Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5.cer
File:                     A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5.cer (raw, json)
Hash identifier:          JtgPUDtiOwMP3wBXU9hDQWsOb/5PuydNCfB4pyTOpxc=
Subject key identifier:   A3:EF:70:86:C3:F6:DD:56:AC:E7:C8:59:6F:89:BC:53:DA:07:5E:A5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3F83F37248C0E3B125F645C3F934A57F2C56A15F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/0/A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Oct 2023 12:33:02 +0000
Certificate not after:    Tue 01 Oct 2024 12:38:02 +0000
Subordinate resources:    AS: 271376
                          IP: 192.140.20.0/22
                          IP: 2804:7a84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:83:f3:72:48:c0:e3:b1:25:f6:45:c3:f9:34:a5:7f:2c:56:a1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  3 12:33:02 2023 GMT
            Not After : Oct  1 12:38:02 2024 GMT
        Subject: CN=A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5d:51:50:ee:1e:fa:26:b6:4b:74:a1:9a:8a:
                    fe:8f:59:3d:e2:00:db:a7:28:90:22:e2:87:0f:11:
                    a0:5b:e2:a9:eb:32:f7:66:9c:b0:20:5b:8a:1d:e6:
                    97:05:df:2f:de:ec:80:50:2e:68:54:4e:5a:f2:d4:
                    74:d7:91:cf:42:3d:17:3d:95:f0:1a:2f:5d:cb:d5:
                    48:a5:63:e9:ff:b6:5e:32:79:0b:37:01:76:df:3f:
                    01:e7:e2:ba:24:07:8e:24:9b:56:99:24:53:18:56:
                    3d:f7:11:a4:dd:35:35:c2:5a:97:47:07:83:e4:c8:
                    67:aa:03:21:83:cd:6c:6d:ba:9d:48:72:23:13:93:
                    7e:38:e1:70:c9:8b:e1:42:4e:83:cc:b1:ec:32:00:
                    a9:7c:47:90:ea:c8:1e:e3:06:5a:ce:86:c8:cc:b6:
                    f2:00:d8:43:aa:14:34:25:09:40:2b:f4:1a:05:84:
                    27:cf:73:58:c5:a8:ae:05:00:19:4f:70:4c:35:e5:
                    24:85:37:90:6d:f4:99:07:d3:a2:03:7c:57:93:4f:
                    cc:2c:bc:e1:29:5f:12:e8:09:0e:d3:23:d5:c8:ec:
                    d5:8d:07:00:66:68:08:39:2c:da:7c:61:3d:c6:86:
                    0b:bd:31:4c:d6:26:84:7a:86:1b:e6:de:31:52:04:
                    93:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:EF:70:86:C3:F6:DD:56:AC:E7:C8:59:6F:89:BC:53:DA:07:5E:A5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DQNWaGBLkLHnCh65yNU3J4T13qDV1RJJhqxHjHC8TB25/0/A3EF7086C3F6DD56ACE7C8596F89BC53DA075EA5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.20.0/22
                IPv6:
                  2804:7a84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271376

    Signature Algorithm: sha256WithRSAEncryption
         7b:36:78:80:75:1a:ae:66:73:0d:e0:9b:78:fb:22:4f:2f:f4:
         69:a2:8a:3d:f6:60:44:fb:9e:7d:cd:bb:b3:f0:dc:23:77:e3:
         2b:67:8c:8d:fd:4f:d5:2b:98:4a:2e:b7:f0:87:80:0c:5b:b2:
         26:ab:12:1f:23:d5:5e:a0:01:b8:43:de:5b:61:96:e1:e7:25:
         ab:90:85:5d:f7:91:af:37:c8:5c:bb:fe:0e:c4:94:c2:ee:fb:
         a5:52:62:4a:28:45:b7:c9:64:c1:f5:8c:7e:a0:27:c0:32:10:
         52:bf:59:67:29:7b:ee:48:87:66:ec:fc:79:58:e3:80:77:ac:
         a4:d4:ab:13:f4:fe:f0:0d:e6:a5:b4:ce:0b:6e:42:60:e6:44:
         67:ce:11:70:f9:c3:da:0e:4a:18:0c:d3:5e:2f:17:41:40:61:
         da:33:88:42:35:49:e3:73:65:6e:02:11:66:97:d9:9a:91:7e:
         31:fc:32:65:44:52:ca:07:30:d3:4b:82:48:a1:55:05:24:6c:
         d5:c7:f6:68:6a:82:e3:10:c0:9d:9f:b4:08:9b:59:68:80:b5:
         40:27:78:89:34:12:c3:61:13:a3:af:e7:9a:c4:78:80:26:ad:
         f2:f7:22:ce:ee:52:ed:16:5e:23:05:64:ba:1e:e0:21:cc:fb:
         21:a2:0e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org