Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0C3A9AA1E2E7606CC6C7E410736FD2AFCC39A023.cer
File:                     0C3A9AA1E2E7606CC6C7E410736FD2AFCC39A023.cer (raw, json)
Hash identifier:          ATBmxJ3f8X3vPGe+XmaCf+55xOvgXLOwDULVEpnia80=
Subject key identifier:   0C:3A:9A:A1:E2:E7:60:6C:C6:C7:E4:10:73:6F:D2:AF:CC:39:A0:23
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7ECC8D0F5476109723A737BD2AE62AD60372887A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/0C3A9AA1E2E7606CC6C7E410736FD2AFCC39A023.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 Jun 2022 14:23:18 +0000
Certificate not after:    Thu 29 Jun 2023 14:28:18 +0000
Subordinate resources:    AS: 28160
                          IP: 187.62.144.0/20
                          IP: 2804:3e00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:cc:8d:0f:54:76:10:97:23:a7:37:bd:2a:e6:2a:d6:03:72:88:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 30 14:23:18 2022 GMT
            Not After : Jun 29 14:28:18 2023 GMT
        Subject: CN=0C3A9AA1E2E7606CC6C7E410736FD2AFCC39A023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:76:a3:df:5f:f8:6b:89:40:d2:f5:71:76:01:
                    6a:34:2c:0c:48:76:28:8e:a6:1e:73:a2:39:62:26:
                    af:c3:c5:5f:3b:3f:db:83:d0:5f:77:87:12:51:c1:
                    65:25:f8:ff:97:ca:c0:8b:11:bb:44:89:89:94:e3:
                    7f:d8:a4:2d:2b:1c:84:79:23:9f:8f:f2:a3:79:57:
                    75:ca:fd:16:f1:f9:0e:40:6f:dc:47:7e:82:cd:b6:
                    49:de:87:c7:fe:73:cb:e0:ac:89:29:e7:03:f9:92:
                    72:91:c3:2c:46:20:c3:37:31:28:34:fa:be:72:00:
                    ca:e7:aa:54:eb:1d:40:fc:41:f4:53:2c:6b:ad:e7:
                    bf:2e:d7:d3:3f:89:72:34:ad:94:d8:97:73:23:65:
                    06:34:42:9c:e8:e3:25:85:09:45:9a:ce:8f:77:2a:
                    ea:74:e9:df:80:2b:d4:e8:0a:d0:ba:a4:6b:9f:3b:
                    15:b8:b5:4e:50:d3:0c:40:6d:89:6c:1a:43:6f:f7:
                    a7:dd:90:25:0a:c2:dc:c5:b1:af:fe:c5:27:8d:d6:
                    69:1d:b8:c8:03:1f:94:b6:53:28:ed:ce:64:5d:e4:
                    6b:07:ac:4f:1a:23:c4:75:6d:7f:48:f9:20:02:f6:
                    3c:06:7e:fa:8e:78:93:f8:2e:88:43:2c:c5:70:63:
                    84:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:3A:9A:A1:E2:E7:60:6C:C6:C7:E4:10:73:6F:D2:AF:CC:39:A0:23
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/0C3A9AA1E2E7606CC6C7E410736FD2AFCC39A023.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.144.0/20
                IPv6:
