Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.cer
File:                     B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.cer (raw, json)
Hash identifier:          tZEPNamCAX/eikjUqSKoIv+5BY0YNt0Kw7zQ9K0HyyE=
Subject key identifier:   B3:E2:17:A2:C3:B7:BE:BB:D1:74:E9:AD:EF:4D:FA:80:67:65:CF:80
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1D20B95AA4D44FCA94C3AFAC65F041396AE290B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Jul 2023 14:18:10 +0000
Certificate not after:    Mon 08 Jul 2024 14:23:10 +0000
Subordinate resources:    AS: 270795
                          IP: 189.36.244.0/22
                          IP: 2804:7188::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:20:b9:5a:a4:d4:4f:ca:94:c3:af:ac:65:f0:41:39:6a:e2:90:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 10 14:18:10 2023 GMT
            Not After : Jul  8 14:23:10 2024 GMT
        Subject: CN=B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:80:e0:2b:97:2e:ab:42:2e:eb:a1:3f:56:de:
                    eb:fd:cd:b4:7c:04:d6:6a:7f:9a:8e:73:99:b1:1a:
                    06:58:77:be:38:98:81:ce:7b:c2:04:2d:81:8d:a3:
                    61:83:d9:f0:9e:65:25:42:af:b8:5b:df:ac:d3:5f:
                    03:50:0f:2d:4e:9c:27:7e:e7:d7:79:3b:20:95:0a:
                    04:c2:37:f1:d7:d6:af:fa:5f:ee:81:60:b2:f4:56:
                    ea:08:42:72:66:9c:61:ab:0a:a2:d8:3b:b0:b9:13:
                    5e:89:09:9a:64:17:ce:c6:2f:30:00:88:87:3d:63:
                    fe:cd:b5:a8:63:3f:01:3f:03:98:ad:a6:13:5b:5c:
                    f9:de:ba:db:b0:07:ce:ef:e5:3a:51:58:d1:b1:c8:
                    52:63:99:19:e3:3b:5e:05:1e:79:43:1f:bb:f9:8f:
                    c0:2e:37:b2:4f:f7:c8:d9:13:21:71:6c:f1:a2:90:
                    c4:7a:67:c6:f2:04:07:a4:86:84:f6:0f:86:55:ff:
                    2e:63:50:6e:69:aa:a5:71:50:65:8f:2c:03:90:4d:
                    6b:b5:1a:3a:b7:6f:b1:cd:1b:e4:1f:8c:09:0f:fd:
                    4a:ea:30:04:eb:38:f5:d1:08:00:13:c9:5d:9b:76:
                    45:9e:31:7f:f2:f2:f1:b5:15:ab:ac:6a:df:9e:a7:
                    e5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:E2:17:A2:C3:B7:BE:BB:D1:74:E9:AD:EF:4D:FA:80:67:65:CF:80
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/B3E217A2C3B7BEBBD174E9ADEF4DFA806765CF80.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.244.0/22
                IPv6:
                  2804:7188::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270795

    Signature Algorithm: sha256WithRSAEncryption
         4b:af:e2:ca:af:43:47:ce:1e:cf:cc:fb:f0:9d:6f:dd:fc:f6:
         53:6c:80:ca:61:63:3e:97:bb:e1:4d:2a:8d:90:04:42:66:40:
         4b:73:9c:71:30:b4:22:4b:f2:4c:19:5b:1b:76:e8:5c:4a:fa:
         4e:bc:16:26:fb:d2:05:1a:a6:a7:15:3d:f9:4a:1b:42:7a:54:
         ff:c1:a0:3b:0a:e7:7c:d0:d1:82:4d:13:53:69:12:8d:7d:8e:
         ff:eb:3f:aa:b1:3b:8c:56:c2:49:98:7c:90:80:08:bc:65:81:
         9c:86:21:62:c7:4e:06:d1:04:70:8f:0d:e5:99:25:77:03:3e:
         d3:a6:c1:56:24:20:fa:ce:66:3d:3b:80:f9:bd:ea:a5:c4:53:
         03:cd:fc:73:ee:21:9b:0a:f0:26:f3:7f:e2:14:4c:dc:f5:4d:
         32:f0:df:ab:70:50:02:ad:00:c6:00:a0:b9:18:9e:3f:11:08:
         94:1f:85:78:8b:d3:82:f7:1c:b1:1e:06:10:11:9c:e5:ae:ac:
         e7:d9:db:9e:fe:44:fb:07:72:5d:7f:70:e9:d2:1f:3c:c0:63:
         05:62:a6:7d:c5:b7:d7:33:43:b5:fa:b3:61:af:3b:ae:c5:fe:
         f8:3d:23:e5:05:9c:fb:cc:94:c7:b7:7a:09:bf:da:a3:b6:de:
         3f:3b:23:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org