:21:84:2b:14:f5:
                    01:5b:1a:5f:e3:20:d7:60:c0:05:d1:df:a5:c1:b7:
                    52:67:59:c6:6e:94:b0:0d:58:18:79:c6:d7:7a:4a:
                    46:8d:9e:31:f3:7d:09:8b:95:7e:be:fd:35:a6:9a:
                    19:6e:d6:db:b3:91:b7:d8:c9:52:1e:15:fd:fa:de:
                    fc:84:79:96:f9:70:51:5d:56:00:0f:88:47:53:d4:
                    7a:64:04:c9:ec:a5:c6:09:44:44:eb:55:7b:a8:9b:
                    57:1a:ac:b0:ed:58:d4:9d:76:3d:0e:b4:56:34:e1:
                    1e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:70:12:DD:C8:3F:D6:C4:30:59:A6:A0:93:8B:EE:70:E9:6E:96:06
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/68bEC1wWogkFoTJqmtJhcDg38B4BisDD7Ztxq7syE998/0/3E7012DDC83FD6C43059A6A0938BEE70E96E9606.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.80.0/22
                  177.66.184.0/21
                  190.7.176.0/20
                IPv6:
                  2804:18a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262502

    Signature Algorithm: sha256WithRSAEncryption
         25:40:df:83:47:e6:71:38:54:87:12:d7:be:b2:07:8e:71:30:
         51:92:00:7f:f7:a1:8c:80:89:7b:6f:13:9d:33:34:71:a2:4e:
         5d:cd:72:4a:80:b2:06:7f:eb:88:35:95:7c:ce:c1:05:aa:df:
         45:ca:e8:c7:07:c5:89:e7:81:e9:85:eb:66:70:79:51:64:e1:
         00:27:8f:65:c1:06:89:73:a9:fb:9d:5d:80:a5:8b:5a:b9:19:
         f4:4f:f2:4f:34:07:77:b0:6d:3b:b2:99:42:76:d8:11:b2:a9:
         8a:f6:53:3d:12:08:f2:91:b4:65:ea:00:66:c9:74:fd:72:cd:
         73:49:fb:3b:8b:e7:6c:d0:5a:6d:57:d1:24:f5:b1:68:02:e2:
         69:07:43:db:4b:47:7b:9f:28:f4:99:3a:12:c8:33:cb:f3:9e:
         d8:6b:2d:7a:2b:58:de:f0:d1:d1:13:78:6e:23:93:1a:30:6a:
         df:c8:d2:d3:68:3c:22:e1:cb:43:c6:6b:7c:92:a8:ed:ee:2e:
         d2:63:10:cc:31:eb:c5:90:cf:20:df:19:7b:86:74:fd:16:42:
         0a:66:bb:58:6f:01:65:5b:f9:26:53:ce:f3:a2:bc:1b:f0:3f:
         84:73:d6:88:a5:55:fb:cd:4f:e1:0d:d9:ad:45:8e:7a:66:91:
         56:30:48:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org