Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3FFCB7BA583D74E3ADF0384AE1FB3570755A05A2.cer
File:                     3FFCB7BA583D74E3ADF0384AE1FB3570755A05A2.cer (raw, json)
Hash identifier:          wMBJeSGekQKaCIugFT+VHOg+QtzlWefjCDoAiZ9hoeU=
Subject key identifier:   3F:FC:B7:BA:58:3D:74:E3:AD:F0:38:4A:E1:FB:35:70:75:5A:05:A2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4C01F0835E29D8309EB57825E32E59906527C32F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HdqJ96QzucASWp6GSoeSsvZwPuKjyARZD9GBk7Xg2kau/0/3FFCB7BA583D74E3ADF0384AE1FB3570755A05A2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HdqJ96QzucASWp6GSoeSsvZwPuKjyARZD9GBk7Xg2kau/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 16:33:49 +0000
Certificate not after:    Thu 12 Sep 2024 16:38:49 +0000
Subordinate resources:    AS: 265038
                          IP: 170.150.200.0/22
                          IP: 2804:31cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:01:f0:83:5e:29:d8:30:9e:b5:78:25:e3:2e:59:90:65:27:c3:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 14 16:33:49 2023 GMT
            Not After : Sep 12 16:38:49 2024 GMT
        Subject: CN=3FFCB7BA583D74E3ADF0384AE1FB3570755A05A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c2:b8:35:6a:d7:a8:4b:c0:08:33:c3:8c:c5:
                    b7:e6:d4:81:1c:8e:d1:53:ac:ff:ce:74:c2:ff:2e:
                    3e:56:3e:d8:bd:21:ed:5f:78:62:64:71:ce:96:c6:
                    b2:df:d4:5b:9d:bf:75:ed:25:b2:1d:11:35:81:40:
                    b0:24:0a:38:23:03:88:5e:29:fc:1d:6d:fb:4f:4d:
                    23:9f:e9:20:e7:19:2c:14:ec:8d:db:6e:84:ec:ff:
                    d3:79:97:98:c6:d7:97:47:13:e9:f9:20:69:41:86:
                    f5:4e:22:34:99:25:b5:f7:44:a5:3d:5d:a1:26:6e:
                    ea:b0:dd:09:e4:a9:6f:d1:d0:64:7c:59:e1:85:77:
                    2f:ca:46:a0:0f:45:60:79:0c:13:2b:4e:e5:61:be:
                    15:d8:9d:d4:56:f9:ee:9f:63:68:ac:37:5a:56:8d:
                    2a:b0:4a:06:c8:4e:c6:29:81:88:f3:6a:92:b5:37:
                    e1:52:7f:ad:74:1a:ec:81:07:8f:e7:da:48:b2:bd:
                    c3:86:3c:78:41:56:7d:2a:70:72:cc:a7:cd:f8:11:
                    8a:0d:6f:49:b7:a9:a5:3e:20:6a:dd:b2:6d:7f:61:
                    9c:6e:4b:6d:40:25:ac:ab:1f:07:06:c2:d4:4a:e6:
                    53:55:10:eb:41:4c:06:ff:d8:a3:08:54:d6:0c:93:
                    cd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:FC:B7:BA:58:3D:74:E3:AD:F0:38:4A:E1:FB:35:70:75:5A:05:A2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HdqJ96QzucASWp6GSoeSsvZwPuKjyARZD9GBk7Xg2kau/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HdqJ96QzucASWp6GSoeSsvZwPuKjyARZD9GBk7Xg2kau/0/3FFCB7BA583D74E3ADF0384AE1FB3570755A05A2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.200.0/22
                IPv6:
                  2804:31cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265038

    Signature Algorithm: sha256WithRSAEncryption
         5f:57:96:c8:9a:49:75:3d:da:2d:74:f0:2b:0d:d8:fe:93:2a:
         0b:db:0f:87:62:9f:29:39:d2:50:79:81:18:5e:8a:fd:01:67:
         d5:60:00:04:07:b6:f3:02:61:2a:72:5f:de:36:a0:f1:69:2a:
         0c:32:47:80:2f:9e:a5:69:a1:28:8a:2b:3c:5d:57:bc:cf:e7:
         45:9b:4d:2e:df:8a:f9:bc:11:e7:68:4c:ef:59:7a:06:6c:54:
         43:10:ed:71:59:bb:55:34:76:60:bf:5c:a4:14:4d:53:50:0d:
         86:66:d8:c0:4c:23:2b:1d:a8:ba:13:81:5c:bd:20:fa:bb:17:
         a9:49:b9:93:1f:33:25:2f:f8:a5:51:1e:09:98:68:c0:b9:62:
         a9:b1:a4:8a:59:6d:37:8a:40:d3:0b:b4:28:6b:9a:58:4f:68:
         95:2e:36:5c:7b:cf:78:fb:6f:08:26:8c:5a:22:1b:d4:9b:53:
         da:6c:51:ec:12:17:2d:ef:d6:29:2c:66:35:2f:78:f8:0a:fd:
         7b:8a:da:ab:ee:fd:82:ca:fb:a3:84:a3:31:56:34:8a:25:8d:
         36:f0:4e:4b:0e:f0:62:f5:a6:78:97:2c:b4:ee:92:17:d2:e8:
         d9:40:ca:7d:95:27:91:73:0d:32:55:8d:fb:47:2e:16:66:7c:
         9b:e6:ff:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org