Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C35D0B74EAED043F89D8DFEED487B292FBEB32CF.cer
File:                     C35D0B74EAED043F89D8DFEED487B292FBEB32CF.cer (raw, json)
Hash identifier:          2+poulT8Np/UAuHDIla2P3QvO6RwV4BAyH0cD59zb0I=
Subject key identifier:   C3:5D:0B:74:EA:ED:04:3F:89:D8:DF:EE:D4:87:B2:92:FB:EB:32:CF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6B9F25DAAC410F934EEEE8DC428E74917E7AC50F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/C35D0B74EAED043F89D8DFEED487B292FBEB32CF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 01 Apr 2023 14:19:32 +0000
Certificate not after:    Sat 30 Mar 2024 14:24:32 +0000
Subordinate resources:    AS: 265263
                          IP: 168.90.32.0/22
                          IP: 2804:2d20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:9f:25:da:ac:41:0f:93:4e:ee:e8:dc:42:8e:74:91:7e:7a:c5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 14:19:32 2023 GMT
            Not After : Mar 30 14:24:32 2024 GMT
        Subject: CN=C35D0B74EAED043F89D8DFEED487B292FBEB32CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:8a:2d:84:da:d8:7d:1c:72:fa:cd:73:93:2e:
                    e4:92:60:66:be:f3:de:b4:a3:bd:3c:d7:1a:cd:1d:
                    c5:7f:80:a1:7a:7d:15:bf:c0:23:1a:0e:1b:2b:33:
                    62:7b:0c:3a:7f:db:09:8c:fe:fc:e7:8d:84:f6:c6:
                    a7:a4:23:ba:bb:7e:dd:ae:ed:ed:48:5e:cb:22:9a:
                    97:1b:86:d1:d9:49:ee:71:16:d9:80:c0:20:e9:7a:
                    9e:c4:18:f3:52:7d:44:9b:a9:e0:e2:e4:d6:96:c3:
                    c7:9e:aa:b4:bd:be:93:cb:df:d5:47:c3:8a:59:5d:
                    68:8d:e6:2a:47:6e:7d:73:c9:7a:f4:d7:e9:6c:86:
                    0e:0c:30:68:d7:b0:3b:17:71:16:ce:39:d9:41:09:
                    37:9b:30:8c:63:2c:4c:40:87:22:c1:71:6a:c7:87:
                    77:8f:b7:c0:a8:7c:6f:15:90:6f:74:de:74:c8:54:
                    a2:28:41:9b:a2:ff:d3:72:c3:ca:c2:77:87:b2:18:
                    98:26:9c:b1:64:64:07:33:df:6a:ff:96:1e:7e:42:
                    23:d2:11:01:a0:59:cf:68:d7:ca:23:a2:24:58:c7:
                    a1:76:d9:10:0d:d1:13:49:ac:0c:f8:3b:37:ab:67:
                    fa:ea:e6:3c:95:c0:dc:cd:05:d9:9b:5e:9e:56:44:
                    6e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:5D:0B:74:EA:ED:04:3F:89:D8:DF:EE:D4:87:B2:92:FB:EB:32:CF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/C35D0B74EAED043F89D8DFEED487B292FBEB32CF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.32.0/22
                IPv6:
                  2804:2d20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265263

    Signature Algorithm: sha256WithRSAEncryption
         73:ff:73:63:96:40:d6:7b:f8:da:78:9d:c9:65:7e:a5:d0:bb:
         10:61:a7:bb:27:d1:91:74:63:3b:19:15:cf:bf:09:88:6f:14:
         98:19:ea:dd:85:8b:35:36:3d:0d:d9:df:2e:87:8f:9d:80:eb:
         cb:72:18:72:a4:cc:1e:26:5d:6f:30:ff:55:5a:c3:c9:3a:c8:
         f9:ac:4e:2a:ea:66:bb:39:4c:1f:2e:b8:f8:5d:cd:84:c1:55:
         13:3c:e3:6b:87:1d:a6:a6:05:ea:eb:1a:54:55:ad:1e:3d:91:
         a7:35:a3:89:36:94:00:23:29:08:d5:0c:22:d3:c5:b6:12:45:
         4e:c4:9f:a0:c0:cd:f8:f5:9c:38:16:51:0d:08:9f:58:17:4c:
         71:03:ca:01:6f:c3:fe:8f:66:b6:fa:01:fd:2d:48:ab:78:f8:
         0b:0e:a6:86:2e:43:1b:1f:bc:a7:32:5e:67:0f:ff:0f:78:90:
         03:35:75:74:fc:39:b1:73:86:5f:83:81:87:c4:59:40:a3:9b:
         fd:5b:90:85:2f:3d:38:9d:91:db:3f:91:7d:cc:07:20:94:2e:
         9a:a8:ae:04:7d:ef:91:16:4e:57:55:0e:32:d2:8b:bf:d2:6a:
         8f:1e:06:fc:82:6d:59:7b:a9:c4:d7:a6:2d:ea:90:77:72:70:
         a9:29:57:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:14 2024 by rpki-client on console-ams.rpki-client.org