Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD.cer
File:                     B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD.cer (raw, json)
Hash identifier:          9FO/hN1ttNGMsD5ynvAalM4/1Hkj2okc+ZO7xbGl8I4=
Subject key identifier:   B3:DC:EA:24:6C:36:CB:EF:4D:EA:95:90:9D:08:AC:33:1E:A4:BD:AD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E6E984577F3D34BA51A115EA26CCEE22B864114
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Mar 2024 14:06:33 +0000
Certificate not after:    Thu 13 Mar 2025 14:11:33 +0000
Subordinate resources:    AS: 268528
                          IP: 45.162.216.0/22
                          IP: 2804:5298::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:6e:98:45:77:f3:d3:4b:a5:1a:11:5e:a2:6c:ce:e2:2b:86:41:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 14 14:06:33 2024 GMT
            Not After : Mar 13 14:11:33 2025 GMT
        Subject: CN=B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:36:80:21:20:42:b7:44:fe:07:9b:88:08:61:
                    5e:51:22:68:87:69:56:26:d4:7a:de:c7:c4:7e:f9:
                    9f:4f:0f:89:d0:5a:1c:ca:55:26:27:fb:d3:03:59:
                    1b:d5:ef:65:8f:91:62:20:33:49:59:12:50:5a:6b:
                    5f:fa:4d:a9:0c:83:c1:27:58:8a:d6:5f:26:a2:45:
                    72:7e:de:5c:dd:ad:6d:3e:78:4c:20:56:c5:ca:f9:
                    41:09:40:b2:e3:02:aa:13:6d:39:3c:76:79:b0:a3:
                    58:99:06:e6:8c:bf:a9:5e:5c:83:a6:c9:4a:f8:37:
                    de:40:45:dd:d1:1e:6a:ae:67:da:cf:2e:44:4c:f8:
                    a3:20:ee:87:2c:9c:43:0a:bd:c5:f0:78:70:04:b0:
                    3a:6e:60:fa:2b:6e:3f:4c:ad:93:5e:4f:92:7e:91:
                    b3:b2:6c:e8:e7:54:e3:6f:af:00:b2:37:50:1e:23:
                    b0:b5:14:8c:06:73:87:49:d1:44:30:55:5b:6b:03:
                    9b:4b:85:ba:a4:bf:62:f4:e0:f0:c6:35:00:1e:6c:
                    58:c4:c0:85:b2:3b:9e:02:d2:c4:c3:b5:fa:1a:79:
                    2f:2d:99:f3:04:3b:ad:54:79:b5:e2:74:b1:ac:d5:
                    fb:34:8d:19:4c:1a:1b:67:31:7b:8d:6e:e2:21:44:
                    9a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:DC:EA:24:6C:36:CB:EF:4D:EA:95:90:9D:08:AC:33:1E:A4:BD:AD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/B3DCEA246C36CBEF4DEA95909D08AC331EA4BDAD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.216.0/22
                IPv6:
                  2804:5298::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268528

    Signature Algorithm: sha256WithRSAEncryption
         24:99:fd:7a:d2:2a:d6:3a:d4:50:d2:90:f1:d4:3f:53:e5:1e:
         95:5b:f2:60:68:50:97:c3:f6:b7:ca:46:1d:4b:f1:fd:a5:32:
         db:99:09:cd:b6:89:94:9e:43:aa:d2:45:7b:7a:90:70:78:83:
         b0:b3:60:64:53:35:87:dd:6c:cf:fb:c5:22:c0:fb:40:2e:ae:
         23:22:8a:4d:c3:4b:47:9a:e9:36:b4:25:8e:1a:39:fc:b2:cb:
         33:bf:c7:b9:38:10:41:91:9d:16:da:37:8a:77:2d:81:98:44:
         a2:ce:13:38:a7:0c:36:2d:4b:63:71:1b:82:b8:c9:4b:a7:10:
         37:0c:b3:5e:86:bc:b1:d1:65:0d:bc:4d:4a:48:87:33:18:71:
         7c:38:e0:2f:95:13:2a:d2:b3:9e:ac:b1:f1:6a:1f:8e:18:38:
         bd:d9:19:f8:ff:85:79:d5:1f:50:be:f0:57:a3:34:8e:b3:31:
         fb:60:06:04:5e:b1:bf:cd:18:03:98:22:72:75:f9:28:c9:4f:
         3b:67:3b:4f:47:92:4d:b4:18:bb:bd:f7:9b:97:42:ab:cc:cc:
         54:82:7d:84:9b:ae:e9:ab:5a:11:33:85:9f:12:d3:39:29:34:
         69:47:c0:e0:06:c3:7a:e8:0d:83:bb:5b:1c:19:7a:38:a2:df:
         d8:a6:16:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:12 2024 by rpki-client on console-ams.rpki-client.org