Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3.cer
File:                     3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3.cer (raw, json)
Hash identifier:          zUGdPp4gquByJz5Cyw4ZiMwcfRAgrAFfW43hZKddgcM=
Subject key identifier:   3E:07:D4:2B:83:C9:C0:B5:EA:AD:85:D6:DE:CB:FF:06:90:FB:5A:B3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7037A0C20B3D7E0E83BD1E4434302F8C53F828BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/0/3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 26 Nov 2022 12:47:34 +0000
Certificate not after:    Sat 25 Nov 2023 12:52:34 +0000
Subordinate resources:    AS: 265290
                          IP: 168.90.204.0/22
                          IP: 2804:2d94::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:37:a0:c2:0b:3d:7e:0e:83:bd:1e:44:34:30:2f:8c:53:f8:28:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 26 12:47:34 2022 GMT
            Not After : Nov 25 12:52:34 2023 GMT
        Subject: CN=3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:61:5f:45:5f:35:aa:42:f6:ef:b7:43:9c:09:
                    cd:5a:3d:e5:71:c6:7a:55:4e:f9:f3:3f:39:5a:37:
                    82:af:70:80:2a:94:d1:b7:2b:13:32:56:71:ab:e8:
                    70:84:af:d2:a7:c0:3c:c5:30:b1:8b:51:15:e0:e8:
                    bc:8d:34:e0:39:9d:ec:bf:51:68:f1:1e:e6:41:0a:
                    0a:7f:b4:99:1d:ad:b6:97:07:e9:dd:17:bf:5d:48:
                    41:47:b3:14:28:7a:2f:4a:54:1f:66:23:dd:16:ef:
                    bb:58:49:c8:02:74:96:c9:e4:6e:63:4a:03:0f:a4:
                    43:40:f6:ce:5b:75:a1:85:23:a5:d5:ac:71:6f:25:
                    f3:aa:62:28:0b:45:40:5d:ac:45:2e:22:32:c6:a3:
                    6d:eb:82:9a:83:56:f9:aa:54:78:32:b9:79:d8:12:
                    c6:b8:74:17:58:de:04:fb:a1:cd:a1:62:2b:53:8d:
                    0a:05:90:0e:a5:89:70:53:0f:9c:be:85:37:be:21:
                    57:81:cc:a0:2a:de:62:96:17:54:a6:87:f8:15:66:
                    86:4d:6f:c9:3e:b4:24:c9:45:20:ac:d3:58:38:11:
                    08:7d:14:fd:b7:f2:ab:a2:41:a1:2c:ab:52:3f:0f:
                    01:b8:1d:5a:36:d1:58:89:e7:71:46:30:2c:3e:89:
                    6d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:07:D4:2B:83:C9:C0:B5:EA:AD:85:D6:DE:CB:FF:06:90:FB:5A:B3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/0/3E07D42B83C9C0B5EAAD85D6DECBFF0690FB5AB3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.204.0/22
                IPv6:
                  2804:2d94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265290

    Signature Algorithm: sha256WithRSAEncryption
         55:32:e6:46:08:27:7e:0e:a8:83:a7:e9:db:42:07:02:ae:f8:
         75:8f:ed:e4:b0:84:ae:cb:b6:e8:4c:0a:98:d6:d9:d3:d2:ca:
         69:d7:c5:c0:03:58:24:b0:9e:57:36:14:2b:45:e6:a3:5b:87:
         72:03:d8:55:90:15:8a:8f:37:d2:aa:a8:c9:a5:99:66:1c:72:
         57:3e:90:e7:ba:25:dc:9f:9b:4e:9e:6e:e5:3b:21:6f:4c:fb:
         fb:6f:9e:0d:d2:aa:26:49:eb:60:0f:2f:94:f4:a1:04:7b:13:
         44:97:6d:b7:12:08:ed:5d:eb:a4:0b:fd:59:dd:ba:8d:ed:fd:
         ca:6f:54:1d:a6:0a:de:8f:2b:59:0d:d5:08:47:f9:ad:86:2b:
         21:81:82:4d:02:3c:21:58:b4:27:0f:4f:7a:2f:c6:29:48:a1:
         38:c7:5c:37:ac:17:1d:d0:28:84:6f:a2:2b:89:f4:30:96:e2:
         1c:4a:21:4f:76:92:2e:a4:c9:a5:52:55:f7:82:ea:a1:01:ec:
         87:23:2f:dc:ca:92:c5:b4:f0:6d:68:d0:74:57:ab:dc:a3:41:
         95:55:1b:13:00:52:7f:7e:f8:82:8d:2b:0f:78:b3:c1:e3:23:
         dd:75:a6:6f:96:fc:ca:aa:2f:ce:c2:cb:4d:2c:6d:84:78:c2:
         9f:73:5a:0e
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUcDegwgs9fg6DvR5ENDAvjFP4KL4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjExMjYxMjQ3MzRaFw0yMzExMjUxMjUyMzRaMDMxMTAvBgNV
BAMTKDNFMDdENDJCODNDOUMwQjVFQUFEODVENkRFQ0JGRjA2OTBGQjVBQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwYV9FXzWqQvbvt0OcCc1aPeVx
xnpVTvnzPzlaN4KvcIAqlNG3KxMyVnGr6HCEr9KnwDzFMLGLURXg6LyNNOA5ney/
UWjxHuZBCgp/tJkdrbaXB+ndF79dSEFHsxQoei9KVB9mI90W77tYScgCdJbJ5G5j
SgMPpENA9s5bdaGFI6XVrHFvJfOqYigLRUBdrEUuIjLGo23rgpqDVvmqVHgyuXnY
Esa4dBdY3gT7oc2hYitTjQoFkA6liXBTD5y+hTe+IVeBzKAq3mKWF1Smh/gVZoZN
b8k+tCTJRSCs01g4EQh9FP238quiQaEsq1I/DwG4HVo20ViJ53FGMCw+iW1DAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+B9Qrg8nAteqt
hdbey/8GkPtaszAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BWW5YUUczWldFUmptbnRneUhYN1JBcDFIeFFjbjNKaERE
NXZVelJZVFJRSy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BWW5YUUczWldFUmptbnRneUhYN1JBcDFIeFFjbjNKaERE
NXZVelJZVFJRSy8wLzNFMDdENDJCODNDOUMwQjVFQUFEODVENkRFQ0JGRjA2OTBG
QjVBQjMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqhazDANBAIAAjAHAwUA
KAQtlDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDEowDQYJKoZIhvcNAQELBQAD
ggEBAFUy5kYIJ34OqIOn6dtCBwKu+HWP7eSwhK7LtuhMCpjW2dPSymnXxcADWCSw
nlc2FCtF5qNbh3ID2FWQFYqPN9KqqMmlmWYcclc+kOe6Jdyfm06ebuU7IW9M+/tv
ng3SqiZJ62APL5T0oQR7E0SXbbcSCO1d66QL/Vnduo3t/cpvVB2mCt6PK1kN1QhH
+a2GKyGBgk0CPCFYtCcPT3ovxilIoTjHXDesFx3QKIRvoiuJ9DCW4hxKIU92ki6k
yaVSVfeC6qEB7IcjL9zKksW08G1o0HRXq9yjQZVVGxMAUn9++IKNKw94s8HjI911
pm+W/MqqL87Cy00sbYR4wp9zWg4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org