Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/843E3AF31FB13A1123493AF52A20527B53177CBD.cer
File:                     843E3AF31FB13A1123493AF52A20527B53177CBD.cer (raw, json)
Hash identifier:          bqDP1pSiEz8k5xC3HKUJrAUsO9A4cLrB/Ypjod15hxY=
Subject key identifier:   84:3E:3A:F3:1F:B1:3A:11:23:49:3A:F5:2A:20:52:7B:53:17:7C:BD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       03C3FE2553C3D4F664701C5697D622F1214E3497
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/y3nNEtb1v1a5AfB7bXittXJYAQacUuVpRCZSSNhaKKY/0/843E3AF31FB13A1123493AF52A20527B53177CBD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/y3nNEtb1v1a5AfB7bXittXJYAQacUuVpRCZSSNhaKKY/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Jan 2023 16:17:21 +0000
Certificate not after:    Mon 08 Jan 2024 16:22:21 +0000
Subordinate resources:    AS: 52577
                          IP: 177.86.216.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c3:fe:25:53:c3:d4:f6:64:70:1c:56:97:d6:22:f1:21:4e:34:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  9 16:17:21 2023 GMT
            Not After : Jan  8 16:22:21 2024 GMT
        Subject: CN=843E3AF31FB13A1123493AF52A20527B53177CBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:84:4e:91:24:07:a7:71:2d:f9:45:e3:d6:9e:
                    bb:12:60:28:4b:0c:cc:98:c7:d0:b8:f8:d0:ff:44:
                    77:09:49:c2:b4:e4:45:f2:f7:25:f3:53:fb:9f:98:
                    d1:73:f4:1b:62:8a:7d:8c:76:79:75:cf:d4:f7:0c:
                    a0:04:2e:35:87:9a:cb:c6:c3:84:08:f0:83:6a:df:
                    f7:db:33:92:d9:af:8d:d5:1f:95:59:a7:32:10:e6:
                    d7:22:61:eb:20:bb:73:24:5b:79:a0:6d:72:f7:65:
                    4c:db:18:dc:67:15:b8:22:16:d3:95:5d:61:00:93:
                    e1:8f:b2:1b:89:aa:c1:94:56:3b:31:5b:3d:27:b6:
                    21:96:63:ce:f0:b9:f9:35:06:d3:89:84:9a:5f:0a:
                    49:a4:c9:6d:73:fb:c7:74:f0:e1:2f:34:0c:82:a4:
                    0c:93:50:f8:4f:38:8d:0b:08:86:81:5d:87:f9:1d:
                    7f:f9:0c:72:ad:ce:6a:2c:33:d2:7b:c7:d1:b3:71:
                    e2:51:42:34:27:55:1c:44:ef:27:88:4a:9f:da:df:
                    6d:84:20:0c:3b:2b:08:9d:1d:a2:07:cf:2c:a5:20:
                    4f:05:1b:42:aa:24:3d:bd:a2:ba:e2:3a:34:16:4b:
                    39:1d:7b:83:fe:03:89:f8:b6:4e:70:bd:35:40:8b:
                    5f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:3E:3A:F3:1F:B1:3A:11:23:49:3A:F5:2A:20:52:7B:53:17:7C:BD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/y3nNEtb1v1a5AfB7bXittXJYAQacUuVpRCZSSNhaKKY/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/y3nNEtb1v1a5AfB7bXittXJYAQacUuVpRCZSSNhaKKY/0/843E3AF31FB13A1123493AF52A20527B53177CBD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.216.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52577

    Signature Algorithm: sha256WithRSAEncryption
         48:8f:d7:b0:a3:05:91:73:44:22:68:a6:ec:da:a0:ca:ae:f6:
         10:75:98:ed:cd:06:3c:02:47:63:6a:a8:bf:68:e1:a2:92:36:
         0f:c1:84:e7:51:89:7b:fb:6b:c6:5c:d9:a9:cd:e8:bb:d4:50:
         8d:5f:52:c7:05:4b:fb:01:01:bf:82:e4:ce:ca:ac:b1:45:23:
         71:5a:82:18:d0:e3:71:82:81:84:c9:d5:3a:1a:25:4d:ca:e9:
         40:be:0a:20:b0:21:75:17:7c:67:85:e5:35:8a:73:1e:0a:c1:
         f4:75:6a:3b:a0:38:9b:65:22:9b:b4:4d:72:c4:29:ee:72:f3:
         a5:77:2b:a9:2b:98:f0:64:e9:e8:a4:cb:3d:cc:73:0a:c4:96:
         89:45:b3:21:7b:56:6f:d0:09:15:68:90:21:e1:b0:87:54:09:
         ec:f5:b7:36:26:7b:25:ec:f3:3a:81:7b:29:a6:eb:3b:00:70:
         31:85:a8:13:c5:13:dc:67:59:71:37:83:ab:3b:57:35:09:a0:
         e2:4a:42:1d:03:b6:17:98:dd:fe:4e:9e:79:50:73:3b:e0:96:
         c8:3c:d1:53:ef:d2:29:56:51:31:49:de:4e:80:33:51:98:c4:
         fd:89:9d:dd:5b:01:ff:5d:a7:70:cb:50:01:da:79:68:fe:02:
         55:a7:d0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org