Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3F12C9D5B45E7FD3F1EC7AE08DA8BF70DC9E221F.cer
File:                     3F12C9D5B45E7FD3F1EC7AE08DA8BF70DC9E221F.cer (raw, json)
Hash identifier:          UkGxv/36AaiB06GbrDmC+R9W8qhRrh4t49Gh+OZ3sTg=
Subject key identifier:   3F:12:C9:D5:B4:5E:7F:D3:F1:EC:7A:E0:8D:A8:BF:70:DC:9E:22:1F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       68B9F4F3B373FB7EF07BBE5C8F2C42027BD0F072
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3F12C9D5B45E7FD3F1EC7AE08DA8BF70DC9E221F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 06 Aug 2022 16:32:17 +0000
Certificate not after:    Sat 05 Aug 2023 16:37:17 +0000
Subordinate resources:    AS: 268091
                          IP: 45.169.24.0/22
                          IP: 2804:57dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b9:f4:f3:b3:73:fb:7e:f0:7b:be:5c:8f:2c:42:02:7b:d0:f0:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  6 16:32:17 2022 GMT
            Not After : Aug  5 16:37:17 2023 GMT
        Subject: CN=3F12C9D5B45E7FD3F1EC7AE08DA8BF70DC9E221F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6a:4c:e6:6c:f9:2b:01:6d:61:75:ab:69:24:
                    1a:3d:8c:92:75:bc:a4:79:20:6b:f4:75:41:42:56:
                    e3:ed:64:d7:53:ac:1d:91:ef:22:6e:b2:e5:b1:88:
                    30:85:0e:c4:7a:10:6f:94:53:b4:bd:5a:e4:b2:be:
                    2f:28:0c:d4:fc:15:9e:a4:8e:17:1e:b7:e3:ad:97:
                    53:64:39:f6:11:e0:2e:e3:a7:bf:1d:81:19:2f:99:
                    5f:39:37:0c:7d:c8:b2:66:f2:f7:4d:98:d3:1a:2f:
                    d8:e3:0b:d8:a8:a3:ff:81:16:07:2b:6d:1e:03:41:
                    23:f1:35:d1:47:02:8a:83:3a:a4:8e:36:72:e8:a4:
                    ee:41:ea:aa:8f:c2:96:0b:d5:01:51:52:f2:65:89:
                    cb:79:cf:89:93:43:55:11:86:ee:53:20:8d:7d:29:
                    f4:65:d4:f3:34:f3:08:60:d1:90:67:8d:ee:a8:fe:
                    37:9f:76:9b:6e:0c:30:3f:ac:5c:ef:ad:58:a6:f2:
                    fb:99:f3:7e:4a:4e:fc:04:d5:d0:82:0c:f1:d8:11:
                    0c:4c:c5:2e:95:12:93:d3:86:b0:ba:ac:28:7a:be:
                    9c:40:80:f0:ef:be:e8:0b:ca:ae:49:13:6e:90:fd:
                    d5:94:24:d6:e7:a3:9e:cf:1d:62:22:72:5a:69:39:
                    96:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:12:C9:D5:B4:5E:7F:D3:F1:EC:7A:E0:8D:A8:BF:70:DC:9E:22:1F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3F12C9D5B45E7FD3F1EC7AE08DA8BF70DC9E221F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.24.0/22
                IPv6:
                  2804:57dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268091

    Signature Algorithm: sha256WithRSAEncryption
         68:84:31:96:6b:8b:3d:42:e1:11:ce:09:fc:2f:07:ff:e0:03:
         bd:db:7b:c4:24:ae:da:b7:6c:68:24:df:51:7a:30:bb:90:43:
         b6:c5:1e:df:51:55:3e:ab:eb:f6:97:46:1a:52:db:45:59:fe:
         2d:33:86:e7:28:85:83:85:76:80:0c:98:f5:69:20:db:cd:63:
         9d:83:e7:2b:aa:a6:73:1a:f6:84:aa:e1:37:39:9a:2e:c5:84:
         b1:e8:f7:1c:29:6c:f7:bf:e0:d0:99:b5:42:14:52:88:08:d6:
         66:1d:e6:4c:9e:98:46:83:11:a7:8b:41:aa:cc:b7:ed:a8:0d:
         ec:d1:d2:4e:a4:04:3a:40:89:31:ff:85:1f:9a:e1:31:9c:45:
         c5:00:73:4a:75:5f:c1:ef:79:c4:f3:24:56:8a:cb:38:ba:e9:
         58:c2:6d:a8:cc:1f:2b:25:01:ab:a4:dc:87:98:ce:3d:d3:2e:
         fb:f0:81:11:6c:30:18:43:48:57:60:09:c7:a9:67:6d:19:b3:
         20:d6:e3:b1:c6:af:4e:d2:94:df:d0:52:1a:95:9a:0c:5e:35:
         42:0b:a5:e4:92:1d:f2:f2:a9:83:2f:c2:5c:fc:1f:8f:b0:41:
         e7:29:be:12:9c:9d:9d:df:3f:f5:e9:7e:ac:72:7c:6e:a6:da:
         87:b1:f3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org