Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B3A824543751D831EBBC079432DFEB1ADA047B7D.cer
File:                     B3A824543751D831EBBC079432DFEB1ADA047B7D.cer (raw, json)
Hash identifier:          S98CwpEn3bMMQ2ZqmkNTGtpG+tK86y14bKIZSd+ygyY=
Subject key identifier:   B3:A8:24:54:37:51:D8:31:EB:BC:07:94:32:DF:EB:1A:DA:04:7B:7D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       34457328714C5DEF7C7334305FC1562C4DDF10C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/B3A824543751D831EBBC079432DFEB1ADA047B7D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Oct 2021 14:48:42 +0000
Certificate not after:    Fri 21 Oct 2022 14:53:42 +0000
Subordinate resources:    AS: 265257
                          IP: 168.0.168.0/22
                          IP: 2804:2d04::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:45:73:28:71:4c:5d:ef:7c:73:34:30:5f:c1:56:2c:4d:df:10:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 22 14:48:42 2021 GMT
            Not After : Oct 21 14:53:42 2022 GMT
        Subject: CN=B3A824543751D831EBBC079432DFEB1ADA047B7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5f:32:22:f7:cd:5c:33:25:29:5d:e4:7b:af:
                    35:8e:d2:89:ef:9d:40:21:80:6a:de:aa:29:0f:8b:
                    40:49:57:42:36:f6:0a:1d:63:ef:5e:8e:d2:58:94:
                    f3:ba:ef:b4:3b:05:99:cb:c3:68:ea:b0:4f:83:36:
                    cd:e4:d0:96:ea:e0:5f:b0:03:e9:07:49:f7:50:88:
                    d1:93:d2:16:ed:c7:2a:14:ef:75:a7:b3:6f:6e:a5:
                    0a:a8:c6:a6:e1:6d:cd:fd:69:b3:d4:d4:bf:b0:da:
                    41:ec:af:9c:59:a3:60:9e:41:99:72:51:7e:e9:60:
                    5f:b3:0d:41:80:f8:f0:78:95:38:0e:8e:92:61:a9:
                    f7:88:bd:01:ab:53:8c:85:9a:6c:bd:4a:66:bd:0c:
                    32:25:95:85:61:d5:5e:60:c0:a4:f6:8e:64:ab:2a:
                    54:64:79:b3:aa:17:b4:76:ab:d4:61:7d:dd:dd:89:
                    02:7d:7a:59:70:61:05:8a:3c:2a:2c:82:83:f1:70:
                    d9:77:ee:36:32:8d:98:8d:80:cf:4b:23:ab:5f:9c:
                    7e:c3:5d:e7:84:c3:74:32:d6:d1:4a:67:60:84:92:
                    db:e7:bb:26:27:08:6a:91:d7:04:aa:00:bd:ad:fc:
                    bf:a4:5b:da:90:fe:09:12:3d:e1:2a:1f:8a:b4:1e:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:A8:24:54:37:51:D8:31:EB:BC:07:94:32:DF:EB:1A:DA:04:7B:7D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/0/B3A824543751D831EBBC079432DFEB1ADA047B7D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.168.0/22
                IPv6:
                  2804:2d04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265257

    Signature Algorithm: sha256WithRSAEncryption
         24:a3:92:02:ae:bc:5b:4e:03:36:14:1d:f8:be:e0:d8:e3:3f:
         ff:37:a6:68:68:b0:c9:68:0c:78:3a:63:f7:3f:25:ab:17:ae:
         82:83:7e:81:f1:4d:f5:87:e6:0b:26:a0:7f:af:16:18:1c:3b:
         1b:c3:8d:a1:c2:50:ae:02:dc:cc:b6:c5:bc:7f:30:38:67:c6:
         7d:3f:dd:30:fd:4d:11:1b:8a:0b:aa:d8:bd:ec:73:be:d4:70:
         e4:35:95:8e:0a:44:27:84:c0:77:92:ef:18:a8:67:4c:1f:35:
         b8:f3:48:66:e8:4c:07:6b:62:44:c7:80:15:2b:b8:88:2c:ac:
         31:5e:2d:1d:7a:e8:0c:31:f3:0a:63:65:e5:3d:10:d4:a9:7f:
         69:32:7f:48:2a:b9:25:ce:c3:b6:48:c4:fa:bf:ad:49:d0:76:
         30:8a:92:11:bb:95:ac:33:6a:ed:9a:d9:fd:3c:50:37:37:8b:
         a0:18:93:70:13:af:47:91:4e:4b:6b:3a:d3:aa:b4:b8:88:b0:
         71:ad:a0:71:8d:74:9e:41:de:a4:1f:47:12:6f:f0:8d:87:a6:
         b4:03:5b:af:36:b9:ad:84:7c:77:82:79:40:7a:4e:66:67:d2:
         3c:d4:50:72:23:39:87:39:73:9d:11:9c:91:42:20:47:dd:f2:
         82:5e:fd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:12 2024 by rpki-client on console-ams.rpki-client.org