Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B34D4D8DF92AC04B8CCE4ECEAEBA0184ADE18362.cer
File:                     B34D4D8DF92AC04B8CCE4ECEAEBA0184ADE18362.cer (raw, json)
Hash identifier:          T415O7VkAa9N2himWBxsdEg1nTwkeDSeLPjAGZhkPVE=
Subject key identifier:   B3:4D:4D:8D:F9:2A:C0:4B:8C:CE:4E:CE:AE:BA:01:84:AD:E1:83:62
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3E98D6ABBFC696B4957FC79C76047A3448C53561
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B34D4D8DF92AC04B8CCE4ECEAEBA0184ADE18362.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Sep 2022 21:35:24 +0000
Certificate not after:    Mon 25 Sep 2023 21:40:24 +0000
Subordinate resources:    AS: 61668
                          IP: 131.100.248.0/22
                          IP: 2804:1cac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:98:d6:ab:bf:c6:96:b4:95:7f:c7:9c:76:04:7a:34:48:c5:35:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 26 21:35:24 2022 GMT
            Not After : Sep 25 21:40:24 2023 GMT
        Subject: CN=B34D4D8DF92AC04B8CCE4ECEAEBA0184ADE18362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ac:9c:e0:03:4a:6d:a2:9d:dc:5f:07:5f:9c:
                    07:36:e2:a7:df:d2:56:6f:db:28:50:46:2c:59:32:
                    2f:3c:bf:1b:60:3c:fe:59:1c:4a:0a:ae:d9:8d:e1:
                    60:30:16:e2:af:8f:d6:a5:a6:b5:fe:22:3c:4e:de:
                    4e:ce:a3:58:e7:43:cc:ef:f3:88:28:1e:a9:6d:8d:
                    9c:22:b1:83:41:5e:ed:a6:f3:eb:5f:ed:e9:11:b3:
                    28:50:db:47:c8:81:25:74:ca:72:c8:e0:c7:48:43:
                    3d:19:cb:7b:1f:81:a0:28:94:9a:8b:b3:83:b0:14:
                    a4:88:ab:20:c3:3f:cd:b6:f7:4f:6b:9b:c7:bb:44:
                    e2:ff:cb:3e:99:a1:a4:6c:da:32:a3:b3:10:d4:92:
                    17:b7:5e:1d:8a:01:8a:d4:43:d5:28:7e:75:d7:90:
                    8d:74:18:94:10:f4:c6:56:1f:ce:7a:de:63:0e:bc:
                    3f:c4:8d:26:3b:c8:ad:a8:07:c1:e1:a6:e4:67:a1:
                    e2:b4:6f:a6:f2:18:ec:99:b0:bb:ad:61:e7:ad:f9:
                    af:f3:b6:ba:6f:1d:36:b8:c2:e8:73:b2:f2:5f:c3:
                    87:2e:55:4d:2c:56:3c:f1:b5:a7:35:81:b9:8a:bc:
                    19:f7:07:d2:0a:72:55:91:e8:b6:d6:d1:e2:25:b6:
                    2c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:4D:4D:8D:F9:2A:C0:4B:8C:CE:4E:CE:AE:BA:01:84:AD:E1:83:62
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B34D4D8DF92AC04B8CCE4ECEAEBA0184ADE18362.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.248.0/22
                IPv6:
                  2804:1cac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61668

    Signature Algorithm: sha256WithRSAEncryption
         1c:f3:59:0b:53:12:3a:13:e2:78:7a:cd:be:83:d4:f2:54:64:
         ca:78:24:da:6a:a4:13:4f:c7:75:cc:16:db:68:e9:77:c2:1e:
         24:1b:c1:46:83:c4:13:01:ef:0f:cd:1f:06:e5:bf:97:d2:0f:
         a5:6c:8a:61:92:88:8e:c9:72:e0:4a:2b:27:f7:db:d2:c8:85:
         ab:f4:ac:5f:f1:ca:43:71:46:8e:37:8f:ab:b1:c3:c1:93:49:
         a5:c4:53:e2:c7:9b:96:41:8f:20:18:28:c6:23:86:83:72:1a:
         3b:e1:8c:49:2a:f0:95:54:ba:59:88:13:ae:9a:18:1b:7c:90:
         2a:d7:86:c3:a4:4b:b2:31:dd:8d:f9:54:ee:f9:1f:86:a0:43:
         d4:e6:fb:da:42:fe:d0:a7:fa:6f:e4:bc:37:34:e4:b5:ad:b1:
         fd:06:00:e7:ad:be:d2:e1:7e:b1:91:d6:ef:45:d6:d1:e1:93:
         85:c6:4e:df:ea:5c:59:07:f4:fa:79:10:88:b4:44:0f:56:a5:
         f1:77:5b:ca:6f:93:48:0b:2e:55:8a:62:6f:8d:fd:c1:23:7c:
         3a:c8:f8:c8:19:c5:2f:da:1e:bb:cb:b3:28:94:2d:7b:e1:0a:
         43:44:d6:d8:4b:54:52:7d:85:1d:38:9e:e6:8e:a4:bf:85:29:
         e6:6c:77:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org