Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/034B07B9A28CA47FE468C614ED3ECCFCE8810362.cer
File:                     034B07B9A28CA47FE468C614ED3ECCFCE8810362.cer (raw, json)
Hash identifier:          Qg9hELhh1MHwxmHyyKsQbcHtf6ErQ2nglufg/jb97Hg=
Subject key identifier:   03:4B:07:B9:A2:8C:A4:7F:E4:68:C6:14:ED:3E:CC:FC:E8:81:03:62
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6589E2DD24A9DA8EA5526DA0ACC2F33278800804
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/034B07B9A28CA47FE468C614ED3ECCFCE8810362.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 15 Aug 2023 17:38:47 +0000
Certificate not after:    Tue 13 Aug 2024 17:43:47 +0000
Subordinate resources:    AS: 270340
                          IP: 190.83.84.0/22
                          IP: 2804:6a80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:89:e2:dd:24:a9:da:8e:a5:52:6d:a0:ac:c2:f3:32:78:80:08:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 15 17:38:47 2023 GMT
            Not After : Aug 13 17:43:47 2024 GMT
        Subject: CN=034B07B9A28CA47FE468C614ED3ECCFCE8810362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:f0:29:47:61:d0:4d:7e:86:a1:03:f0:03:
                    72:8e:e3:21:b9:5c:07:80:07:65:6d:01:91:75:5b:
                    ee:a0:df:52:37:02:fc:ab:1a:6a:0e:5b:cf:37:36:
                    a3:d8:67:1b:5e:4f:da:0a:20:15:47:3f:b5:0a:0e:
                    82:12:8f:14:a0:20:ad:99:ee:9a:ae:30:7e:d0:cb:
                    5a:cf:46:a5:4e:d4:42:1d:d5:41:0b:fb:47:9b:23:
                    5b:95:27:a1:eb:1c:00:c2:23:a5:65:f4:6b:5e:40:
                    63:e9:c1:88:ed:ab:1f:b0:07:82:d6:82:a4:60:30:
                    eb:f4:23:0c:a0:59:14:f2:c0:cc:3d:01:0b:16:dd:
                    fa:d1:38:08:67:78:2d:c7:fc:0f:2b:23:11:d1:c5:
                    0c:3a:f7:a5:e9:64:9e:27:67:c2:a9:a5:2d:f2:cf:
                    67:b6:b6:84:c7:84:55:74:13:f7:5a:1c:f3:b6:f5:
                    c8:dc:20:43:42:90:c2:23:10:db:6e:5c:75:0e:c3:
                    e7:1e:02:ca:9b:6e:1e:fb:b4:a4:d7:d9:ed:b0:74:
                    25:27:88:a8:f9:7f:55:7a:3f:26:01:80:9d:c9:f3:
                    c2:b6:91:cb:13:95:2b:7f:93:1d:28:a9:c3:b5:b4:
                    a6:8f:a9:47:88:c1:9b:02:ac:ea:b7:97:2f:a8:3d:
                    98:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:4B:07:B9:A2:8C:A4:7F:E4:68:C6:14:ED:3E:CC:FC:E8:81:03:62
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/034B07B9A28CA47FE468C614ED3ECCFCE8810362.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.84.0/22
                IPv6:
