Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3FB7873B41762305642E25A883D0E038F87AB647.cer
File:                     3FB7873B41762305642E25A883D0E038F87AB647.cer (raw, json)
Hash identifier:          /dNVih05779sJiyPSGYcjzNOgrPOkmJMkSjrmcH2CnI=
Subject key identifier:   3F:B7:87:3B:41:76:23:05:64:2E:25:A8:83:D0:E0:38:F8:7A:B6:47
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       57A67041345D9954230CC84623EE2C4E981B6BDF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EPp5D1TPa3WPfKBN5F2JLWHeYcM3GXPrm7X47bVkdd1K/0/3FB7873B41762305642E25A883D0E038F87AB647.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EPp5D1TPa3WPfKBN5F2JLWHeYcM3GXPrm7X47bVkdd1K/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Sep 2021 16:46:54 +0000
Certificate not after:    Tue 06 Sep 2022 16:51:54 +0000
Subordinate resources:    AS: 267294
                          IP: 45.233.48.0/22
                          IP: 2804:4b44::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a6:70:41:34:5d:99:54:23:0c:c8:46:23:ee:2c:4e:98:1b:6b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  7 16:46:54 2021 GMT
            Not After : Sep  6 16:51:54 2022 GMT
        Subject: CN=3FB7873B41762305642E25A883D0E038F87AB647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3d:e7:22:1f:30:17:e3:35:97:4f:e5:27:5a:
                    8c:2d:4e:4c:f6:78:76:64:a7:e0:18:4b:90:e3:19:
                    c5:b5:57:8f:c4:82:c0:9a:56:e3:44:e6:4b:1a:b6:
                    59:d9:62:4d:fe:d8:dd:97:33:1d:26:fb:92:04:90:
                    12:e4:10:42:c2:7e:a9:63:93:7f:85:ed:b3:c2:1d:
                    d7:22:10:b1:43:88:1b:56:a7:99:3d:68:80:ae:56:
                    e5:0b:10:98:51:00:58:ef:70:8c:5c:02:67:c2:76:
                    9f:54:60:52:b8:e5:26:7b:07:bf:3e:6c:56:f9:cc:
                    91:81:fe:13:60:44:2a:54:f2:4c:73:6e:53:23:81:
                    c5:5b:58:df:df:7f:29:f2:c7:b9:83:a1:bb:16:ba:
                    19:2a:20:b9:f6:38:c1:a7:7f:c6:6d:4d:ba:28:73:
                    83:a3:74:65:20:3c:f5:3a:bc:8f:c2:f1:23:4f:27:
                    55:11:6a:5e:56:6c:f5:10:da:c0:06:3b:61:79:8f:
                    45:22:83:4b:44:45:b9:6a:2a:23:3d:f6:c5:9a:b2:
                    7a:8f:08:33:60:8c:ed:ab:4d:28:bd:8f:35:e7:7f:
                    ab:1f:68:ad:4c:f4:0c:1c:15:43:cf:6a:1a:4b:63:
                    8a:a1:51:1b:77:fb:f0:12:35:f6:50:43:a7:da:66:
                    90:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:B7:87:3B:41:76:23:05:64:2E:25:A8:83:D0:E0:38:F8:7A:B6:47
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EPp5D1TPa3WPfKBN5F2JLWHeYcM3GXPrm7X47bVkdd1K/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EPp5D1TPa3WPfKBN5F2JLWHeYcM3GXPrm7X47bVkdd1K/0/3FB7873B41762305642E25A883D0E038F87AB647.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.48.0/22
                IPv6:
                  2804:4b44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267294

    Signature Algorithm: sha256WithRSAEncryption
         25:11:23:3f:2e:2a:53:72:61:8d:6f:23:1d:4c:03:2f:a4:26:
         76:ec:34:6e:4d:16:5c:47:fd:b9:fb:5c:2f:0e:0c:e8:e3:f8:
         c8:5b:12:22:dd:ad:76:66:b4:bb:fc:8a:e5:e0:5a:cd:c7:ee:
         c7:33:fc:7e:16:76:f7:5f:ff:17:62:11:b6:72:37:2f:19:12:
         3e:18:06:85:bf:2a:9a:5b:e7:b7:91:01:87:11:3d:8d:d5:0d:
         32:cd:46:59:0b:c8:40:f7:3a:43:8f:64:1e:77:95:11:0e:7a:
         8c:62:9e:90:44:9e:67:c6:06:a8:2e:02:49:dc:70:2c:a2:8f:
         83:6c:00:24:b5:9c:55:54:23:5e:81:9b:40:0b:c1:c7:49:59:
         47:ad:e5:86:88:72:2b:02:cc:28:24:c3:3d:c2:a9:32:b5:0d:
         ea:d6:98:16:1c:2a:ef:7f:1c:5d:24:90:2f:e6:0b:78:f2:89:
         6f:5b:f2:fa:99:ee:04:47:9f:df:6f:ec:1d:d4:e6:dd:aa:f0:
         24:b8:a7:cb:44:70:bb:85:2c:49:94:63:d2:c3:0d:3b:e1:42:
         a8:65:9b:71:e9:06:a4:eb:b2:17:2f:bf:31:9a:0a:03:94:52:
         7a:32:fd:c4:77:40:a3:d7:2e:de:28:3d:5d:8c:fc:eb:57:32:
         3d:fe:d5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org