Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3F6F9E482B07EE9223C11F6C8351654C02E42096.cer
File:                     3F6F9E482B07EE9223C11F6C8351654C02E42096.cer (raw, json)
Hash identifier:          5Z3D3tAr1xdux+NTFh9/UWtgiDkWhqZj3iDH0SDt8ws=
Subject key identifier:   3F:6F:9E:48:2B:07:EE:92:23:C1:1F:6C:83:51:65:4C:02:E4:20:96
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E35F2D0D93F66B35168B7B9B6118675309D63A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/0/3F6F9E482B07EE9223C11F6C8351654C02E42096.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 12 Jan 2023 07:12:10 +0000
Certificate not after:    Thu 11 Jan 2024 07:17:10 +0000
Subordinate resources:    AS: 265405
                          IP: 168.194.152.0/22
                          IP: 2804:3394::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:35:f2:d0:d9:3f:66:b3:51:68:b7:b9:b6:11:86:75:30:9d:63:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 12 07:12:10 2023 GMT
            Not After : Jan 11 07:17:10 2024 GMT
        Subject: CN=3F6F9E482B07EE9223C11F6C8351654C02E42096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f4:e3:1e:6f:92:87:b9:96:4e:f6:94:11:89:
                    7c:77:f4:1b:65:57:fc:d1:f7:3e:0a:3d:9d:93:73:
                    d3:e4:38:a2:f8:42:ea:65:61:bd:73:04:c6:72:0c:
                    eb:42:98:6a:2e:d0:54:6d:c7:75:e7:c8:da:39:cf:
                    0e:91:68:23:61:9b:3a:be:41:f9:43:22:21:96:a6:
                    00:22:3b:82:3f:cb:d0:dd:ad:02:c8:0a:48:27:e6:
                    53:47:ed:00:7a:bf:21:b9:5b:61:f1:e1:c2:18:43:
                    05:19:f1:e4:b5:1c:9e:f7:c6:e9:f6:51:9f:7c:83:
                    45:f7:33:ee:ad:d0:e6:4e:5a:84:25:ae:24:99:ca:
                    5b:98:5e:74:8b:48:11:8f:49:b9:dc:f0:e2:da:11:
                    92:a2:2a:36:7d:a7:8a:0b:5e:1e:43:a5:3b:e6:e5:
                    ec:54:70:32:b8:6e:b1:ff:ea:79:87:26:70:ee:89:
                    15:be:aa:b1:ec:59:60:ac:0a:a6:7c:61:6d:da:9e:
                    b6:90:d7:49:c0:43:05:8d:94:5d:94:78:21:cb:22:
                    c8:15:ec:56:2b:3d:78:0f:bc:99:12:22:bc:05:a2:
                    7f:79:c1:f8:c6:58:b8:e4:d5:ed:4f:da:a8:3c:1e:
                    b3:2e:e6:ef:f8:07:d4:61:4a:e8:f1:cd:e5:5e:6e:
                    51:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:6F:9E:48:2B:07:EE:92:23:C1:1F:6C:83:51:65:4C:02:E4:20:96
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gp7XC86R9nb6wWnpVtD6y8mzx24m9rwQGDHBqCwoXu2J/0/3F6F9E482B07EE9223C11F6C8351654C02E42096.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.152.0/22
                IPv6:
                  2804:3394::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265405

    Signature Algorithm: sha256WithRSAEncryption
         3b:50:8a:8f:a6:04:88:90:bc:4e:ac:c9:05:05:3b:eb:23:fa:
         36:a2:fd:c0:87:7f:bc:c5:66:62:b8:f2:3f:cf:b1:1e:b9:0f:
         85:58:e5:cc:b7:df:70:42:14:ec:23:90:9f:c0:cb:cd:a7:dd:
         56:70:89:08:18:ff:5e:aa:ca:d3:fc:97:a8:20:a6:cf:82:84:
         c1:6b:e8:8a:21:bf:db:b2:ae:f1:95:cd:1a:50:5e:66:a9:fc:
         7a:e2:cd:57:cf:15:eb:6b:68:86:3b:f7:81:af:a5:2e:07:a9:
         8c:6c:49:bb:e4:4f:3e:f5:46:57:4d:98:7e:00:c1:04:96:c5:
         04:e4:cc:a2:23:90:b3:c5:01:2e:8a:89:14:5a:4b:77:b7:a9:
         a6:c1:0e:4e:13:1c:77:91:e1:4c:71:3a:74:bd:9d:a8:a9:3c:
         fa:2e:47:74:5d:64:d6:31:c5:ae:94:ee:b0:f7:15:09:aa:a7:
         12:7b:53:95:06:a7:18:1d:02:be:83:4e:ec:01:ae:40:ae:df:
         ca:33:d0:89:cc:28:d4:41:5e:f1:88:58:e5:40:a7:1e:c9:ae:
         88:1c:4c:e2:01:ba:80:20:04:b8:72:21:ca:3e:73:d1:63:21:
         6d:d8:20:48:61:4c:03:b2:07:25:e8:43:1c:14:90:7e:ba:52:
         7a:9c:13:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org