Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C3AB4D07DFEDCED4DF4280B484808715BDA4B837.cer
File:                     C3AB4D07DFEDCED4DF4280B484808715BDA4B837.cer (raw, json)
Hash identifier:          sUjnv6lzSi+2CJ4EJ+eniGyhLzaB76UyPomsH7jO8ek=
Subject key identifier:   C3:AB:4D:07:DF:ED:CE:D4:DF:42:80:B4:84:80:87:15:BD:A4:B8:37
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1B97BC3C5338CDE56A8F689AA14380B1907F4867
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/C3AB4D07DFEDCED4DF4280B484808715BDA4B837.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 02 Aug 2023 17:27:09 +0000
Certificate not after:    Wed 31 Jul 2024 17:32:09 +0000
Subordinate resources:    AS: 265271
                          IP: 168.90.16.0/22
                          IP: 2804:2d48::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:97:bc:3c:53:38:cd:e5:6a:8f:68:9a:a1:43:80:b1:90:7f:48:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  2 17:27:09 2023 GMT
            Not After : Jul 31 17:32:09 2024 GMT
        Subject: CN=C3AB4D07DFEDCED4DF4280B484808715BDA4B837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a3:50:e0:07:14:8b:18:ea:90:5b:a1:92:fb:
                    7d:12:d0:2f:2e:dc:15:d7:57:47:ab:61:05:98:2d:
                    43:c4:5b:7f:d4:9f:90:10:cc:8f:35:e5:59:50:42:
                    4b:24:3f:f7:6e:ff:b1:65:c7:c3:7b:18:6f:eb:63:
                    82:69:84:bf:c5:43:64:44:ba:4a:57:a1:fe:27:a4:
                    19:53:3c:57:59:5b:ee:92:93:96:f6:48:f0:ec:db:
                    83:f0:d9:c7:2f:50:ca:c3:c4:8e:39:00:89:97:ef:
                    07:41:79:aa:61:bb:84:96:4f:0b:29:18:bd:b5:85:
                    df:78:93:c7:58:3a:60:6d:a8:87:b0:57:42:98:3e:
                    19:b6:f1:34:23:eb:83:af:28:df:9c:6f:a4:10:e8:
                    4d:61:c0:32:79:f6:4e:f8:0b:c1:e1:26:5b:0e:db:
                    95:e8:14:7e:4c:d7:10:04:25:7a:7c:a0:9c:b2:d8:
                    1e:cd:62:fe:a7:69:8f:c3:d0:a5:a7:b6:68:56:98:
                    ce:1b:4e:72:8b:4d:cb:a5:29:ab:4a:1e:cd:3f:80:
                    80:ec:3c:22:fc:64:7b:62:3d:72:c6:74:f1:ab:5a:
                    98:9b:3c:74:8e:29:ac:24:23:f6:19:a1:96:0d:54:
                    fb:b3:2d:3e:24:cd:5e:12:f9:58:98:4b:cb:a0:41:
                    32:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:AB:4D:07:DF:ED:CE:D4:DF:42:80:B4:84:80:87:15:BD:A4:B8:37
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GJJC42ntNAu4RCivvsDU57dL5pGJWbasTRPJSSpEjWgM/0/C3AB4D07DFEDCED4DF4280B484808715BDA4B837.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.16.0/22
                IPv6:
                  2804:2d48::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265271

    Signature Algorithm: sha256WithRSAEncryption
         1b:19:9f:3d:0d:26:ee:d2:d4:e6:92:03:b7:5f:93:39:60:6c:
         37:13:14:e3:90:f1:c5:99:ba:26:ad:db:50:62:54:36:bf:35:
         bb:67:47:43:d7:10:c4:d4:e1:a2:b4:5c:06:a4:aa:d6:45:8e:
         e9:1c:60:1e:ee:9e:07:d8:46:ba:aa:87:cd:f9:18:08:70:48:
         a8:ee:95:aa:63:12:27:ae:b9:e0:6c:ca:63:89:ca:db:57:b9:
         7b:1a:7a:c4:ef:ff:ec:57:f7:6b:ba:78:b7:f3:50:77:c6:d0:
         0f:0a:55:fb:8c:e5:7d:24:4b:8b:cc:f7:35:48:a3:1a:d3:4b:
         09:20:4d:a8:62:6a:a3:0b:7f:40:ed:42:dd:83:b8:23:8c:c3:
         a3:85:67:cf:e2:4d:9a:a9:77:5d:42:b1:15:8d:b3:99:b7:b3:
         e9:8e:8e:15:15:bf:87:8b:8c:1f:7e:f7:fe:89:45:8d:d5:21:
         51:ae:75:c3:05:0b:be:24:40:04:d6:48:f9:8d:99:a2:a3:41:
         2f:a7:a3:4f:af:b9:5a:b9:56:91:a3:bc:64:2d:17:ec:ca:4a:
         f2:45:40:3a:ff:c6:21:a7:3c:f2:3b:f8:78:ce:f6:4e:c2:0d:
         43:1e:e1:0c:e4:69:01:3a:ac:f6:25:c3:14:8b:a5:40:43:5b:
         c9:46:60:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org