Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C3A846BD47B3028F6CA20C2382346700F68779F6.cer
File:                     C3A846BD47B3028F6CA20C2382346700F68779F6.cer (raw, json)
Hash identifier:          ljOoMkwQ3qaA6RJKUqzDdZcK/EBPResU9TB2E3Z4WK4=
Subject key identifier:   C3:A8:46:BD:47:B3:02:8F:6C:A2:0C:23:82:34:67:00:F6:87:79:F6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1BA8FA98379818BBC603B92E353D2D23250097E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/C3A846BD47B3028F6CA20C2382346700F68779F6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Feb 2024 14:24:38 +0000
Certificate not after:    Wed 19 Feb 2025 14:29:38 +0000
Subordinate resources:    AS: 262490
                          IP: 177.66.80.0/21
                          IP: 2804:514::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a8:fa:98:37:98:18:bb:c6:03:b9:2e:35:3d:2d:23:25:00:97:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 21 14:24:38 2024 GMT
            Not After : Feb 19 14:29:38 2025 GMT
        Subject: CN=C3A846BD47B3028F6CA20C2382346700F68779F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8a:17:e0:b5:48:a8:85:ef:b5:6e:95:c4:63:
                    d4:03:7f:0a:3c:a2:ce:f2:f8:38:18:53:d4:72:33:
                    55:b6:26:e5:fc:36:b4:d5:ae:d4:e7:70:e9:25:f0:
                    68:4a:95:14:df:6c:f0:59:ed:c7:fd:f6:71:f4:9f:
                    32:ec:b8:22:19:51:9c:40:7e:99:b2:e4:d9:ae:42:
                    b5:44:c7:f9:b1:d0:49:1a:a6:b1:38:b9:56:44:e0:
                    0d:92:65:08:4c:36:72:db:9a:8c:99:69:fd:cf:7b:
                    a5:6b:3b:ee:be:88:bd:5c:91:52:83:8b:d6:a9:b0:
                    15:2a:8f:dc:51:91:f8:75:fc:78:31:4d:93:77:6e:
                    64:c5:5d:6b:fa:90:78:63:db:bb:e5:c6:b1:91:04:
                    2f:56:5f:f0:6e:c0:08:a1:bb:01:ed:27:4b:ee:98:
                    1d:66:90:73:81:70:a6:b6:c5:19:f0:45:c0:c6:da:
                    50:a1:bc:91:f5:57:d4:c1:8b:99:78:60:b1:14:b8:
                    b7:fb:dd:84:78:eb:97:5a:1e:2c:c2:5d:ba:cf:d9:
                    1a:52:cd:f3:2e:39:20:85:56:eb:c3:1e:3c:e9:b0:
                    05:d7:53:f3:b8:33:88:e6:c1:e8:e1:48:10:f3:07:
                    56:fb:cf:94:17:4e:84:f2:76:83:01:9d:9e:0e:7a:
                    90:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:A8:46:BD:47:B3:02:8F:6C:A2:0C:23:82:34:67:00:F6:87:79:F6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/C3A846BD47B3028F6CA20C2382346700F68779F6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.80.0/21
                IPv6:
                  2804:514::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262490

    Signature Algorithm: sha256WithRSAEncryption
         b3:63:1e:76:cf:f5:52:6b:ab:de:34:aa:f6:08:3a:5f:5d:ff:
         a3:82:d4:10:a6:ce:78:95:15:cb:2e:7c:a7:91:30:9f:7e:cf:
         f9:ad:dd:22:2d:a6:54:91:0f:9e:5c:9a:ff:18:39:a6:b1:04:
         7c:90:dd:c5:a6:30:2c:0a:6a:76:3c:92:e2:46:82:be:5c:71:
         69:ab:c6:fd:4e:17:ac:bf:33:61:0f:f5:31:6a:77:e4:b0:a2:
         4d:3f:fc:03:be:d8:d1:a5:f0:4c:14:b1:97:92:65:50:9b:6a:
         2c:c1:c2:1d:d2:ef:e4:79:e6:78:59:be:3a:c0:f5:28:2e:c5:
         42:cf:9b:25:9d:82:11:c4:fd:a6:a9:5a:eb:2f:4b:16:92:63:
         e5:f4:db:8c:b8:d9:f3:1e:83:27:67:c8:7e:10:0c:a6:a2:f3:
         a5:84:22:76:3c:e3:f1:02:85:73:5d:aa:c1:ab:93:ec:a5:8f:
         cd:2f:2c:77:1f:9c:8f:98:7a:3b:f0:b5:93:6c:92:9f:e4:0f:
         41:4f:84:ea:eb:71:64:59:0e:85:be:4d:61:4e:a4:ab:58:17:
         70:30:f2:31:a1:12:20:7a:e6:a0:23:08:ab:7d:dc:1f:8e:8c:
         3c:be:76:18:72:95:09:09:95:a4:23:bb:76:23:9c:b6:e4:ff:
         6f:ed:46:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org