Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3FF11FCEDE3EF358DA0D7120F9634B6A914C8171.cer
File:                     3FF11FCEDE3EF358DA0D7120F9634B6A914C8171.cer (raw, json)
Hash identifier:          PBHXwAFUC8fguQfj4/xJOS7/f69iOsRzoOKKi2BkAMQ=
Subject key identifier:   3F:F1:1F:CE:DE:3E:F3:58:DA:0D:71:20:F9:63:4B:6A:91:4C:81:71
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0D2551122D3EA9969B10BF7AEB197E022D0797FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/3FF11FCEDE3EF358DA0D7120F9634B6A914C8171.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Aug 2022 13:49:38 +0000
Certificate not after:    Mon 21 Aug 2023 13:54:38 +0000
Subordinate resources:    AS: 264280
                          IP: 138.121.44.0/22
                          IP: 2804:256c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:25:51:12:2d:3e:a9:96:9b:10:bf:7a:eb:19:7e:02:2d:07:97:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 22 13:49:38 2022 GMT
            Not After : Aug 21 13:54:38 2023 GMT
        Subject: CN=3FF11FCEDE3EF358DA0D7120F9634B6A914C8171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0d:6c:f0:d4:f5:b2:f4:ee:35:c0:cd:68:59:
                    ef:af:a8:02:42:00:e8:ce:07:e3:48:e9:26:3a:06:
                    eb:7d:4e:a4:33:73:35:d2:43:85:6d:67:f5:98:22:
                    e5:38:47:fd:19:e9:cb:51:a0:35:18:ce:2b:d5:f0:
                    2a:3b:9d:8e:e7:ec:ab:a2:0a:c3:d6:cc:b3:45:c1:
                    7d:df:98:36:a8:90:f0:a7:42:a6:e5:94:33:5d:ef:
                    84:1b:b4:48:84:89:7a:18:f0:9d:3e:a2:fe:1a:04:
                    a6:c9:75:08:b7:4f:76:42:24:c2:38:93:25:a3:4a:
                    24:83:5b:f7:33:35:2c:65:08:23:53:2a:3d:f9:5a:
                    db:f0:4f:15:6e:c7:8d:9b:f0:d5:fd:82:a8:ed:f8:
                    45:dc:ff:9b:36:38:80:ba:3f:83:93:c6:ec:8d:b6:
                    35:6f:2a:47:2a:00:7d:b8:68:26:59:db:19:ee:a1:
                    b6:bd:2d:19:a3:9f:fd:8c:0c:c1:15:ab:d2:ab:bc:
                    83:3c:cb:46:53:7c:e5:25:12:48:8e:75:c7:d6:a8:
                    9f:e4:17:4f:19:a7:10:d3:18:a8:ab:1e:4c:07:71:
                    70:1b:be:8d:45:4b:bb:eb:39:7c:e0:b2:2e:8b:47:
                    01:93:ef:13:ce:19:ad:6c:02:82:e3:61:95:ea:84:
                    72:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:F1:1F:CE:DE:3E:F3:58:DA:0D:71:20:F9:63:4B:6A:91:4C:81:71
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/3FF11FCEDE3EF358DA0D7120F9634B6A914C8171.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.44.0/22
                IPv6:
                  2804:256c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264280

    Signature Algorithm: sha256WithRSAEncryption
         aa:f8:aa:ff:05:68:6f:b7:dd:60:a4:51:3f:21:f9:12:04:e8:
         59:7f:ef:64:e6:07:a0:7d:a1:a4:54:0b:87:ac:2f:ae:29:f1:
         e1:1f:d4:5a:d9:27:f9:5d:c9:95:25:95:a8:9b:63:ba:ab:0d:
         9e:d2:bb:d6:1b:b9:e9:12:e5:dc:ac:bf:49:9d:30:04:0b:c8:
         00:54:f9:68:93:35:c7:78:27:13:18:e0:e4:f8:23:4f:3d:09:
         05:e9:c4:ec:71:04:11:f3:34:7a:62:f4:e8:e0:78:ad:7e:bd:
         db:ab:e6:d7:cb:94:97:1e:5b:81:c9:0d:ad:90:77:fc:22:95:
         1f:04:87:24:16:2e:71:52:df:94:cf:a7:8b:d4:3a:d1:c1:a0:
         09:22:1a:09:d6:43:b0:ed:43:5c:ae:51:c6:80:ae:27:49:cd:
         7d:84:5c:7f:d3:9b:b8:12:00:74:34:d4:82:02:25:fc:33:bc:
         03:32:c3:9b:a7:eb:44:20:7c:43:99:af:6d:f1:78:6f:72:22:
         a9:0c:51:4a:d9:98:fe:cb:82:d9:fc:60:a3:34:6d:dd:42:5b:
         ab:6d:02:48:53:9d:db:8d:90:4c:e9:00:44:34:ce:2e:d9:a4:
         0a:7d:78:6e:c9:02:99:02:20:cf:7c:da:d3:86:a7:42:aa:86:
         ba:3b:86:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org