Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98.cer
File:                     3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98.cer (raw, json)
Hash identifier:          8Mgy8WoNLOTWUVCQaEIeHj2mATi0+OEHvKKFpowiLXc=
Subject key identifier:   3D:92:BD:1D:86:D9:53:1F:C6:4C:CA:64:8B:A9:AA:D0:FE:20:DC:98
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C8315A6449D478DF1172AB9C21D5F7B013BBA0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 23 Apr 2023 16:39:23 +0000
Certificate not after:    Sun 21 Apr 2024 16:44:23 +0000
Subordinate resources:    AS: 272535
                          IP: 201.94.152.0/22
                          IP: 2804:82b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:83:15:a6:44:9d:47:8d:f1:17:2a:b9:c2:1d:5f:7b:01:3b:ba:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 23 16:39:23 2023 GMT
            Not After : Apr 21 16:44:23 2024 GMT
        Subject: CN=3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:00:03:e4:30:60:7b:d5:b9:6d:d6:b2:b5:99:
                    27:55:a0:e8:91:d8:77:6c:0f:de:c5:87:2a:b3:58:
                    45:95:41:f7:5f:5b:d4:e9:dc:48:6f:0b:c8:0f:c4:
                    1f:f8:c5:bc:b4:17:da:4f:97:4a:03:33:bf:6d:ed:
                    87:98:46:98:3d:60:c2:25:75:df:d6:15:5b:c7:89:
                    a0:69:ac:92:4b:99:36:71:70:23:08:61:eb:f4:b9:
                    42:94:7a:5b:27:c3:e6:28:57:8c:37:4f:47:90:23:
                    97:27:b1:a7:c2:be:7e:c8:8c:bf:9a:d1:f0:d8:70:
                    c9:d9:b2:89:da:a7:bf:06:82:32:ce:3d:a3:8f:eb:
                    a3:fb:03:d5:d8:6f:bd:2a:e8:65:c3:67:57:98:af:
                    e7:bd:24:17:a7:b3:5c:8f:0e:77:dc:2b:cd:a3:48:
                    a1:08:95:04:c1:08:15:6a:d1:63:dd:f0:e7:12:ff:
                    5a:79:13:91:81:7e:ac:46:88:09:40:3c:1f:32:d4:
                    31:fb:7f:6d:dd:1d:e3:b1:dc:73:d8:f3:64:43:67:
                    e1:dd:40:b3:6a:7a:bc:17:8c:5e:04:bc:15:2d:b2:
                    2a:8b:f1:44:64:6e:7c:0c:a0:46:71:82:92:2d:03:
                    c7:11:38:e3:2d:70:69:00:45:b0:4b:30:70:99:c1:
                    52:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3D:92:BD:1D:86:D9:53:1F:C6:4C:CA:64:8B:A9:AA:D0:FE:20:DC:98
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.152.0/22
                IPv6:
                  2804:82b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272535

    Signature Algorithm: sha256WithRSAEncryption
         53:f6:e5:31:3e:55:f1:36:88:98:f3:4d:47:33:c1:e2:ca:09:
         e9:70:10:70:12:b1:84:2c:fa:49:9f:f6:1c:ec:e4:ed:ff:d5:
         08:ee:7b:fe:eb:66:b8:c4:4b:e9:31:54:de:ca:ba:0b:92:76:
         31:7d:47:30:ca:d1:8b:29:42:60:e8:f2:76:7f:34:b6:06:85:
         2f:01:d3:79:03:96:12:80:42:54:c9:e0:68:49:52:37:de:6f:
         e0:0c:dd:b7:96:df:b0:15:87:70:ce:41:8f:40:b7:45:d0:7f:
         71:8a:4d:56:9b:22:e6:69:2f:95:92:b0:8d:3c:88:bb:4b:b5:
         35:ca:1a:27:a5:da:7c:bc:1f:3e:da:77:5b:27:36:5c:1c:57:
         ae:4f:dc:5d:3c:c8:fc:53:b7:7d:2b:db:78:3a:46:5d:56:47:
         05:7a:79:4a:6e:b4:87:11:e6:16:7a:8b:6b:7c:f0:c4:2a:cb:
         1a:26:4f:52:9b:b0:c8:3f:f6:f5:55:d3:f0:d3:5e:96:1f:3a:
         2a:a9:48:f5:ae:aa:f8:05:1b:f2:74:bf:66:64:3d:ce:1b:c7:
         9f:99:0c:38:68:5a:66:f0:63:c5:7e:9f:6f:6c:f4:6d:db:b0:
         77:6e:2b:c3:7d:6d:2c:24:24:aa:75:ef:d7:78:a9:65:67:41:
         54:36:4a:c1
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUPIMVpkSdR43xFyq5wh1fewE7ugowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MjMxNjM5MjNaFw0yNDA0MjExNjQ0MjNaMDMxMTAvBgNV
BAMTKDNEOTJCRDFEODZEOTUzMUZDNjRDQ0E2NDhCQTlBQUQwRkUyMERDOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSAAPkMGB71blt1rK1mSdVoOiR
2HdsD97FhyqzWEWVQfdfW9Tp3EhvC8gPxB/4xby0F9pPl0oDM79t7YeYRpg9YMIl
dd/WFVvHiaBprJJLmTZxcCMIYev0uUKUelsnw+YoV4w3T0eQI5cnsafCvn7IjL+a
0fDYcMnZsonap78GgjLOPaOP66P7A9XYb70q6GXDZ1eYr+e9JBens1yPDnfcK82j
SKEIlQTBCBVq0WPd8OcS/1p5E5GBfqxGiAlAPB8y1DH7f23dHeOx3HPY82RDZ+Hd
QLNqerwXjF4EvBUtsiqL8URkbnwMoEZxgpItA8cROOMtcGkARbBLMHCZwVLnAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ9kr0dhtlTH8ZM
ymSLqarQ/iDcmDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Gb0hmMXFZODNBN3d4WlMxQWZYTTNCUzd4SzNUWmJKVWJq
bnZCVTVpTEpVWS8xMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Gb0hmMXFZODNBN3d4WlMxQWZYTTNCUzd4SzNUWmJKVWJq
bnZCVTVpTEpVWS8xLzNEOTJCRDFEODZEOTUzMUZDNjRDQ0E2NDhCQTlBQUQwRkUy
MERDOTgubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAslemDANBAIAAjAHAwUA
KASCtDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEKJcwDQYJKoZIhvcNAQELBQAD
ggEBAFP25TE+VfE2iJjzTUczweLKCelwEHASsYQs+kmf9hzs5O3/1Qjue/7rZrjE
S+kxVN7KuguSdjF9RzDK0YspQmDo8nZ/NLYGhS8B03kDlhKAQlTJ4GhJUjfeb+AM
3beW37AVh3DOQY9At0XQf3GKTVabIuZpL5WSsI08iLtLtTXKGiel2ny8Hz7ad1sn
NlwcV65P3F08yPxTt30r23g6Rl1WRwV6eUputIcR5hZ6i2t88MQqyxomT1KbsMg/
9vVV0/DTXpYfOiqpSPWuqvgFG/J0v2ZkPc4bx5+ZDDhoWmbwY8V+n29s9G3bsHdu
K8N9bSwkJKp179d4qWVnQVQ2SsE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org