Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C3EC7319E511D657616F58D9BD22B1337AE45836.cer
File:                     C3EC7319E511D657616F58D9BD22B1337AE45836.cer (raw, json)
Hash identifier:          03SejMrCRWExhBq5dFpQwCgwcwV/8U73ZJWwgngos8s=
Subject key identifier:   C3:EC:73:19:E5:11:D6:57:61:6F:58:D9:BD:22:B1:33:7A:E4:58:36
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4BBCB89AEC08831A5B5D6DCEF551BFE3D5A853B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/1/C3EC7319E511D657616F58D9BD22B1337AE45836.mft
caRepository:             rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Feb 2024 05:20:10 +0000
Certificate not after:    Tue 04 Feb 2025 05:25:10 +0000
Subordinate resources:    AS: 270265
                          IP: 200.108.164.0/22
                          IP: 2804:695c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:bc:b8:9a:ec:08:83:1a:5b:5d:6d:ce:f5:51:bf:e3:d5:a8:53:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  6 05:20:10 2024 GMT
            Not After : Feb  4 05:25:10 2025 GMT
        Subject: CN=C3EC7319E511D657616F58D9BD22B1337AE45836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c1:ca:d8:ec:64:18:7b:a1:42:58:2d:c0:87:
                    e2:86:d5:00:27:4a:57:53:73:6b:8c:48:5c:b7:41:
                    16:ae:11:0f:8d:c9:2e:aa:d7:69:4a:e2:23:65:7a:
                    9f:56:ef:20:e7:b5:86:63:e2:6a:2a:21:7a:21:82:
                    01:0e:cc:05:42:42:59:89:ca:f6:20:cd:4c:3f:92:
                    ab:c9:6c:28:ef:8e:03:3d:f2:44:d7:c5:a7:74:f2:
                    8a:ad:b6:c7:dd:ae:dd:5f:fa:ff:5b:a0:a5:10:fd:
                    9f:99:46:62:2a:b8:af:1e:f5:e9:a6:ef:f9:ba:96:
                    9d:21:e6:ed:5b:34:59:2b:20:3f:c0:e9:7c:dd:4f:
                    71:f9:eb:31:c6:50:19:b3:aa:40:f1:ea:c6:53:46:
                    ca:34:19:7d:33:b8:f4:e6:6e:87:5b:7a:09:76:52:
                    93:5e:fb:5c:43:71:7c:df:ac:e1:01:9b:4f:1c:b3:
                    c5:9e:95:16:6d:df:28:8c:da:b2:ad:26:74:2f:2f:
                    5c:f0:b0:0e:92:dc:d3:00:3e:71:0d:15:91:37:9b:
                    e0:3c:be:91:ae:81:03:91:54:36:48:8b:b4:21:7b:
                    f0:04:7d:5e:7d:86:63:a2:16:93:e4:bf:ba:01:e2:
                    af:d2:a1:8e:c4:dc:2a:fc:6e:1f:3d:b7:9c:e1:4b:
                    f3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:EC:73:19:E5:11:D6:57:61:6F:58:D9:BD:22:B1:33:7A:E4:58:36
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/1/C3EC7319E511D657616F58D9BD22B1337AE45836.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.164.0/22
                IPv6:
                  2804:695c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270265

    Signature Algorithm: sha256WithRSAEncryption
         0d:67:32:95:f0:07:7f:9e:5d:cd:31:f0:e2:de:bc:43:e4:89:
         3d:08:87:ec:7f:d5:a0:ff:3d:be:0d:ed:4e:b7:97:6b:8c:4c:
         26:89:9f:c8:e2:56:03:29:0d:ea:31:10:bd:f2:45:4f:6c:81:
         c1:73:87:17:44:4a:d0:a8:9f:08:c6:a1:fe:97:da:9e:f0:0d:
         4c:17:78:2e:19:72:9b:c9:c5:24:dc:cc:e7:8d:a8:0b:17:e3:
         b9:8c:9e:21:bb:72:ea:1b:96:7d:ca:8c:34:3e:ad:58:99:1b:
         a0:25:e6:b0:52:82:ac:13:43:c0:29:a5:a5:a5:58:55:71:3f:
         2e:3a:68:9b:24:67:d7:d2:ba:15:b7:aa:58:d2:07:68:bb:a5:
         6d:b0:9d:72:84:82:fe:56:f3:a5:cf:b0:ce:d8:81:4c:e7:a6:
         da:26:ad:3d:87:e2:b5:5f:f4:5b:48:dc:a6:59:b4:3c:ab:b0:
         f0:0c:b1:7d:75:e0:2f:1e:41:34:78:01:18:6d:c9:1e:1c:38:
         8a:0f:f3:b8:5f:c1:8c:1e:8b:64:7b:93:3f:2b:e1:00:2f:ed:
         b7:f8:be:97:83:64:5a:c1:99:34:f0:7b:a8:42:0a:24:15:9a:
         b3:5a:ca:96:6a:14:30:1b:f3:ab:ab:d5:95:1b:81:8d:6a:e9:
         47:f1:15:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org