Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3F8788D11DDD58B2DA59187B48D648DCFC2612BC.cer
File:                     3F8788D11DDD58B2DA59187B48D648DCFC2612BC.cer (raw, json)
Hash identifier:          mMfafqxTKvsyl884ufWpcS2lp4I1k7jjmaDAekRTjEc=
Subject key identifier:   3F:87:88:D1:1D:DD:58:B2:DA:59:18:7B:48:D6:48:DC:FC:26:12:BC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       01F8BF53453FD412CE85125AE3EC88A525C50E56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/3F8788D11DDD58B2DA59187B48D648DCFC2612BC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Dec 2023 20:50:37 +0000
Certificate not after:    Thu 12 Dec 2024 20:55:37 +0000
Subordinate resources:    AS: 269479
                          IP: 45.187.136.0/22
                          IP: 2804:6544::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f8:bf:53:45:3f:d4:12:ce:85:12:5a:e3:ec:88:a5:25:c5:0e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 14 20:50:37 2023 GMT
            Not After : Dec 12 20:55:37 2024 GMT
        Subject: CN=3F8788D11DDD58B2DA59187B48D648DCFC2612BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8a:df:ee:c8:09:ab:9c:f9:68:a8:ae:95:69:
                    1c:8f:cf:d8:02:82:c3:23:a5:53:91:65:7f:52:f5:
                    fd:b7:4f:cd:01:b8:44:97:15:dd:78:c8:97:10:97:
                    87:87:90:c1:91:9f:b8:f6:c6:ef:44:49:ae:18:6b:
                    a3:35:c5:ce:38:d0:a5:d6:b2:a6:bf:15:25:9f:18:
                    61:1e:36:b9:91:30:3a:12:85:0e:74:82:6d:d2:3f:
                    0c:66:c0:9a:f4:5a:2a:fe:ad:37:a5:1d:b6:52:1b:
                    ba:ca:f8:ff:46:f5:2f:cf:87:7e:2f:04:0d:66:8c:
                    8a:93:40:55:c5:88:44:14:00:4f:92:82:3f:12:ee:
                    d6:78:21:a8:7f:78:df:0d:d5:f6:23:77:ea:2f:34:
                    ad:00:88:8c:15:65:f0:26:d4:97:9e:e2:9e:34:0a:
                    49:d5:42:c2:41:58:2c:59:68:36:f7:49:cf:c7:21:
                    e5:9d:3c:3c:ff:08:48:5b:8f:43:c0:bf:79:e2:9b:
                    59:bd:08:85:16:17:a3:0c:38:a1:b0:8a:87:37:84:
                    34:65:ec:a5:3e:14:e4:6c:10:ea:dc:e7:5e:f9:55:
                    bf:aa:6a:eb:ac:5b:76:b0:f7:5a:0a:b9:be:4a:d8:
                    a4:9b:c4:49:a7:c2:a9:53:35:cf:ed:ed:34:76:1f:
                    96:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:87:88:D1:1D:DD:58:B2:DA:59:18:7B:48:D6:48:DC:FC:26:12:BC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/0/3F8788D11DDD58B2DA59187B48D648DCFC2612BC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.136.0/22
                IPv6:
                  2804:6544::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269479

    Signature Algorithm: sha256WithRSAEncryption
         b7:9e:ed:18:1a:cb:cd:0c:5d:70:40:37:ff:f3:2b:dc:79:73:
         ee:f3:40:eb:64:77:e4:6a:c2:eb:42:40:50:9f:2e:f8:b8:b8:
         6e:9d:06:52:de:9c:26:24:54:8b:a6:41:56:aa:84:2b:56:ed:
         bd:83:7b:fa:de:14:64:f4:d6:48:d9:75:6a:eb:86:18:40:7c:
         eb:9d:ad:f2:0b:5b:7f:43:b9:4b:64:87:f4:db:1b:59:96:f3:
         1b:6d:47:0c:ac:a3:83:c3:bd:22:3b:fb:59:ff:bd:77:d6:82:
         5b:f7:4e:02:e7:be:0a:67:26:5c:07:43:ab:3b:72:29:36:83:
         fc:ee:0e:f0:89:2b:76:b0:64:dc:cb:60:a1:57:71:9e:e8:80:
         23:f5:13:41:9d:b1:56:d3:41:de:c0:34:79:4b:7c:97:61:18:
         1e:2c:21:e2:c3:a7:87:b0:2c:b8:f0:e3:86:0d:6b:e8:15:38:
         61:ee:cc:69:8a:63:b2:4b:be:1c:62:99:39:55:c0:ee:16:dc:
         33:02:89:a4:01:4e:3e:a9:f3:36:e3:38:70:cb:2f:42:ec:78:
         92:ef:7f:22:ff:1d:3d:02:9d:45:d7:0b:c5:b7:99:44:b2:d9:
         00:a5:d9:cc:a9:b1:18:df:aa:ee:53:45:3d:04:e1:ba:27:8b:
         dd:24:55:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org