Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CCF35307850A3B058CB4A267F929B8ECBB33CBE3.cer
File:                     CCF35307850A3B058CB4A267F929B8ECBB33CBE3.cer (raw, json)
Hash identifier:          33QUY8OQNinFULpQ2l9cO9ysnytkX1J3xZJ4crUwEWc=
Subject key identifier:   CC:F3:53:07:85:0A:3B:05:8C:B4:A2:67:F9:29:B8:EC:BB:33:CB:E3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       38EC017A33B087897791790913849AD1A3A0A23B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3xyAf3Q8t6bMbDSE7DE8DT7ZhMatqajJzR9ZtLTw3ivk/0/CCF35307850A3B058CB4A267F929B8ECBB33CBE3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3xyAf3Q8t6bMbDSE7DE8DT7ZhMatqajJzR9ZtLTw3ivk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jun 2023 12:44:13 +0000
Certificate not after:    Thu 27 Jun 2024 12:49:13 +0000
Subordinate resources:    AS: 267126
                          IP: 45.228.248.0/22
                          IP: 2804:4884::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ec:01:7a:33:b0:87:89:77:91:79:09:13:84:9a:d1:a3:a0:a2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 29 12:44:13 2023 GMT
            Not After : Jun 27 12:49:13 2024 GMT
        Subject: CN=CCF35307850A3B058CB4A267F929B8ECBB33CBE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b9:c3:77:c4:66:f7:2a:91:a0:1b:b3:a6:37:
                    0d:aa:74:d8:c8:0a:ff:fb:e8:4f:0e:9c:63:2a:93:
                    82:8f:f9:e9:8e:53:59:a6:d3:16:a6:03:9a:0e:de:
                    ac:4a:b3:9d:b6:57:16:78:ac:06:18:fe:ac:3e:39:
                    65:1a:04:62:a7:ea:06:0c:8d:71:6d:9c:74:b4:62:
                    6c:6e:71:36:d2:0c:e5:cc:a3:07:07:72:d6:1c:93:
                    08:8d:6a:29:58:ea:2e:95:86:7b:47:e1:81:7d:a8:
                    c2:23:fa:35:71:a7:48:6a:35:62:fa:c3:1f:b9:18:
                    e2:0e:5d:99:9e:39:5d:97:c9:bd:4c:d6:3e:b4:ee:
                    06:d1:77:96:7e:63:1b:a3:85:7f:86:1c:2f:66:ff:
                    9d:b7:4d:f2:e3:b2:ad:b0:68:69:94:30:1d:29:f2:
                    0a:77:0b:e3:75:7b:cd:a1:44:a4:d4:3b:43:df:34:
                    1a:a1:dc:68:10:0a:e7:6c:93:d2:36:97:ee:38:54:
                    99:e4:1d:ba:fc:b3:ef:79:f1:95:35:82:d1:f7:96:
                    97:da:4c:7d:ad:84:e5:f5:f3:e8:ca:78:96:e6:fa:
                    8e:94:d5:ff:a0:9e:74:95:cf:af:41:57:96:d0:cb:
                    32:76:4e:93:39:08:9c:03:99:d8:8c:b2:21:a2:c4:
                    da:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:F3:53:07:85:0A:3B:05:8C:B4:A2:67:F9:29:B8:EC:BB:33:CB:E3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3xyAf3Q8t6bMbDSE7DE8DT7ZhMatqajJzR9ZtLTw3ivk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3xyAf3Q8t6bMbDSE7DE8DT7ZhMatqajJzR9ZtLTw3ivk/0/CCF35307850A3B058CB4A267F929B8ECBB33CBE3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.248.0/22
                IPv6:
                  2804:4884::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267126

    Signature Algorithm: sha256WithRSAEncryption
         83:2a:82:91:1c:db:86:da:ba:d2:b7:6d:b9:7a:69:68:71:74:
         f4:e8:3e:86:db:0c:7a:c0:04:84:64:bc:2a:55:b8:80:45:59:
         c6:80:6a:b6:ea:2b:4f:0b:41:e1:c1:d7:66:82:da:23:15:b1:
         59:e3:5c:0c:93:22:05:1a:96:66:8e:52:35:4c:f4:e6:43:50:
         37:27:b7:4a:a5:23:1b:21:b9:1a:6e:fe:8d:0f:21:a4:a4:26:
         84:cc:fb:f4:be:74:ee:2b:85:6a:66:08:fe:5a:6d:2f:34:bc:
         3c:ab:28:95:01:45:05:e4:5c:32:39:0d:7b:7c:7a:0a:12:bb:
         59:9e:da:a4:d9:ad:68:00:d3:a6:1f:fd:c9:1f:68:01:67:be:
         0c:b7:fc:03:28:a4:a7:3e:b3:29:a6:d9:b0:eb:3f:9f:78:24:
         64:56:ca:69:54:22:80:1a:66:a3:cb:a9:c8:7d:65:15:7d:f1:
         da:26:91:e4:2e:28:ed:af:b7:77:b4:29:bb:06:1b:d7:a7:f1:
         ed:17:d7:4c:dd:4f:12:c8:ab:97:54:bb:62:48:21:53:96:a8:
         38:89:aa:99:40:e7:3c:7f:a2:40:09:d0:38:b4:be:cd:ac:ec:
         59:7f:99:59:28:b3:50:4c:2e:e0:be:33:5a:6c:c3:32:56:e5:
         70:3f:48:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org