Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3B50656E6E797E0F145ECD250D8D6D300CC794BA.cer
File:                     3B50656E6E797E0F145ECD250D8D6D300CC794BA.cer (raw, json)
Hash identifier:          +tKZQVI+MCnl+aTEcPrEe/XB7MAI+FCfMlE6u24sKjc=
Subject key identifier:   3B:50:65:6E:6E:79:7E:0F:14:5E:CD:25:0D:8D:6D:30:0C:C7:94:BA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6A33465DEF6A996A21BE8063AA430BB497BCF255
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3B50656E6E797E0F145ECD250D8D6D300CC794BA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 13:00:08 +0000
Certificate not after:    Thu 18 Apr 2024 13:05:08 +0000
Subordinate resources:    AS: 61666
                          IP: 131.108.76.0/22
                          IP: 138.94.180.0/22
                          IP: 138.219.84.0/22
                          IP: 170.81.224.0/22
                          IP: 2804:1ca0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:33:46:5d:ef:6a:99:6a:21:be:80:63:aa:43:0b:b4:97:bc:f2:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 20 13:00:08 2023 GMT
            Not After : Apr 18 13:05:08 2024 GMT
        Subject: CN=3B50656E6E797E0F145ECD250D8D6D300CC794BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ad:88:8a:d6:cf:21:ae:1a:37:ad:9f:40:d9:
                    9b:73:0d:3e:d2:b8:de:3e:58:bd:33:41:9a:ea:5d:
                    d9:d9:fa:60:a3:ad:77:6d:6f:2f:e4:7b:56:ad:fa:
                    66:5d:1b:e0:fc:cc:c1:34:60:52:68:f8:3d:ea:60:
                    e1:c9:68:f8:58:f7:1e:81:90:ae:0d:31:dd:77:34:
                    63:f1:74:bd:b3:93:61:4d:93:e8:9a:e7:e6:f6:e1:
                    5e:3a:5c:5b:fc:35:83:3d:f7:2c:59:62:42:c5:69:
                    ee:3b:9c:fe:f2:e7:29:70:a5:9d:2d:9c:15:80:22:
                    7a:a3:9b:93:fc:33:ee:c7:fa:fe:81:b8:5b:df:66:
                    c3:7c:57:b8:47:e2:29:26:bb:c0:17:95:bf:45:af:
                    a9:65:3a:09:a0:ed:da:2d:77:ce:10:e5:7f:c7:18:
                    04:6c:6f:02:75:54:04:c7:fb:89:de:16:ab:38:bd:
                    52:e3:b5:36:1a:5c:db:b5:8e:7b:d1:b3:96:9a:c3:
                    bf:8e:58:ff:57:1d:fb:2f:14:3a:97:9c:4d:bf:5e:
                    5b:eb:42:35:40:ed:2b:64:e5:d1:0e:c6:a9:ff:68:
                    7d:06:0d:6a:4c:0c:41:e5:08:a4:ba:b4:ab:f5:8d:
                    09:b5:88:7d:ef:e9:0f:c9:4f:2d:2c:e3:9f:4a:a1:
                    b4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:50:65:6E:6E:79:7E:0F:14:5E:CD:25:0D:8D:6D:30:0C:C7:94:BA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3B50656E6E797E0F145ECD250D8D6D300CC794BA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.76.0/22
                  138.94.180.0/22
                  138.219.84.0/22
                  170.81.224.0/22
                IPv6:
                  2804:1ca0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61666

    Signature Algorithm: sha256WithRSAEncryption
         30:5e:48:f4:9b:49:ad:79:62:37:de:9e:9c:17:ee:4e:a0:9a:
         48:75:bc:f1:d0:dc:fd:c5:22:7d:61:f7:ae:91:43:1f:00:86:
         51:3a:f8:60:d4:95:53:52:43:b5:0a:76:7c:f5:1b:b2:da:c0:
         06:52:b3:58:65:9c:32:7e:4f:cd:ba:45:01:6e:84:df:d9:7f:
         d7:b9:80:e3:0b:eb:d8:76:aa:71:20:70:fc:92:5d:20:d3:10:
         8c:e1:16:c4:03:34:5a:a7:6c:3a:a8:77:36:cd:a8:8b:8f:90:
         30:0f:85:df:ac:82:54:0d:ac:91:2c:e9:d7:80:89:ee:a6:57:
         31:bf:c2:37:a3:51:2a:9a:4e:1d:39:03:19:25:a6:cf:4b:9c:
         58:a6:7e:5f:27:cf:ed:46:f5:75:80:2b:05:b9:af:d4:a8:e2:
         48:c7:b8:6d:34:84:b6:ee:95:8a:dd:b4:db:b3:1a:91:ed:0c:
         fb:54:eb:9d:89:fb:7e:2c:f6:aa:b9:fa:fa:b9:ba:4b:97:a2:
         ee:d8:f3:ba:fe:30:b2:99:d0:cf:95:7a:6a:cc:91:d6:d3:19:
         11:81:e3:a1:6c:bf:f0:d0:6a:73:c7:88:93:08:22:7f:ab:ec:
         ce:9d:26:ac:a6:47:e8:e7:87:56:e8:6d:1f:00:79:2b:a8:73:
         08:c4:5b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:11:32 2025 by rpki-client