Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B3719260B5988F2DEBD4CE05B11AB6508226A9AB.cer
File:                     B3719260B5988F2DEBD4CE05B11AB6508226A9AB.cer (raw, json)
Hash identifier:          4+oGTS4J6m5pcMkSkMOwHvKgttdjeJQUgbcmdVpW8+w=
Subject key identifier:   B3:71:92:60:B5:98:8F:2D:EB:D4:CE:05:B1:1A:B6:50:82:26:A9:AB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4F57DFF41E7C628218AC899BD3A0DC46A65DD911
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/B3719260B5988F2DEBD4CE05B11AB6508226A9AB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 16 Dec 2023 00:38:13 +0000
Certificate not after:    Sat 14 Dec 2024 00:43:13 +0000
Subordinate resources:    AS: 271200
                          IP: 200.71.82.0/23
                          IP: 2804:77cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:57:df:f4:1e:7c:62:82:18:ac:89:9b:d3:a0:dc:46:a6:5d:d9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 16 00:38:13 2023 GMT
            Not After : Dec 14 00:43:13 2024 GMT
        Subject: CN=B3719260B5988F2DEBD4CE05B11AB6508226A9AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7f:ef:e7:e1:9c:65:4e:7e:ad:14:83:dd:d0:
                    e7:e5:ba:35:39:1e:12:4c:8e:f9:c1:f3:ed:5c:a1:
                    89:d8:35:0e:24:40:80:94:30:51:56:ee:e3:1c:aa:
                    6a:57:ed:de:06:1f:18:b5:c9:ed:2d:1d:f9:08:6c:
                    3e:82:45:ce:cd:95:01:57:9c:1c:08:c2:a8:8b:36:
                    67:7d:c7:9b:39:ad:d3:c8:8b:ce:aa:e6:a4:b5:1c:
                    be:9d:2c:61:12:81:ef:bf:f4:72:fb:cb:62:c9:12:
                    53:f2:05:48:46:d3:dd:06:82:5e:44:f7:55:6a:72:
                    7b:62:a1:f3:ca:f2:57:1f:c6:eb:bb:9a:02:fa:98:
                    8e:a6:17:6d:02:28:2b:36:ca:9d:55:27:8a:d8:d2:
                    a9:c5:d9:e1:62:1b:e4:e6:03:7d:44:89:ef:6e:3f:
                    ae:d1:a9:25:fb:ee:19:c0:c7:5d:87:d3:58:90:fe:
                    be:8b:3f:63:af:15:de:74:24:7e:e2:8f:1b:54:3b:
                    12:29:bd:7a:de:69:5c:94:39:47:5d:3f:ff:50:7f:
                    a6:ee:42:48:08:e2:60:6a:01:e1:0d:97:89:8b:d0:
                    7b:dd:09:cf:8d:2a:4b:7f:bf:88:28:1d:a5:26:23:
                    6f:d7:fc:ae:dd:b8:6b:91:b7:fc:ad:f8:a1:1f:71:
                    f4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:71:92:60:B5:98:8F:2D:EB:D4:CE:05:B1:1A:B6:50:82:26:A9:AB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/B3719260B5988F2DEBD4CE05B11AB6508226A9AB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.82.0/23
                IPv6:
                  2804:77cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271200

    Signature Algorithm: sha256WithRSAEncryption
         1d:fe:38:22:58:67:64:c2:22:5b:3b:45:d8:c8:7c:9b:14:83:
         26:21:f9:da:fb:71:6b:41:e4:51:74:82:9d:dd:e4:ca:36:6a:
         29:62:05:83:36:a2:cd:82:3c:29:0a:c3:6e:40:22:27:65:66:
         bc:9d:78:ae:ef:c9:f2:5c:88:0e:67:2f:0c:c1:5c:4e:2e:b9:
         f3:bf:13:9b:7b:32:ee:53:08:23:92:64:6f:30:f2:b0:f9:93:
         20:0a:c0:58:8d:f1:c8:e9:b1:c4:b9:7b:0d:58:61:87:c6:e3:
         2c:a8:b8:a2:be:7a:69:c8:21:17:48:99:08:a5:97:5d:98:7e:
         93:5d:fc:f8:2c:d9:84:8e:21:c1:cf:1d:b7:31:96:b5:b8:3b:
         e7:91:af:97:79:61:7c:0d:8a:9a:bb:44:9a:dc:27:01:e0:2d:
         08:f2:7e:57:e9:ca:e6:43:31:12:07:4a:d5:47:ae:8e:98:04:
         c9:0e:07:a1:4a:17:c4:2b:c3:63:c6:02:c8:d5:ab:33:6c:71:
         cb:08:33:fc:25:24:2c:bf:6d:4d:3b:99:82:90:fe:df:78:8b:
         b5:e5:79:4a:38:9d:6f:3b:7a:ee:04:36:cd:5b:d1:7b:e4:1e:
         75:1d:be:f4:a5:88:93:39:b8:4b:76:2d:61:4f:11:6b:f1:8d:
         27:33:f6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org