Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3473BBA0BD1EFBE38437A6D7FA528D9CD1798AE8.cer
File:                     3473BBA0BD1EFBE38437A6D7FA528D9CD1798AE8.cer (raw, json)
Hash identifier:          9oyWxSSrhjmc6k70x52jmk17mnYpmv2mckWoaMcqT9w=
Subject key identifier:   34:73:BB:A0:BD:1E:FB:E3:84:37:A6:D7:FA:52:8D:9C:D1:79:8A:E8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       292C615AC194734BBE2E3F040BEC8C131F0E70FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3473BBA0BD1EFBE38437A6D7FA528D9CD1798AE8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Sep 2023 14:59:01 +0000
Certificate not after:    Wed 04 Sep 2024 15:04:01 +0000
Subordinate resources:    AS: 265342
                          IP: 168.181.172.0/22
                          IP: 2804:2e60::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2c:61:5a:c1:94:73:4b:be:2e:3f:04:0b:ec:8c:13:1f:0e:70:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  6 14:59:01 2023 GMT
            Not After : Sep  4 15:04:01 2024 GMT
        Subject: CN=3473BBA0BD1EFBE38437A6D7FA528D9CD1798AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:95:d9:9d:d5:f2:e7:15:76:04:89:06:10:ba:
                    09:fb:ec:8b:28:c1:bd:59:75:ba:e5:7f:3a:03:c1:
                    7a:37:70:81:32:12:01:e9:39:08:28:26:17:02:2d:
                    2a:de:d0:b2:4c:6d:b7:a5:a8:cf:52:76:eb:a2:65:
                    7d:34:32:93:02:3e:c2:01:40:71:25:b8:63:db:e2:
                    ef:92:57:b9:3e:fd:ac:ee:b1:d5:40:40:d6:ee:fc:
                    b6:56:44:bb:34:1e:57:b5:9a:e2:c9:b2:b4:cf:17:
                    4b:8e:4f:88:f2:ed:30:4e:49:9a:47:7a:6c:34:7e:
                    3a:d3:f0:5a:9d:60:f5:93:6e:fe:04:5a:c1:ee:ff:
                    72:ea:07:65:6e:6e:9a:4d:8f:91:9a:2e:c9:16:80:
                    ec:c6:89:32:86:50:af:4d:8c:de:4c:10:8f:69:53:
                    d6:ee:54:4a:e1:73:53:40:a0:f7:91:5f:4b:39:91:
                    8c:16:f7:2b:5e:40:e4:66:88:a5:ea:aa:7a:2f:7e:
                    80:8f:ed:fa:f4:b7:44:b6:ec:f5:d3:3f:17:c8:90:
                    53:aa:06:8d:6e:ab:d6:c2:4a:9e:d7:7c:63:70:87:
                    ac:1d:e5:ff:05:cb:e6:8d:a2:0d:7e:ce:cb:81:83:
                    dc:f3:2d:2b:8c:d5:dd:78:de:52:2b:bb:5e:82:d4:
                    ad:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:73:BB:A0:BD:1E:FB:E3:84:37:A6:D7:FA:52:8D:9C:D1:79:8A:E8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/3473BBA0BD1EFBE38437A6D7FA528D9CD1798AE8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.172.0/22
                IPv6:
                  2804:2e60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265342

    Signature Algorithm: sha256WithRSAEncryption
         35:b5:ba:af:8d:c8:30:0b:44:35:78:d8:1d:bc:a3:7b:da:92:
         d5:aa:ec:f7:91:6a:76:48:e0:97:5a:cb:08:40:25:d4:d1:f9:
         80:ea:cc:85:42:d0:c1:28:57:e3:8b:5c:58:36:d6:44:b8:c8:
         0f:73:43:cb:20:45:65:0b:bf:fc:aa:48:81:c1:19:30:28:d6:
         74:01:2a:e5:d5:c6:07:09:da:76:bd:e7:b4:b3:b4:35:e3:d5:
         5b:45:2f:eb:5d:de:db:3c:61:e3:89:6b:42:30:9d:c9:ba:c3:
         90:7c:77:07:50:c1:43:80:4d:6b:bd:9f:fb:51:6f:0f:de:d3:
         fd:98:f3:19:7f:ff:b5:05:85:bc:04:c7:4e:2d:b3:62:c2:81:
         18:8b:77:91:fb:d9:00:4e:e9:e5:b1:95:ad:f4:d1:e1:7d:ae:
         f0:0e:a3:f6:e7:af:d7:4c:1c:29:f2:4f:28:53:05:a8:80:b8:
         b7:06:0d:7d:15:58:35:8f:66:30:65:77:26:cd:d8:c1:43:88:
         cd:21:e5:ee:c6:fb:f9:e5:85:f6:3f:62:73:e8:8a:fa:5d:d2:
         44:5d:41:d5:b4:47:a7:9b:95:5d:42:8d:c7:f2:43:b5:28:f6:
         c4:8c:2b:e0:7f:16:02:bf:52:1c:25:4e:e3:50:2e:62:87:bb:
         5d:39:89:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:47:15 2025 by rpki-client