Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B3FCDDE3F86048691E297A0DC56DB10B05AB8036.cer
File:                     B3FCDDE3F86048691E297A0DC56DB10B05AB8036.cer (raw, json)
Hash identifier:          cNxUtDgJvPGYcnfwPZ7y7UpKAB/xlkh8wZ5x2/giY+s=
Subject key identifier:   B3:FC:DD:E3:F8:60:48:69:1E:29:7A:0D:C5:6D:B1:0B:05:AB:80:36
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0D3EEB69AF722FD798696A6BE39D0E748C9366B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/B3FCDDE3F86048691E297A0DC56DB10B05AB8036.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Feb 2024 14:15:46 +0000
Certificate not after:    Mon 10 Feb 2025 14:20:46 +0000
Subordinate resources:    AS: 266207
                          IP: 170.80.36.0/22
                          IP: 216.98.208.0/22
                          IP: 2804:3c60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3e:eb:69:af:72:2f:d7:98:69:6a:6b:e3:9d:0e:74:8c:93:66:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 12 14:15:46 2024 GMT
            Not After : Feb 10 14:20:46 2025 GMT
        Subject: CN=B3FCDDE3F86048691E297A0DC56DB10B05AB8036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c1:5a:fe:11:ec:30:13:d1:0b:38:c6:0e:7c:
                    86:52:30:e4:54:e9:6b:e0:fa:f9:4a:60:93:00:c6:
                    cb:53:73:e2:f5:2b:b0:89:81:9f:18:32:72:f6:22:
                    a6:32:82:04:c8:c9:bf:77:0f:fe:5e:18:08:36:29:
                    b3:48:72:e3:00:c5:98:32:a5:7b:e4:e0:13:03:63:
                    a9:ff:99:66:1b:5b:0b:74:98:6a:2f:08:ad:32:f3:
                    16:8b:36:21:48:6e:1e:9c:a1:d5:52:97:a2:ef:94:
                    ab:82:c6:4f:90:35:18:ef:f6:6c:9f:9e:8f:59:8d:
                    39:93:40:fa:d2:97:57:74:ca:6d:8a:33:c3:23:7b:
                    ee:09:5e:54:6b:71:f8:8c:0e:4b:7f:d1:a6:ec:63:
                    f7:98:36:e0:38:e5:c6:61:ca:07:2d:e9:5a:b1:bd:
                    5b:9e:04:e6:5e:69:f2:eb:c0:a8:c3:d2:16:07:ef:
                    31:d6:06:c3:04:79:6a:ab:3b:24:c1:6d:b6:a3:fd:
                    1b:6b:93:7b:c0:57:a1:a9:d4:5a:68:1c:43:9c:76:
                    01:da:4e:8b:d2:e6:39:9f:1f:7f:0d:fa:84:2d:04:
                    cb:49:88:79:8d:db:7b:4a:54:5c:c5:18:70:fc:0f:
                    0c:87:fe:20:2a:5f:50:b4:b1:86:34:36:56:b6:5b:
                    7d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:FC:DD:E3:F8:60:48:69:1E:29:7A:0D:C5:6D:B1:0B:05:AB:80:36
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/B3FCDDE3F86048691E297A0DC56DB10B05AB8036.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.36.0/22
                  216.98.208.0/22
                IPv6:
                  2804:3c60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266207

    Signature Algorithm: sha256WithRSAEncryption
         98:bd:36:40:26:5c:64:c6:75:6e:0d:ef:44:23:6c:45:d8:e7:
         99:d8:c5:12:7f:40:6f:a6:5b:ce:03:3e:ff:9c:69:30:1e:1c:
         56:16:f9:67:90:1b:0b:14:5a:ea:a4:a5:c2:ef:2a:7e:e8:33:
         cf:e8:a2:88:0d:03:eb:4e:ad:48:ec:fb:81:5d:36:6e:a4:7b:
         9a:de:37:ba:ca:56:cb:38:cc:d3:57:6f:4f:29:2b:e8:be:ed:
         20:75:89:9f:8a:af:70:b3:3a:0b:44:ca:c2:95:f2:9f:17:dd:
         65:7a:fe:4e:06:a9:be:f6:ed:87:ef:96:7d:63:e4:8f:f0:ee:
         85:1a:6f:77:ed:2a:fb:56:56:f4:df:a3:94:05:6e:86:5f:45:
         a3:96:58:36:d3:82:58:a3:6e:c4:6d:f4:20:84:a9:c2:00:59:
         c1:11:09:58:15:6b:f0:65:41:c2:c9:ef:55:82:04:de:fa:dc:
         13:82:cb:7e:fd:00:b1:b0:71:d3:82:ab:d7:c1:c5:5c:22:05:
         be:00:42:bf:10:eb:83:62:39:bf:80:f2:01:9c:4d:71:26:d4:
         94:46:f3:1b:2e:51:6d:8e:d4:88:74:12:3d:d5:95:1f:4f:43:
         ed:e7:f5:5d:54:31:d3:14:d0:af:4e:e9:24:11:4a:63:a6:1f:
         46:83:9b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:12 2024 by rpki-client on console-ams.rpki-client.org