                  2804:6a80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270340

    Signature Algorithm: sha256WithRSAEncryption
         a8:71:c8:0d:b0:17:12:06:87:91:59:54:cc:5b:27:7c:4a:5b:
         6c:e9:c8:d3:e9:e3:b5:fe:ae:73:c3:59:7e:a3:7d:ab:6d:d8:
         48:46:3d:24:c8:5a:d0:d3:90:95:01:6e:4e:85:57:89:ab:59:
         5e:98:53:55:21:77:23:ec:c4:f9:2e:53:47:5b:bf:a9:d6:00:
         f8:32:af:68:1e:f1:db:e9:ea:17:1d:43:4a:70:34:f9:e5:37:
         a9:8d:cb:77:be:74:9c:bc:7e:72:f9:3f:92:bb:b6:71:e5:08:
         3c:00:64:0f:25:8b:45:0e:8a:e3:98:4b:b4:1b:f7:1a:db:bd:
         5f:fc:33:c1:b1:55:10:de:7b:f7:e9:d3:bd:dc:b4:4f:ab:20:
         20:ee:ec:40:ae:34:0c:8f:8f:fd:78:58:5b:8f:92:70:62:a7:
         b8:0b:c9:0f:df:d6:3a:38:09:70:a3:d0:0d:31:c7:9d:0d:26:
         9b:20:13:7a:00:a2:21:67:17:81:5c:f9:2b:7f:83:57:c5:6c:
         2b:49:3a:f1:cf:21:07:c8:79:0e:fa:d4:87:1f:ba:24:35:92:
         85:99:e9:94:f6:bf:d7:cc:f8:61:5c:62:d4:9a:14:bf:0c:99:
         40:3c:9f:04:ee:94:ea:77:2d:ee:b1:18:2c:10:3b:48:aa:93:
         f8:28:16:15
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUZYni3SSp2o6lUm2grMLzMniACAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MTUxNzM4NDdaFw0yNDA4MTMxNzQzNDdaMDMxMTAvBgNV
BAMTKDAzNEIwN0I5QTI4Q0E0N0ZFNDY4QzYxNEVEM0VDQ0ZDRTg4MTAzNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxbPApR2HQTX6GoQPwA3KO4yG5
XAeAB2VtAZF1W+6g31I3AvyrGmoOW883NqPYZxteT9oKIBVHP7UKDoISjxSgIK2Z
7pquMH7Qy1rPRqVO1EId1UEL+0ebI1uVJ6HrHADCI6Vl9GteQGPpwYjtqx+wB4LW
gqRgMOv0IwygWRTywMw9AQsW3frROAhneC3H/A8rIxHRxQw696XpZJ4nZ8KppS3y
z2e2toTHhFV0E/daHPO29cjcIENCkMIjENtuXHUOw+ceAsqbbh77tKTX2e2wdCUn
iKj5f1V6PyYBgJ3J88K2kcsTlSt/kx0oqcO1tKaPqUeIwZsCrOq3ly+oPZjDAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQDSwe5ooykf+Ro
xhTtPsz86IEDYjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zSExDUzFFNFB4MUd2M1BUMXBRa3IzcnVFQ0VRcVJQQ1Ez
WmM0Z3BDb2JjYy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zSExDUzFFNFB4MUd2M1BUMXBRa3IzcnVFQ0VRcVJQQ1Ez
WmM0Z3BDb2JjYy8wLzAzNEIwN0I5QTI4Q0E0N0ZFNDY4QzYxNEVEM0VDQ0ZDRTg4
MTAzNjIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAr5TVDANBAIAAjAHAwUA
KARqgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEIAQwDQYJKoZIhvcNAQELBQAD
ggEBAKhxyA2wFxIGh5FZVMxbJ3xKW2zpyNPp47X+rnPDWX6jfatt2EhGPSTIWtDT
kJUBbk6FV4mrWV6YU1UhdyPsxPkuU0dbv6nWAPgyr2ge8dvp6hcdQ0pwNPnlN6mN
y3e+dJy8fnL5P5K7tnHlCDwAZA8li0UOiuOYS7Qb9xrbvV/8M8GxVRDee/fp073c
tE+rICDu7ECuNAyPj/14WFuPknBip7gLyQ/f1jo4CXCj0A0xx50NJpsgE3oAoiFn
F4Fc+St/g1fFbCtJOvHPIQfIeQ761IcfuiQ1koWZ6ZT2v9fM+GFcYtSaFL8MmUA8
nwTulOp3Le6xGCwQO0iqk/goFhU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org