Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C3B10EEB5BA7D0B00FE0A57A856FB47ED9C69657.cer
File:                     C3B10EEB5BA7D0B00FE0A57A856FB47ED9C69657.cer (raw, json)
Hash identifier:          qQZdByErGacPwCoPyOru19P3JJ3XgL6+QcDceXhGHVE=
Subject key identifier:   C3:B1:0E:EB:5B:A7:D0:B0:0F:E0:A5:7A:85:6F:B4:7E:D9:C6:96:57
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       310647F19AE167F6D75A579772F0256B35D0D77F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/C3B10EEB5BA7D0B00FE0A57A856FB47ED9C69657.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Aug 2022 19:26:18 +0000
Certificate not after:    Wed 02 Aug 2023 19:31:18 +0000
Subordinate resources:    AS: 28260
                          IP: 177.130.0.0/20
                          IP: 186.193.240.0/20
                          IP: 187.16.240.0/20
                          IP: 187.95.32.0/20
                          IP: 2804:28e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:06:47:f1:9a:e1:67:f6:d7:5a:57:97:72:f0:25:6b:35:d0:d7:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  3 19:26:18 2022 GMT
            Not After : Aug  2 19:31:18 2023 GMT
        Subject: CN=C3B10EEB5BA7D0B00FE0A57A856FB47ED9C69657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:99:1c:a4:9b:a9:ad:5f:de:e5:4e:39:13:0d:
                    93:fe:65:7c:dc:e1:b5:6d:06:6f:21:2a:f6:1d:a2:
                    39:db:d0:6b:80:9e:fb:c0:87:f2:34:49:04:7d:7c:
                    61:08:ad:f4:fa:63:0c:3a:b9:c5:dc:d6:89:7a:27:
                    01:3d:6f:2a:bf:ca:8d:f2:47:8c:10:ad:29:71:49:
                    98:ca:ed:eb:18:a1:86:1b:a1:40:2c:72:d7:f5:b0:
                    7e:da:d8:55:e3:7b:d2:ae:1f:f7:92:6a:3a:da:bb:
                    5c:e9:0f:e6:a6:d1:7a:98:47:da:19:18:b8:66:96:
                    18:8d:e2:04:1c:02:27:8c:5d:8c:7f:b9:49:3d:8e:
                    0f:fe:7a:83:58:08:c9:06:ff:6e:f2:4b:1a:8b:67:
                    6b:00:e4:20:b6:c6:8e:60:32:1d:4f:c1:00:25:54:
                    1a:85:a1:a9:14:c4:d2:c5:93:e8:ce:12:a5:e6:3a:
                    18:0e:b2:a1:73:a0:0e:87:10:7d:6f:14:d9:bc:89:
                    48:8a:87:63:24:4c:0c:9c:07:21:9d:48:f7:25:d3:
                    74:33:92:29:89:dc:bf:9b:6c:96:4b:e0:9f:e0:74:
                    91:81:08:7d:5f:c4:d5:e3:6a:9b:a1:12:cf:10:98:
                    49:e2:65:0a:e3:50:30:3a:d8:5b:ea:51:7c:84:a9:
                    8f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:B1:0E:EB:5B:A7:D0:B0:0F:E0:A5:7A:85:6F:B4:7E:D9:C6:96:57
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/C3B10EEB5BA7D0B00FE0A57A856FB47ED9C69657.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.0.0/20
                  186.193.240.0/20
                  187.16.240.0/20
                  187.95.32.0/20
                IPv6:
                  2804:28e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28260

    Signature Algorithm: sha256WithRSAEncryption
         39:1f:30:12:50:26:0e:c0:b8:af:f3:82:9d:27:34:8f:13:33:
         1f:ad:05:f4:90:60:61:ab:66:b1:28:fc:c3:d2:71:5d:63:89:
         fa:48:a7:8b:1d:ea:29:cc:15:9a:9c:31:60:bd:f6:81:d4:19:
         4a:01:c1:e7:9c:6f:38:37:b7:5d:bb:00:61:b7:d7:19:e5:d2:
         2e:e4:d8:82:0e:8c:40:1e:d6:92:18:fa:87:d8:42:4b:04:25:
         f5:cb:73:55:b3:c0:6b:40:5b:e4:b4:98:c1:0b:71:fd:cd:b0:
         e3:fb:fd:51:89:45:00:cf:ed:20:0d:17:33:d9:4b:d9:b9:0e:
         c3:5a:5f:81:90:77:04:1e:50:3a:89:5c:ff:e4:9d:85:29:fb:
         03:83:98:17:3a:55:75:91:a6:34:ab:9c:c5:69:2e:ce:65:de:
         c8:3f:b0:27:95:11:e3:12:5b:34:8b:a8:68:0d:88:4d:41:f4:
         2d:c4:40:71:87:d4:50:9e:4a:6e:c9:df:23:d8:8a:1a:be:cc:
         bb:d9:47:85:43:12:8e:f8:04:19:70:7b:88:54:35:d8:4a:ce:
         13:c1:40:30:3e:c6:76:12:83:15:5b:f4:ac:04:4d:9d:f2:cd:
         29:bf:36:b7:7e:91:a0:ca:ca:b7:6d:3e:7e:da:60:f9:e2:f6:
         28:ff:d3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org