Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F.cer
File:                     E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F.cer (raw, json)
Hash identifier:          HYcVN00/rZpFj1PAihdBOW11QsTTLnE8ASJ2o0GOWr0=
Subject key identifier:   E3:B6:2F:45:DF:A4:BB:34:5C:E9:99:5F:C0:55:00:A2:9F:D7:AC:4F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5891AEE2CDD815934D4D9166F0E2629AF5E3EFB8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Feb 2024 13:05:10 +0000
Certificate not after:    Mon 17 Feb 2025 13:10:10 +0000
Subordinate resources:    AS: 266320
                          IP: 170.238.136.0/22
                          IP: 2804:3600::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:91:ae:e2:cd:d8:15:93:4d:4d:91:66:f0:e2:62:9a:f5:e3:ef:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 19 13:05:10 2024 GMT
            Not After : Feb 17 13:10:10 2025 GMT
        Subject: CN=E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:df:cb:6f:70:49:4d:77:25:e8:4b:a7:c5:1a:
                    72:50:04:4d:8c:5b:97:09:ef:d3:76:c5:6f:76:67:
                    be:93:99:b3:5c:3c:f1:8a:6a:3d:7f:df:b1:dd:c0:
                    11:95:9a:7e:a3:df:c3:50:04:72:c5:59:fe:ce:9a:
                    5a:e6:8f:f3:1b:9d:43:52:dc:1c:9c:52:30:34:0e:
                    d4:03:71:12:ea:62:70:f4:de:b2:24:51:eb:6f:60:
                    0b:6e:29:26:8f:5c:93:97:f0:a8:82:0c:27:fa:20:
                    12:1a:a0:5d:26:6e:99:5e:63:cf:f2:08:2c:ad:64:
                    e3:43:80:c6:d3:73:32:5a:39:1f:a4:14:61:7a:84:
                    e1:dd:b3:3a:d2:22:53:44:6a:6a:0d:6a:9f:6f:e9:
                    40:89:8f:59:01:7f:ec:b5:92:74:ac:b8:1a:4a:33:
                    db:b2:8f:7f:57:5f:24:88:53:e6:81:02:5b:3c:98:
                    e3:39:8e:92:3b:b9:46:4e:ba:64:90:6f:d0:54:e7:
                    a8:36:8c:5c:4b:1e:20:97:29:fc:77:ef:c9:58:16:
                    a0:d9:21:15:b0:24:76:ef:32:0f:5d:21:30:08:da:
                    a6:1b:6a:56:b5:48:a4:f4:35:77:c4:3f:11:cf:92:
                    4d:93:a3:21:9e:60:df:a6:f7:20:af:5e:7e:7c:b5:
                    02:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E3:B6:2F:45:DF:A4:BB:34:5C:E9:99:5F:C0:55:00:A2:9F:D7:AC:4F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/0/E3B62F45DFA4BB345CE9995FC05500A29FD7AC4F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.136.0/22
                IPv6:
                  2804:3600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266320

    Signature Algorithm: sha256WithRSAEncryption
         3c:e2:90:af:a1:d8:87:22:dd:c8:30:a1:b0:a1:f4:e7:e9:23:
         94:63:9d:9a:74:48:9c:4a:94:3d:8d:cc:f7:4b:e6:91:58:6f:
         8c:67:33:8f:00:64:41:ac:be:6f:a1:b8:d6:98:12:7a:e4:07:
         95:b1:ad:f2:2f:98:3f:1b:04:cc:57:4a:ed:f2:cf:23:b4:34:
         63:e8:f6:61:88:e8:13:0d:08:e1:1f:f8:d6:69:13:89:3d:26:
         0e:62:92:c9:aa:4b:a1:71:01:a1:47:12:fd:b5:c8:66:17:ab:
         38:ed:7b:81:21:95:28:4c:8f:1a:e3:28:7d:8b:63:0f:56:a7:
         1c:ce:40:38:28:e3:19:58:5c:36:e8:1e:8c:e9:c4:81:87:46:
         fa:a5:6c:17:81:41:2b:24:2b:16:63:e9:98:37:12:72:44:f5:
         0c:ed:12:8f:7a:64:14:16:37:ba:99:4d:b1:ed:1d:d8:49:66:
         52:f8:73:3b:27:9b:56:56:4f:27:c3:e5:d1:7c:7f:c4:a2:63:
         21:f4:1b:8d:72:d6:75:6b:05:50:11:7b:9a:42:42:5a:ca:a9:
         c1:09:b9:5d:9f:f0:f4:b2:32:2d:9b:48:5a:3d:94:63:aa:f7:
         62:cc:2a:b0:3f:20:42:42:bd:79:6f:5c:43:d9:34:c1:fe:37:
         e3:6a:b0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org