Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0C3D92736C234EA163D49D0CBA62F26B8F372B74.cer
File:                     0C3D92736C234EA163D49D0CBA62F26B8F372B74.cer (raw, json)
Hash identifier:          J2kV9zcRAU4IDYTwZp1TKxfDRgaR3NQuW+8lGrOlr78=
Subject key identifier:   0C:3D:92:73:6C:23:4E:A1:63:D4:9D:0C:BA:62:F2:6B:8F:37:2B:74
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       05B6BA4AE097A34F0A59E2CF9B4F760869353096
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/0C3D92736C234EA163D49D0CBA62F26B8F372B74.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Jan 2024 14:37:20 +0000
Certificate not after:    Tue 07 Jan 2025 14:42:20 +0000
Subordinate resources:    AS: 271072
                          IP: 179.48.100.0/22
                          IP: 2804:75d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b6:ba:4a:e0:97:a3:4f:0a:59:e2:cf:9b:4f:76:08:69:35:30:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  9 14:37:20 2024 GMT
            Not After : Jan  7 14:42:20 2025 GMT
        Subject: CN=0C3D92736C234EA163D49D0CBA62F26B8F372B74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:05:58:45:64:1c:18:7c:1a:82:c5:91:fe:d5:
                    b9:5f:65:f1:c6:11:41:5b:2e:63:93:af:1e:8d:cc:
                    b5:f8:13:75:1f:87:c5:fc:4f:ce:e8:48:b1:06:48:
                    28:ee:ff:48:d2:28:2c:33:63:0a:4e:e6:27:c3:7b:
                    df:b5:e6:d6:72:66:36:a3:65:9d:ba:d2:37:c3:7d:
                    81:15:ce:f2:d4:f9:07:98:9c:b5:26:b4:c2:a7:7a:
                    1f:d5:3e:bd:8f:a8:67:a1:d3:07:03:f6:67:ab:db:
                    ac:3f:bc:5c:54:18:40:64:97:44:3d:45:d0:73:88:
                    4e:2c:8b:98:7e:90:a4:09:4f:74:e8:71:12:54:33:
                    5b:71:a8:7c:4b:81:e2:d6:57:c7:7d:55:dd:4b:08:
                    31:f7:21:fc:5b:a9:1d:c9:9a:21:a8:88:e6:2a:b9:
                    86:9b:f2:f1:61:9f:82:8e:ec:37:bf:5b:ca:55:ca:
                    84:78:82:ef:8c:4f:c4:04:d6:7e:47:83:7a:3c:1b:
                    49:83:e0:fd:53:cf:cd:d0:28:79:e9:75:dd:df:fe:
                    66:89:42:14:27:52:52:05:03:c2:34:a2:8d:14:ca:
                    ef:1c:ea:2d:cd:fd:18:08:56:5c:b5:94:4f:98:55:
                    60:b2:b3:49:72:ed:af:50:6d:a6:e1:97:6f:ac:f6:
                    3d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:3D:92:73:6C:23:4E:A1:63:D4:9D:0C:BA:62:F2:6B:8F:37:2B:74
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/0C3D92736C234EA163D49D0CBA62F26B8F372B74.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.100.0/22
                IPv6:
                  2804:75d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271072

    Signature Algorithm: sha256WithRSAEncryption
         6f:f7:e0:cc:8e:56:41:b0:1e:1a:56:5a:5a:73:63:60:96:78:
         eb:38:d2:2a:8f:4f:1b:f4:6d:da:88:f8:31:f9:f6:ab:2c:7d:
         06:87:ed:47:2c:40:39:2e:e2:81:84:fc:b9:b3:95:32:42:5e:
         ab:23:83:29:dd:5a:25:12:22:90:f2:98:c3:29:6f:86:e5:17:
         6b:97:0d:88:11:d0:81:49:03:37:a6:b0:1b:da:af:21:e4:b6:
         5a:2e:93:0f:01:cb:12:ad:82:ba:ba:b0:89:d7:0c:10:bd:d3:
         33:02:81:7f:15:77:e8:88:ff:f8:60:33:b7:41:94:f1:0a:b7:
         a4:45:c4:ed:b2:b5:39:97:71:0c:11:69:f7:29:14:40:68:de:
         88:a7:91:14:4a:a5:27:79:74:53:75:9f:2e:93:6a:87:00:53:
         e8:7e:09:98:47:e8:7e:2b:19:33:7c:7b:63:d8:81:d1:3a:39:
         aa:a7:76:04:2e:11:66:44:80:e0:10:82:28:98:46:53:8d:ad:
         11:c9:c7:0c:86:bb:3f:c3:3f:b8:bb:e2:32:87:3b:3b:48:b8:
         a7:49:63:32:e6:b0:da:4d:8c:a8:da:ad:dc:88:20:ff:66:0f:
         af:ec:e9:d7:cb:63:ee:02:f3:1d:04:d4:1b:ad:64:84:d1:46:
         ec:b7:1b:ce
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUBba6SuCXo08KWeLPm092CGk1MJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMDkxNDM3MjBaFw0yNTAxMDcxNDQyMjBaMDMxMTAvBgNV
BAMTKDBDM0Q5MjczNkMyMzRFQTE2M0Q0OUQwQ0JBNjJGMjZCOEYzNzJCNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSBVhFZBwYfBqCxZH+1blfZfHG
EUFbLmOTrx6NzLX4E3Ufh8X8T87oSLEGSCju/0jSKCwzYwpO5ifDe9+15tZyZjaj
ZZ260jfDfYEVzvLU+QeYnLUmtMKneh/VPr2PqGeh0wcD9mer26w/vFxUGEBkl0Q9
RdBziE4si5h+kKQJT3TocRJUM1txqHxLgeLWV8d9Vd1LCDH3IfxbqR3JmiGoiOYq
uYab8vFhn4KO7De/W8pVyoR4gu+MT8QE1n5Hg3o8G0mD4P1Tz83QKHnpdd3f/maJ
QhQnUlIFA8I0oo0Uyu8c6i3N/RgIVly1lE+YVWCys0ly7a9Qbabhl2+s9j0tAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQMPZJzbCNOoWPU
nQy6YvJrjzcrdDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yZkRGUVlRVFR6S3RoaWo2NnlXcUgzS3J2cFBZYnpleFQx
aXh0Y3h4M0pMci8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMmZERlFZUVRUekt0aGlqNjZ5V3FIM0tydnBQWWJ6ZXhU
MWl4dGN4eDNKTHIvMC8wQzNEOTI3MzZDMjM0RUExNjNENDlEMENCQTYyRjI2QjhG
MzcyQjc0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKzMGQwDQQCAAIwBwMF
ACgEddQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCLgMA0GCSqGSIb3DQEBCwUA
A4IBAQBv9+DMjlZBsB4aVlpac2NglnjrONIqj08b9G3aiPgx+farLH0Gh+1HLEA5
LuKBhPy5s5UyQl6rI4Mp3VolEiKQ8pjDKW+G5Rdrlw2IEdCBSQM3prAb2q8h5LZa
LpMPAcsSrYK6urCJ1wwQvdMzAoF/FXfoiP/4YDO3QZTxCrekRcTtsrU5l3EMEWn3
KRRAaN6Ip5EUSqUneXRTdZ8uk2qHAFPofgmYR+h+KxkzfHtj2IHROjmqp3YELhFm
RIDgEIIomEZTja0RyccMhrs/wz+4u+Iyhzs7SLinSWMy5rDaTYyo2q3ciCD/Zg+v
7OnXy2PuAvMdBNQbrWSE0UbstxvO
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org