                  2804:3e00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28160

    Signature Algorithm: sha256WithRSAEncryption
         2b:20:3b:f6:40:09:f1:45:4d:f7:f3:5e:08:cc:69:1b:9b:cb:
         e8:05:d8:f7:3f:6d:ce:8a:0b:68:9a:9e:54:b1:d0:d8:6d:13:
         1a:18:22:ea:31:67:fe:34:5c:2f:49:1a:57:62:33:75:70:0f:
         61:85:82:7f:c0:5a:53:81:90:1b:19:0b:a8:aa:48:43:8b:3e:
         1b:3d:ea:fb:60:4c:19:29:05:1f:38:67:14:70:e7:1f:1d:ff:
         e1:b8:21:4c:4f:62:e9:64:56:0f:9b:26:84:dd:ca:af:9d:23:
         0f:b7:b0:33:85:8c:04:f5:87:10:2d:d5:58:57:c7:0f:23:54:
         db:33:b5:e9:de:0b:30:1e:d8:cc:df:c3:2f:87:b8:b4:cc:48:
         6e:24:fd:8b:6a:4d:c0:88:10:75:e5:9f:eb:30:a8:54:e8:41:
         c8:e9:50:64:21:5d:66:e2:de:64:79:4f:64:da:24:2d:cc:66:
         b2:97:fc:38:97:57:15:42:05:99:b7:61:1a:4e:58:a7:61:e1:
         c3:53:ee:ce:82:7b:37:9c:f7:d5:7b:da:d0:a9:39:bd:e3:4b:
         3e:8b:ba:e8:ed:fc:68:fa:e9:41:a8:46:53:77:27:6a:41:d9:
         ea:2f:60:e4:b4:12:b8:fa:31:81:a6:8f:03:21:d7:1a:79:9c:
         ea:15:69:ee
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUfsyND1R2EJcjpze9KuYq1gNyiHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA2MzAxNDIzMThaFw0yMzA2MjkxNDI4MThaMDMxMTAvBgNV
BAMTKDBDM0E5QUExRTJFNzYwNkNDNkM3RTQxMDczNkZEMkFGQ0MzOUEwMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCldqPfX/hriUDS9XF2AWo0LAxI
diiOph5zojliJq/DxV87P9uD0F93hxJRwWUl+P+XysCLEbtEiYmU43/YpC0rHIR5
I5+P8qN5V3XK/Rbx+Q5Ab9xHfoLNtkneh8f+c8vgrIkp5wP5knKRwyxGIMM3MSg0
+r5yAMrnqlTrHUD8QfRTLGut578u19M/iXI0rZTYl3MjZQY0Qpzo4yWFCUWazo93
Kup06d+AK9ToCtC6pGufOxW4tU5Q0wxAbYlsGkNv96fdkCUKwtzFsa/+xSeN1mkd
uMgDH5S2UyjtzmRd5GsHrE8aI8R1bX9I+SAC9jwGfvqOeJP4LohDLMVwY4QJAgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQMOpqh4udgbMbH
5BBzb9KvzDmgIzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DdldqVXIxU3lnVUNtcVpyWUVaTDJLSnppZ29FUnlRZzRk
QXFtYWZMYUFVdC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DdldqVXIxU3lnVUNtcVpyWUVaTDJLSnppZ29FUnlRZzRk
QXFtYWZMYUFVdC8wLzBDM0E5QUExRTJFNzYwNkNDNkM3RTQxMDczNkZEMkFGQ0Mz
OUEwMjMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBLs+kDANBAIAAjAHAwUA
KAQ+ADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJuADANBgkqhkiG9w0BAQsFAAOC
AQEAKyA79kAJ8UVN9/NeCMxpG5vL6AXY9z9tzooLaJqeVLHQ2G0TGhgi6jFn/jRc
L0kaV2IzdXAPYYWCf8BaU4GQGxkLqKpIQ4s+Gz3q+2BMGSkFHzhnFHDnHx3/4bgh
TE9i6WRWD5smhN3Kr50jD7ewM4WMBPWHEC3VWFfHDyNU2zO16d4LMB7YzN/DL4e4
tMxIbiT9i2pNwIgQdeWf6zCoVOhByOlQZCFdZuLeZHlPZNokLcxmspf8OJdXFUIF
mbdhGk5Yp2Hhw1PuzoJ7N5z31Xva0Kk5veNLPou66O38aPrpQahGU3cnakHZ6i9g
5LQSuPoxgaaPAyHXGnmc6hVp7g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org