Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3FBC83188425B1A07D023E14C2E8A1ECC3DE51BE.cer
File:                     3FBC83188425B1A07D023E14C2E8A1ECC3DE51BE.cer (raw, json)
Hash identifier:          u8vvEYVnSAhdDEvV2yvoRMiYZoXv0pGbcwTHIA8+xEo=
Subject key identifier:   3F:BC:83:18:84:25:B1:A0:7D:02:3E:14:C2:E8:A1:EC:C3:DE:51:BE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       041115CFDB32FD3972EB18D23F8ACFB9F0B5EBAF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0/3FBC83188425B1A07D023E14C2E8A1ECC3DE51BE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Jun 2022 15:43:16 +0000
Certificate not after:    Thu 22 Jun 2023 15:48:16 +0000
Subordinate resources:    AS: 265147
                          IP: 143.255.128.0/22
                          IP: 2804:2b54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:11:15:cf:db:32:fd:39:72:eb:18:d2:3f:8a:cf:b9:f0:b5:eb:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 23 15:43:16 2022 GMT
            Not After : Jun 22 15:48:16 2023 GMT
        Subject: CN=3FBC83188425B1A07D023E14C2E8A1ECC3DE51BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:41:f0:b9:f7:e3:b7:94:c0:16:7f:26:a2:b8:
                    2c:b6:7c:69:2b:c2:1c:e9:a5:29:c0:03:76:db:be:
                    eb:38:55:b6:bf:e2:88:b6:90:39:be:4a:c0:fc:b1:
                    60:c7:d1:31:58:ed:e0:48:4e:1b:8d:2d:40:49:49:
                    bc:7a:6b:24:fe:f6:c6:44:e6:a2:05:ab:c2:12:06:
                    de:e3:17:d5:4d:bd:5f:af:f3:6a:4d:26:ef:0c:9a:
                    8a:7a:8f:27:eb:a5:c6:d5:1a:5f:85:78:82:69:1e:
                    6d:f6:1a:d5:98:97:9b:9d:73:25:1b:96:7b:90:fa:
                    9b:74:70:ce:e6:e2:86:93:ed:36:e9:df:2b:a0:0b:
                    6c:89:51:bd:84:62:bf:a0:76:34:4a:0d:4e:d3:92:
                    df:1e:1c:c0:87:81:3f:55:53:b9:02:1e:56:1a:b2:
                    6d:ef:00:34:b0:91:1d:2d:71:6d:20:19:a1:5f:c5:
                    3d:40:20:18:d5:69:3b:b1:9f:02:e4:0f:2a:bf:25:
                    7a:c3:96:7f:b5:db:a0:f4:f5:43:0b:67:dd:c7:c7:
                    8f:47:29:09:c4:e8:9a:d6:20:57:48:46:97:64:6c:
                    57:c6:77:a1:a7:55:37:47:ad:cf:5b:7a:fb:06:e7:
                    1d:c6:a9:2e:24:69:0a:0b:de:3a:ef:fe:d5:cb:de:
                    6f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:BC:83:18:84:25:B1:A0:7D:02:3E:14:C2:E8:A1:EC:C3:DE:51:BE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0/3FBC83188425B1A07D023E14C2E8A1ECC3DE51BE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.128.0/22
                IPv6:
                  2804:2b54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265147

    Signature Algorithm: sha256WithRSAEncryption
         39:e5:5c:47:17:57:c6:cd:8b:a9:c8:41:28:1e:35:fa:41:18:
         ba:20:3a:55:0f:95:d0:3a:71:7e:cd:c6:5d:a3:e2:4f:36:79:
         07:ed:48:da:b8:7e:7a:70:22:f2:3e:44:4b:95:45:db:c5:be:
         ae:70:d7:9f:a1:0f:f8:2e:fd:24:35:8c:e0:75:65:34:ed:8f:
         3f:b9:56:36:e4:ce:8e:58:c6:88:a2:5a:b8:f3:33:32:e0:61:
         08:66:79:aa:a9:5c:e1:d2:7a:b6:57:8f:a5:d6:5d:df:9d:0f:
         47:8b:82:f9:ca:48:b6:d8:fe:94:9f:9b:95:d7:96:98:7e:4f:
         61:09:9e:36:76:e8:69:33:7f:ff:fb:bf:66:e2:9c:8c:ad:67:
         b5:40:5b:1b:4e:d2:83:35:33:92:62:2b:31:19:88:4a:3b:64:
         8d:98:68:f0:54:6c:98:33:db:97:a0:bf:b6:c7:0c:33:7b:cc:
         1a:b3:77:6e:cd:ab:2f:d4:d3:26:5e:6d:c7:52:fb:6f:0d:c2:
         a2:90:ab:39:f3:33:9a:31:ff:a0:4c:00:f4:b8:8f:71:2f:3c:
         8b:65:ec:a1:16:4c:e5:ff:bf:78:9b:ee:68:e9:e6:d5:a5:ec:
         d3:fc:97:6e:5f:ad:32:a7:80:d8:50:58:c9:e7:9e:01:55:49:
         70:73:8d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org