Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737.cer
File:                     C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737.cer (raw, json)
Hash identifier:          ICVty+8BTfOexowcyLhM/WUA2BFCw43+RbmMbyzy2No=
Subject key identifier:   C3:BD:38:EB:FA:0A:23:0A:ED:DD:BE:8D:AF:54:77:CD:71:A4:57:37
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0D4F81CAEEFE444414ED2CB03A04AACE3F2C4C38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/0/C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Dec 2022 20:23:37 +0000
Certificate not after:    Mon 18 Dec 2023 20:28:37 +0000
Subordinate resources:    AS: 271592
                          IP: 190.9.120.0/22
                          IP: 2804:7df0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4f:81:ca:ee:fe:44:44:14:ed:2c:b0:3a:04:aa:ce:3f:2c:4c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 19 20:23:37 2022 GMT
            Not After : Dec 18 20:28:37 2023 GMT
        Subject: CN=C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c0:bf:45:63:63:25:59:af:6e:a9:e0:37:47:
                    bc:cb:99:90:6a:a1:4f:5e:9f:2b:71:1a:b7:0c:ff:
                    82:e2:79:3c:ed:cd:6b:1a:ba:87:ba:04:b2:99:05:
                    a9:ac:99:91:11:01:95:8b:da:69:29:6d:25:dc:40:
                    46:53:bc:38:cd:fb:67:9c:6b:c8:ce:ec:4f:7b:20:
                    58:00:9d:60:74:e6:6c:60:ce:1a:52:d8:d3:84:cd:
                    ea:0d:66:9d:7b:83:2d:61:39:7a:cd:b7:56:46:81:
                    b5:2a:96:ad:6a:26:a5:d4:ca:e5:f3:5e:8e:d3:f4:
                    43:ad:d1:5f:16:a7:7e:7e:af:7a:05:91:a9:ec:dd:
                    01:91:0d:89:53:8b:19:69:df:2f:3a:4e:9b:83:82:
                    11:55:f1:cf:3a:fd:4f:60:5e:fb:19:fa:49:c1:d6:
                    4c:60:65:08:13:22:43:17:ba:f6:94:f3:80:ad:f4:
                    0b:ed:e1:55:28:8f:0b:d8:28:35:17:d1:b4:a6:d0:
                    11:98:52:73:bc:d8:04:ce:c0:a6:98:36:f8:ca:a6:
                    97:50:6e:8b:a5:41:79:b6:2e:69:cb:2e:65:1b:e6:
                    33:a2:c8:2c:d3:4d:3f:65:8c:fa:18:db:4b:35:42:
                    e0:54:4c:5c:2a:19:c9:2f:c4:6f:e2:68:2b:2d:ae:
                    c4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:BD:38:EB:FA:0A:23:0A:ED:DD:BE:8D:AF:54:77:CD:71:A4:57:37
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/0/C3BD38EBFA0A230AEDDDBE8DAF5477CD71A45737.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.120.0/22
                IPv6:
                  2804:7df0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271592

    Signature Algorithm: sha256WithRSAEncryption
         a7:c5:85:c5:89:fe:1b:24:fe:51:fe:0f:b8:59:84:bb:ed:f7:
         f7:b3:42:19:75:9b:36:7a:d9:96:a3:53:25:d9:09:82:ef:e0:
         93:b7:21:ca:50:ce:b1:5e:b7:a2:f9:53:32:9b:de:11:10:37:
         ff:b3:8a:9b:9a:3a:69:78:82:36:e8:72:b8:e1:c7:91:ea:29:
         7d:c6:08:8e:45:89:27:84:0e:ee:f2:45:88:c3:79:4f:86:65:
         21:cb:4b:76:fb:a0:bd:3a:aa:da:10:b5:16:f3:5f:cf:c3:65:
         90:b5:64:b4:5b:fc:1d:2e:1f:39:1a:f3:12:61:66:b1:c0:b3:
         0d:06:87:e3:ac:77:85:b6:0a:a7:eb:e9:f3:b8:c8:3b:c6:b9:
         1d:2e:81:94:a9:61:7e:06:fc:8d:1f:2d:b1:d8:2c:65:ff:3f:
         5e:6c:eb:71:b4:0e:8e:ab:39:9e:cb:78:4d:2f:09:21:ac:33:
         13:a4:a0:06:2a:2e:44:9e:c6:87:64:15:2b:1e:bf:a9:50:23:
         eb:9f:d4:81:7c:8d:1b:09:10:28:57:26:5d:c3:ce:00:b8:db:
         64:c3:a3:43:1a:f3:bd:e6:68:80:9c:f5:f0:6d:41:23:38:f6:
         bc:01:d0:68:bc:f6:ee:b0:80:f2:7a:e7:b7:bb:17:00:4f:5a:
         3c:be:07:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:14 2024 by rpki-client on console-ams.rpki-client.org