Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C3EFDFE04774A66D55883520CCE25EDF13AB92DF.cer
File:                     C3EFDFE04774A66D55883520CCE25EDF13AB92DF.cer (raw, json)
Hash identifier:          nM85LKcVghaxuQPzff1syn8Xcc9IvRa0haV2yi3HgQQ=
Subject key identifier:   C3:EF:DF:E0:47:74:A6:6D:55:88:35:20:CC:E2:5E:DF:13:AB:92:DF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       40291E1F1BE69915D53227E3535DA8169781DAB3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/C3EFDFE04774A66D55883520CCE25EDF13AB92DF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Sep 2022 21:57:09 +0000
Certificate not after:    Thu 21 Sep 2023 22:02:09 +0000
Subordinate resources:    AS: 265338
                          IP: 168.181.168.0/22
                          IP: 2804:2e50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:29:1e:1f:1b:e6:99:15:d5:32:27:e3:53:5d:a8:16:97:81:da:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 22 21:57:09 2022 GMT
            Not After : Sep 21 22:02:09 2023 GMT
        Subject: CN=C3EFDFE04774A66D55883520CCE25EDF13AB92DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3b:33:73:4f:3b:49:2d:3e:65:7c:1b:1c:d6:
                    9e:4e:bf:85:6f:93:44:3e:fc:36:7f:e0:da:3a:9a:
                    fa:77:88:d4:9f:95:68:04:6e:db:81:46:12:18:3e:
                    47:d7:0b:c4:48:c6:cc:d2:aa:8e:21:b6:d4:03:d8:
                    55:63:41:90:d9:70:7e:37:e7:00:8d:22:b0:1d:32:
                    bf:ce:81:cb:73:2d:fa:77:eb:b2:b5:00:7a:97:08:
                    47:84:cb:4e:bd:11:05:72:05:29:99:2b:ca:e5:28:
                    10:ad:cf:21:f9:da:79:65:fd:64:7b:e0:c4:0f:7c:
                    c6:12:7f:f3:75:59:70:06:3a:68:2e:7b:92:32:37:
                    91:1d:4d:33:77:3f:45:c3:c8:fc:1d:10:74:12:55:
                    7e:ef:b0:16:fa:71:38:02:84:21:34:03:5d:10:73:
                    f6:7f:49:31:9b:1a:48:de:d7:5a:18:0e:4a:87:49:
                    eb:03:cd:a4:f1:de:62:ad:2e:04:cf:4f:d0:77:0b:
                    50:08:d9:8a:57:3f:b4:d9:9a:3e:c4:13:8c:c2:f4:
                    72:d7:c4:0e:32:4e:d8:0d:f4:cb:16:01:42:ea:f7:
                    a2:27:61:83:8e:76:ec:07:2d:78:31:1e:ee:07:b1:
                    ed:fc:0b:0f:12:20:48:e6:e6:35:49:7f:f7:aa:b0:
                    8d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:EF:DF:E0:47:74:A6:6D:55:88:35:20:CC:E2:5E:DF:13:AB:92:DF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/C3EFDFE04774A66D55883520CCE25EDF13AB92DF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.168.0/22
                IPv6:
                  2804:2e50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265338

    Signature Algorithm: sha256WithRSAEncryption
         1a:6c:31:b0:bf:3f:f4:19:30:9a:7c:7f:ed:9c:8f:0a:4e:d3:
         25:30:2f:33:31:be:9f:4e:1e:c6:af:42:3b:6d:6d:ff:df:70:
         4b:b7:d2:54:16:a4:53:c0:36:b9:49:dd:92:49:00:fa:cd:45:
         e3:17:d7:10:ce:e3:5f:19:5e:53:34:31:a3:24:6f:89:c5:d2:
         ed:55:f1:cd:00:0c:4f:63:5c:a1:01:c0:4b:f9:0b:4f:d0:4c:
         fa:7b:ad:98:c0:52:47:78:4f:7d:bd:a2:e0:70:48:ed:29:e8:
         9e:85:39:72:d0:a4:f3:e0:06:a9:17:cb:69:68:6a:bd:cd:45:
         5d:73:fd:dc:c0:b3:19:28:27:8c:90:eb:f6:37:4b:f9:f1:d8:
         4a:32:e3:29:ee:87:b4:19:54:a2:7e:26:88:42:b0:ef:38:b7:
         32:71:77:8a:8c:d4:a2:61:26:0f:78:fe:52:73:9b:ad:5b:89:
         bb:f6:98:5a:d0:2e:54:db:1f:d5:f1:67:5a:00:a3:b5:0f:cf:
         cf:f7:53:47:8b:01:ee:97:e8:87:77:1e:6f:86:5d:d5:bf:39:
         a6:e6:71:5e:de:30:3b:58:6c:b5:64:6f:1a:15:bf:d6:a8:71:
         7e:3c:87:f8:43:ee:e8:a7:c7:30:cb:77:14:3d:af:9c:d4:f3:
         f9:06:27:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:14 2024 by rpki-client on console-ams.rpki-client.org