Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3EA80488C41EF08465D3E95FE2F8E110A0BA5B48.cer
File:                     3EA80488C41EF08465D3E95FE2F8E110A0BA5B48.cer (raw, json)
Hash identifier:          ADbm/akgPl8iXVjJtudm2718rL8ZAavDs5qM5oLaldw=
Subject key identifier:   3E:A8:04:88:C4:1E:F0:84:65:D3:E9:5F:E2:F8:E1:10:A0:BA:5B:48
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       621DBAA196283A65D1BF85245DAC52870C3951C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EJ19P7X5tZefMHmVkUQc7EpgtjqaBVL8uMkqV6ZeSjZU/0/3EA80488C41EF08465D3E95FE2F8E110A0BA5B48.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EJ19P7X5tZefMHmVkUQc7EpgtjqaBVL8uMkqV6ZeSjZU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 04 Jun 2023 19:35:25 +0000
Certificate not after:    Sun 02 Jun 2024 19:40:25 +0000
Subordinate resources:    AS: 272225
                          IP: 2804:83dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1d:ba:a1:96:28:3a:65:d1:bf:85:24:5d:ac:52:87:0c:39:51:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  4 19:35:25 2023 GMT
            Not After : Jun  2 19:40:25 2024 GMT
        Subject: CN=3EA80488C41EF08465D3E95FE2F8E110A0BA5B48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c4:28:9f:c1:87:da:b0:7c:88:3b:f0:d3:c4:
                    cf:54:2a:54:d0:c3:a0:10:71:e5:78:01:3c:f8:7e:
                    8f:06:b8:46:c3:e6:7b:be:9a:fa:3e:0d:b4:73:36:
                    43:aa:cc:e3:44:69:27:a7:e7:93:72:5e:3b:79:c6:
                    4c:8e:84:f6:d9:38:90:a1:c1:b3:9e:6c:d0:2f:dc:
                    41:00:ae:12:00:24:51:c0:d1:87:1d:c8:cf:0d:22:
                    12:d9:6a:80:7c:09:db:6e:c5:e7:e3:53:98:02:36:
                    0a:78:91:84:9d:86:08:b6:7b:ad:b7:af:7c:c9:9a:
                    2a:6a:b9:5a:ef:e3:27:a1:80:c4:60:eb:92:0a:a4:
                    c7:87:b7:a1:f9:90:91:a5:4e:6a:1a:fd:6a:7f:ca:
                    9f:bd:e3:d0:73:02:23:4f:69:de:9a:95:f2:9f:2a:
                    01:a2:7c:a9:a5:3f:74:76:fb:59:4b:f9:07:fd:4b:
                    07:d0:77:ec:65:0c:ee:5e:c5:10:53:e2:94:31:c7:
                    b1:d2:6f:0c:5a:8c:98:4c:a5:02:e3:d2:64:01:22:
                    48:44:2f:3b:ab:54:c4:73:dd:a1:0e:83:23:85:87:
                    0c:95:f2:12:00:a7:96:d7:fd:6e:4b:88:fb:2e:04:
                    cc:d8:e3:d5:b3:78:a5:41:7b:53:7c:e5:6d:23:57:
                    9b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:A8:04:88:C4:1E:F0:84:65:D3:E9:5F:E2:F8:E1:10:A0:BA:5B:48
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EJ19P7X5tZefMHmVkUQc7EpgtjqaBVL8uMkqV6ZeSjZU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EJ19P7X5tZefMHmVkUQc7EpgtjqaBVL8uMkqV6ZeSjZU/0/3EA80488C41EF08465D3E95FE2F8E110A0BA5B48.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272225

    Signature Algorithm: sha256WithRSAEncryption
         b3:55:0f:da:fa:71:17:8a:88:0a:13:a8:b3:ff:53:92:c2:15:
         f5:63:80:f6:b3:77:cf:63:55:9d:ff:ef:c7:2b:c0:36:6e:a8:
         70:4b:37:ec:47:bf:c3:dd:2e:c9:4e:0d:bc:eb:0c:3d:e0:ee:
         a4:c0:38:33:59:46:3b:5a:0b:1b:47:6a:89:15:d6:44:30:47:
         08:18:3d:d8:3b:d5:7a:83:47:0d:5f:0b:88:d7:2b:e6:01:3f:
         27:05:30:ef:16:f5:6c:11:14:34:4e:a5:d2:6b:fd:78:87:d6:
         d3:da:3f:1c:bf:9d:b7:b2:b4:22:1a:55:70:00:33:af:91:02:
         43:92:64:c0:b8:a6:22:25:9e:8b:ee:e7:ac:1e:fd:0a:38:f2:
         49:de:5d:fc:5c:da:e1:81:4a:c6:9d:c1:12:06:bd:cf:11:58:
         8d:ec:1f:ff:e1:b9:05:ce:a9:f5:65:8b:c8:b6:24:78:cb:d2:
         55:ca:44:ff:94:c9:00:28:4b:ff:fb:43:ad:04:05:79:e0:b7:
         9a:49:bc:78:23:79:b4:02:e0:2d:b0:44:a7:a7:bd:dc:4a:30:
         fe:ee:0d:5c:4b:69:0c:11:6e:6a:46:7c:5c:c2:7e:89:10:46:
         b1:bb:0c:a7:37:12:21:40:de:14:ca:f7:aa:d0:88:d8:a5:4e:
         84:a1:17:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org