Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3E908FAB2E56EE7EEC8826A506E5A833502F566C.cer
File:                     3E908FAB2E56EE7EEC8826A506E5A833502F566C.cer (raw, json)
Hash identifier:          9KP8NoiDJg74de+qanNpVRV2CMeIguH0cFW9Yj6u/bc=
Subject key identifier:   3E:90:8F:AB:2E:56:EE:7E:EC:88:26:A5:06:E5:A8:33:50:2F:56:6C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4406573A7D93889FD40D5EBEEF998728B747313E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/3E908FAB2E56EE7EEC8826A506E5A833502F566C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Sep 2022 22:02:35 +0000
Certificate not after:    Thu 28 Sep 2023 22:07:35 +0000
Subordinate resources:    AS: 269554
                          IP: 45.187.212.0/22
                          IP: 2804:6660::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:06:57:3a:7d:93:88:9f:d4:0d:5e:be:ef:99:87:28:b7:47:31:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 29 22:02:35 2022 GMT
            Not After : Sep 28 22:07:35 2023 GMT
        Subject: CN=3E908FAB2E56EE7EEC8826A506E5A833502F566C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:34:ce:a0:8d:8b:f3:56:f4:72:19:31:0e:8b:
                    2c:b6:b9:7e:2c:b6:2b:f8:6c:0a:4d:ee:b9:38:be:
                    9a:c0:7a:4b:ee:29:02:44:af:f8:d6:71:8b:9d:eb:
                    a8:03:d3:4b:1a:88:99:68:0b:06:5d:dd:93:bd:79:
                    2c:5e:07:22:44:58:7a:b2:07:37:92:d5:1a:e1:99:
                    36:fe:0b:35:d4:35:e8:2c:66:5d:59:e5:6a:b3:d7:
                    3e:27:2d:64:b0:10:f4:4f:41:96:9a:05:ce:01:0a:
                    aa:9e:6a:ff:15:53:4b:3b:ec:a4:ae:c3:50:73:fe:
                    ac:bf:86:96:ab:96:cd:9e:47:48:e4:92:cd:ef:3b:
                    65:59:3c:0f:75:e3:10:2c:c0:b6:06:99:e6:7b:0e:
                    6e:1b:33:5a:a1:10:20:3d:df:e0:88:b7:c6:c4:17:
                    b5:39:5a:08:fb:09:c0:f6:bf:6a:e2:54:bd:0a:cc:
                    9a:d3:df:8f:4d:0c:30:9d:d5:ff:95:c6:17:68:d0:
                    9e:eb:81:62:4c:00:f3:98:a8:95:b1:49:18:1d:45:
                    12:e7:d3:8c:46:d6:ef:cb:61:74:b0:13:13:bd:89:
                    8d:b8:a3:a1:e4:13:df:66:c6:ad:0b:47:c5:25:3e:
                    7d:06:57:9f:12:c5:a2:74:43:3f:80:eb:4d:1a:25:
                    39:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:90:8F:AB:2E:56:EE:7E:EC:88:26:A5:06:E5:A8:33:50:2F:56:6C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/3E908FAB2E56EE7EEC8826A506E5A833502F566C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.212.0/22
                IPv6:
                  2804:6660::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269554

    Signature Algorithm: sha256WithRSAEncryption
         17:2d:5c:71:f2:ca:9b:04:09:76:99:52:b4:f8:9b:a2:71:71:
         76:2e:df:b7:51:8a:c6:6e:b6:ad:f4:c5:bd:a0:a6:01:02:cb:
         d1:b9:e2:36:23:1c:aa:5f:7e:64:ad:7c:3e:7d:bc:21:cf:70:
         00:37:b3:95:35:e1:93:a4:53:c3:06:5a:87:2f:49:cb:67:e3:
         a6:17:f3:24:b3:90:78:e2:12:01:cc:3a:5d:31:a1:b2:a9:16:
         21:7c:8a:cd:75:f7:a7:f1:7a:bc:7f:04:ca:0f:00:1e:ba:ac:
         d4:ce:cf:4d:fa:79:82:25:32:c6:20:d0:ca:0b:4a:fb:42:81:
         08:03:91:7b:a9:1e:a8:59:2f:34:a1:5d:71:f9:47:a9:6a:38:
         d7:18:9b:1a:d2:29:7b:f2:1d:0b:b9:eb:d7:de:bb:46:14:7b:
         4b:40:63:f1:d1:b7:e5:4c:78:fb:a3:7b:6f:ed:49:7b:86:be:
         47:5c:31:cc:8e:0d:e0:bb:05:d5:91:39:d2:5a:11:d0:47:1c:
         0d:e1:44:ed:67:22:72:ae:fc:d5:ee:ba:f7:73:f3:5c:8c:a0:
         3e:0d:fd:92:26:55:49:b4:8f:af:34:c6:2d:d0:0f:0b:fa:07:
         b2:f3:63:4e:69:41:40:65:41:51:a9:41:f6:ab:db:f3:06:d1:
         ef:fd:bc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org