Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3EBC3FE2232091904C043FBCE9FE1663C1E92CBB.cer
File:                     3EBC3FE2232091904C043FBCE9FE1663C1E92CBB.cer (raw, json)
Hash identifier:          XhinIgDwyAP+fLUreXxyLU9a1iCAq/+T055X+h6RlOk=
Subject key identifier:   3E:BC:3F:E2:23:20:91:90:4C:04:3F:BC:E9:FE:16:63:C1:E9:2C:BB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       60BA4D2366506BE0FFEA787F54C8496747918DB3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/3EBC3FE2232091904C043FBCE9FE1663C1E92CBB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Nov 2021 18:30:21 +0000
Certificate not after:    Mon 14 Nov 2022 18:35:21 +0000
Subordinate resources:    AS: 28639
                          IP: 177.129.68.0/22
                          IP: 191.6.232.0/21
                          IP: 2804:dd0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ba:4d:23:66:50:6b:e0:ff:ea:78:7f:54:c8:49:67:47:91:8d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 15 18:30:21 2021 GMT
            Not After : Nov 14 18:35:21 2022 GMT
        Subject: CN=3EBC3FE2232091904C043FBCE9FE1663C1E92CBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:53:3d:c3:5e:e5:c0:55:85:f6:a6:d0:fb:
                    f0:09:13:4e:2a:10:23:51:be:7f:96:4a:c0:7c:98:
                    0b:f6:2a:f5:39:82:de:e4:f2:32:65:95:6c:39:df:
                    b5:4b:18:d6:10:7e:fd:20:39:4b:37:09:cc:2a:09:
                    47:c1:b9:c3:30:a2:7f:5b:12:55:36:45:54:d0:92:
                    54:71:15:a1:23:bf:fe:63:fd:99:42:94:10:d6:1c:
                    b4:c8:62:38:33:dd:0c:17:3d:dc:61:91:74:aa:3b:
                    d1:b9:4b:d8:67:d4:1c:c5:2f:bb:19:10:e0:8b:9e:
                    fb:c3:45:c1:9a:52:1a:93:f1:c0:4d:50:4d:5a:e1:
                    69:8b:92:6b:a3:67:e7:ad:96:92:a3:ac:be:ed:01:
                    d0:f9:b6:f9:6a:59:d3:1e:28:2a:bd:f3:92:40:69:
                    fd:a4:66:df:92:a4:52:87:c4:38:f6:a6:ea:86:18:
                    a8:aa:81:14:59:22:5b:b1:83:f4:58:35:75:a4:a0:
                    70:2c:b4:ae:87:94:89:2c:84:8f:59:d6:28:8e:d7:
                    61:4b:1c:b9:44:06:77:49:2e:f6:f3:72:d2:9e:63:
                    55:97:f5:06:2d:66:75:ae:48:86:c2:18:b8:89:52:
                    eb:4c:ec:8d:57:2e:79:2a:61:ed:77:3e:69:00:18:
                    f6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:BC:3F:E2:23:20:91:90:4C:04:3F:BC:E9:FE:16:63:C1:E9:2C:BB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/3EBC3FE2232091904C043FBCE9FE1663C1E92CBB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.68.0/22
                  191.6.232.0/21
                IPv6:
                  2804:dd0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28639

    Signature Algorithm: sha256WithRSAEncryption
         9e:11:db:56:0c:2f:e0:55:7f:83:16:8c:28:83:96:86:dd:48:
         2c:8e:09:69:32:72:a0:93:6b:eb:30:38:c4:61:d3:dc:02:6b:
         3c:3b:05:d2:60:1b:ed:3f:b9:10:b1:77:c0:2e:b9:14:49:b3:
         6e:ed:30:83:79:20:84:ac:47:d3:2c:03:2b:fb:c2:3c:b1:d8:
         a2:62:14:31:dd:77:24:ad:a8:48:55:78:01:a4:f1:23:17:ff:
         db:16:3d:c9:2b:e1:cf:d1:23:cd:15:ee:df:5b:f6:b5:a7:bd:
         c5:18:be:dd:6f:7b:fc:25:a8:8d:84:fd:fe:33:ff:3f:ec:0d:
         a3:d6:d9:23:ee:6a:21:0f:75:00:da:8b:2e:66:f1:ff:e5:73:
         58:05:c1:53:72:5b:e3:34:9c:6b:78:90:a1:0d:1b:07:f3:36:
         08:71:9b:0f:5b:59:53:8a:bb:4a:19:0d:5a:55:4c:09:43:ed:
         6f:a4:4e:8e:18:4b:8c:df:06:4f:a3:ee:44:72:e5:0b:1e:99:
         f2:8a:e2:1f:ba:ba:0d:c8:dc:99:41:95:50:4f:df:f1:ae:b6:
         27:1a:9a:4a:a1:c6:dc:43:e8:06:ad:e9:ad:9c:c4:39:d2:49:
         07:0d:72:0d:3c:6d:96:7a:b5:5f:c5:78:9e:3c:c8:99:fd:2b:
         4a:71:6b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org