Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5.cer
File:                     3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5.cer (raw, json)
Hash identifier:          jmyERFl04ZZptH4JfcY9+JCAVGBOV6U683eRATjYiPQ=
Subject key identifier:   3E:BD:05:E7:C5:9D:11:2E:CB:00:A7:3F:8D:33:BC:D8:94:C5:FA:E5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       65FA1910BAD81E9F498B76F6A0D0876194A2AD20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 Jan 2024 16:00:15 +0000
Certificate not after:    Wed 29 Jan 2025 16:05:15 +0000
Subordinate resources:    AS: 269526
                          IP: 45.186.244.0/22
                          IP: 2804:65fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:fa:19:10:ba:d8:1e:9f:49:8b:76:f6:a0:d0:87:61:94:a2:ad:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 31 16:00:15 2024 GMT
            Not After : Jan 29 16:05:15 2025 GMT
        Subject: CN=3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3a:62:6e:44:3e:c1:43:23:ed:84:2e:5d:e1:
                    69:14:6a:63:7a:3b:54:11:fe:ce:df:d8:71:f2:5e:
                    dd:20:ce:84:f0:93:4c:47:49:b0:47:1e:b0:7c:55:
                    c0:2e:59:4c:ef:55:19:61:93:26:df:f2:5d:a9:d1:
                    d5:57:36:4b:b6:27:7a:06:cc:df:82:82:b5:83:6d:
                    84:b1:b9:87:86:dc:6a:75:df:70:cb:ac:c3:7c:2b:
                    c1:07:36:62:20:c5:8e:e6:de:12:1d:f1:91:83:ca:
                    28:f7:a4:c2:9d:75:22:49:b0:74:56:92:ab:a3:c9:
                    92:51:8d:62:7f:87:cc:2b:3c:e7:a0:4b:cc:7d:8c:
                    70:1e:31:fb:59:09:3f:55:7e:33:cf:c5:71:e9:f8:
                    44:af:e0:cd:11:1a:ff:57:35:f6:e0:99:b7:3e:c3:
                    0b:15:2e:9f:ca:54:56:3d:80:d4:e5:61:bb:89:53:
                    6e:55:d5:3b:ad:b9:2f:3e:1a:00:f1:36:d8:e5:63:
                    c3:2e:57:01:8d:7a:01:74:eb:dc:f3:06:56:0c:34:
                    ab:8d:ee:98:1a:18:44:b8:78:40:23:65:3b:0b:bb:
                    20:02:4e:e9:63:73:84:95:34:09:24:c5:be:07:d9:
                    8d:19:2f:06:f2:be:d4:9b:ce:f2:4b:2f:3e:f2:6d:
                    a2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:BD:05:E7:C5:9D:11:2E:CB:00:A7:3F:8D:33:BC:D8:94:C5:FA:E5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.244.0/22
                IPv6:
                  2804:65fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269526

    Signature Algorithm: sha256WithRSAEncryption
         41:d6:d9:42:5b:7c:c7:44:ca:5c:56:98:91:3a:78:cb:e4:fe:
         6f:57:2e:5f:1e:02:10:cc:9a:7e:fe:72:de:b1:4d:eb:e4:38:
         ad:e9:d5:81:73:45:38:f9:28:ba:65:84:3d:aa:d9:70:29:74:
         d9:c3:65:de:f0:0f:37:be:0e:50:9e:db:b2:83:09:b9:2d:f5:
         3f:41:52:58:65:02:c3:16:07:53:39:e5:39:30:98:68:8c:23:
         6a:06:19:6b:6a:cd:fb:ab:a5:75:55:fa:f9:58:52:8c:1d:e1:
         b4:d5:37:6d:25:20:94:ac:74:68:94:0d:f3:b2:56:dd:b8:bd:
         c5:cd:2f:24:b5:c4:46:e0:7f:13:43:f0:30:28:23:1f:7e:7f:
         f1:08:23:62:1e:d6:9f:0f:7e:64:2e:2d:86:2d:78:fd:78:21:
         1a:af:8c:6a:21:4b:73:fb:ff:a2:96:84:d6:f8:0c:6b:fb:c9:
         c2:1d:fe:c8:13:0f:bf:8f:3d:56:3b:a5:a5:f4:8f:47:f6:93:
         e3:82:f1:f4:da:58:43:71:5d:4b:2f:bf:0d:0b:17:d2:ca:99:
         05:7c:54:6c:35:28:ff:78:0c:ac:a7:66:87:66:28:cd:04:21:
         59:4f:9c:f0:60:cd:6e:fb:c4:34:b1:76:82:c4:3c:74:f1:ac:
         b2:71:9e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org