Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C3BC161B1A4BD16E423969EE7448EFEAEF4A41B9.cer
File:                     C3BC161B1A4BD16E423969EE7448EFEAEF4A41B9.cer (raw, json)
Hash identifier:          DiNKuGx5nsblRNi8WJUb8WJc8IGqGkrZ4RDKmNX/0dY=
Subject key identifier:   C3:BC:16:1B:1A:4B:D1:6E:42:39:69:EE:74:48:EF:EA:EF:4A:41:B9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7BFAEC6752E456202834A2AE58DD032722054137
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/C3BC161B1A4BD16E423969EE7448EFEAEF4A41B9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Sep 2022 22:15:13 +0000
Certificate not after:    Tue 26 Sep 2023 22:20:13 +0000
Subordinate resources:    AS: 269558
                          IP: 45.189.28.0/22
                          IP: 2804:6670::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fa:ec:67:52:e4:56:20:28:34:a2:ae:58:dd:03:27:22:05:41:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 27 22:15:13 2022 GMT
            Not After : Sep 26 22:20:13 2023 GMT
        Subject: CN=C3BC161B1A4BD16E423969EE7448EFEAEF4A41B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:e5:59:2b:38:4b:58:41:14:d4:e4:e1:1c:
                    41:8c:e8:fa:3b:5d:e8:02:81:17:46:6d:b6:a4:d9:
                    46:ee:c2:51:21:1c:89:06:b9:f4:7a:01:13:85:3b:
                    3f:86:b7:b9:23:fe:cd:0a:20:57:c3:eb:e5:cd:bd:
                    f8:7f:90:fd:d1:b6:08:6d:ba:58:7b:c4:26:2e:e3:
                    d6:2e:a4:a9:00:0b:3e:c0:99:84:44:99:e0:09:2c:
                    2f:c9:00:51:45:9d:ba:a3:b0:3e:e2:ee:64:74:cf:
                    c9:60:5a:7c:ab:22:0e:07:f2:46:bc:0c:86:23:95:
                    4d:80:1c:c5:28:51:20:81:4b:5c:36:fa:10:ca:80:
                    4b:90:06:3f:55:c5:54:03:c4:d9:7e:a0:c1:03:91:
                    93:e1:53:72:46:30:b9:88:0a:65:23:17:ff:8e:73:
                    86:a6:d2:3a:16:2e:65:20:69:6b:a8:00:8a:57:d1:
                    01:72:d6:e2:79:ea:04:11:e8:dc:bc:c7:ac:a3:9a:
                    99:c8:65:99:b9:c4:f6:b9:ac:ae:53:31:cd:e0:14:
                    9b:dc:d3:50:d7:0d:b5:f8:fc:d6:09:bc:56:5d:1b:
                    40:a8:0a:29:24:34:06:73:bb:a4:a0:d6:92:33:20:
                    01:92:8c:81:f9:99:ce:d1:aa:20:17:78:09:68:71:
                    06:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:BC:16:1B:1A:4B:D1:6E:42:39:69:EE:74:48:EF:EA:EF:4A:41:B9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/C3BC161B1A4BD16E423969EE7448EFEAEF4A41B9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.28.0/22
                IPv6:
                  2804:6670::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269558

    Signature Algorithm: sha256WithRSAEncryption
         1f:f9:53:d8:ca:eb:50:5c:3a:af:ba:7f:81:62:05:bc:a1:88:
         a9:44:0a:73:0d:0a:4f:33:e7:47:10:7f:49:96:55:af:ec:4c:
         ad:14:b9:10:51:90:5a:f0:62:4e:27:99:07:51:78:d9:58:d3:
         72:b2:41:98:4f:5c:ec:7b:ca:6b:a4:bf:97:3b:fe:44:a8:1e:
         62:2a:a5:db:eb:d1:8e:f5:b3:e8:d4:dc:0f:5e:b5:9b:24:c6:
         53:93:df:20:0e:88:35:52:89:0f:45:37:e0:bc:a8:8c:e6:ff:
         64:f7:11:98:b7:b6:c5:90:d3:cc:e4:e2:fb:c9:e2:c9:d6:a8:
         1f:c9:46:bc:cf:ec:8f:6e:2e:b1:1a:0b:26:0b:98:39:fe:61:
         1c:19:c4:4c:ff:3a:20:c5:ab:10:55:ab:2c:e6:2e:9f:93:42:
         c4:fc:e8:09:58:e4:d8:43:a0:91:f4:b2:2d:ff:5c:68:fd:78:
         82:51:a3:e0:93:38:1c:18:87:22:e2:2d:4c:14:ff:b9:c7:41:
         a0:32:30:fb:59:ab:61:95:69:42:41:7d:91:19:0f:47:71:a3:
         03:9e:77:09:c6:d4:67:66:29:70:e1:3e:3c:aa:e9:c4:9e:09:
         75:3f:d8:0b:5f:0b:af:a8:1c:13:9e:52:8b:28:e1:33:aa:b2:
         9f:ca:a4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org