Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3FDC1923832B0E865A2C114D108EA9FD2CC22E00.cer
File:                     3FDC1923832B0E865A2C114D108EA9FD2CC22E00.cer (raw, json)
Hash identifier:          yvIIF7cS+bP0FBEST40YeLlf5YZtignPeMpndUn5MzI=
Subject key identifier:   3F:DC:19:23:83:2B:0E:86:5A:2C:11:4D:10:8E:A9:FD:2C:C2:2E:00
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3E050099C8CA365EBC10C1A60C3F5E667AEB89D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JBsWUTUGFZoqa7RCN7mTFH2wrqzxit4J973vH5qsuL34/0/3FDC1923832B0E865A2C114D108EA9FD2CC22E00.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JBsWUTUGFZoqa7RCN7mTFH2wrqzxit4J973vH5qsuL34/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Jul 2022 17:16:51 +0000
Certificate not after:    Thu 13 Jul 2023 17:21:51 +0000
Subordinate resources:    AS: 266562
                          IP: 45.65.164.0/22
                          IP: 2804:3de8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:05:00:99:c8:ca:36:5e:bc:10:c1:a6:0c:3f:5e:66:7a:eb:89:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 14 17:16:51 2022 GMT
            Not After : Jul 13 17:21:51 2023 GMT
        Subject: CN=3FDC1923832B0E865A2C114D108EA9FD2CC22E00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:78:78:54:af:71:e6:15:3a:9d:82:e8:14:
                    55:06:73:8f:89:75:d4:8f:e2:3d:c4:2e:cb:09:3e:
                    65:46:96:bc:c9:7f:25:83:e4:ab:a7:10:82:34:c1:
                    6d:80:87:d9:25:ea:0a:d7:96:55:90:59:b7:70:41:
                    80:57:c2:57:6e:3a:61:69:e9:22:76:16:e5:44:8e:
                    fa:e3:e5:e6:ff:5b:36:bc:85:80:43:52:46:6b:df:
                    b7:d4:48:05:e5:ff:c6:43:ad:30:97:52:d2:61:28:
                    0b:79:c9:61:87:c4:19:a2:84:ca:eb:95:88:9c:cc:
                    a3:cb:61:6b:58:21:32:9f:d3:bb:4f:58:4a:99:d3:
                    d3:37:c3:86:af:c7:e0:3f:03:0b:8d:b6:8d:54:04:
                    af:92:0f:11:5b:1f:e9:d4:86:99:64:87:4f:01:21:
                    e4:db:ba:30:1f:6a:36:b0:dc:22:0a:f7:4b:a1:1d:
                    3f:08:95:97:66:73:cb:51:17:12:23:a8:02:74:4e:
                    b1:e4:b4:40:e5:e8:08:41:59:27:e3:bd:04:c3:6c:
                    83:43:3e:fe:b5:30:39:d4:6f:58:68:6d:b8:a2:9b:
                    08:67:8a:cd:26:36:6c:2a:79:fd:12:00:45:aa:f5:
                    d2:11:43:73:a2:4c:36:49:13:23:f8:69:8d:d1:8d:
                    af:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:DC:19:23:83:2B:0E:86:5A:2C:11:4D:10:8E:A9:FD:2C:C2:2E:00
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JBsWUTUGFZoqa7RCN7mTFH2wrqzxit4J973vH5qsuL34/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JBsWUTUGFZoqa7RCN7mTFH2wrqzxit4J973vH5qsuL34/0/3FDC1923832B0E865A2C114D108EA9FD2CC22E00.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.164.0/22
                IPv6:
                  2804:3de8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266562

    Signature Algorithm: sha256WithRSAEncryption
         6f:95:48:bd:20:e0:e2:4f:2a:05:61:00:af:89:10:bd:c4:e5:
         60:9b:6e:a2:1c:c8:bc:ad:28:93:da:c2:20:d4:6c:17:04:78:
         ed:1d:b7:6f:82:dc:88:2f:34:f3:bf:53:bd:05:2e:53:8a:13:
         a0:fa:38:73:7d:b5:1a:e9:da:6d:90:ca:68:cf:05:27:15:04:
         64:4f:2f:2d:a5:aa:9a:3e:f8:97:6b:21:54:00:1a:15:5d:bc:
         d2:8b:82:65:63:ac:bf:a9:f0:e2:ab:68:96:6e:14:d5:9b:1b:
         fc:03:c7:f4:18:e7:22:7a:ee:27:78:9c:cc:42:60:85:f3:71:
         64:99:42:41:32:7b:26:6a:3e:a9:c6:24:11:93:d8:be:d7:33:
         89:2f:53:aa:c4:87:6d:4b:fa:62:5e:87:3d:77:f8:21:4b:dd:
         95:b5:62:7a:24:0f:5b:52:d9:2a:d7:f1:1f:15:6e:6b:f8:99:
         20:48:ed:3e:03:7e:e0:cf:fd:41:25:e5:20:a4:58:7f:44:a2:
         c2:80:b8:81:d3:1e:3b:5d:57:cb:1e:58:d6:bc:16:83:d6:62:
         35:5d:83:b1:3d:87:28:42:d5:08:ee:ef:49:0a:d6:58:19:b3:
         b3:f8:e9:d3:fb:b2:73:54:77:3b:67:16:92:d9:ee:a4:15:cd:
         d0:bd:06:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org