Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1D3F19360D7AC4E9902F8B30805ADA33235167B4.cer
File:                     1D3F19360D7AC4E9902F8B30805ADA33235167B4.cer (raw, json)
Hash identifier:          IAWn7B1IB7pJjdJd0qTjfozcbW+43tYaLEzB+ZB3Yao=
Subject key identifier:   1D:3F:19:36:0D:7A:C4:E9:90:2F:8B:30:80:5A:DA:33:23:51:67:B4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2BC3E0BC57DD265C4C5E00D5114402EB2853C819
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/0/1D3F19360D7AC4E9902F8B30805ADA33235167B4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Jan 2024 13:00:10 +0000
Certificate not after:    Thu 23 Jan 2025 13:05:10 +0000
Subordinate resources:    AS: 270891
                          IP: 138.121.40.0/22
                          IP: 2804:7308::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c3:e0:bc:57:dd:26:5c:4c:5e:00:d5:11:44:02:eb:28:53:c8:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 25 13:00:10 2024 GMT
            Not After : Jan 23 13:05:10 2025 GMT
        Subject: CN=1D3F19360D7AC4E9902F8B30805ADA33235167B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0a:f8:a6:dc:d7:2a:6a:de:9f:4a:1b:ae:63:
                    0d:83:47:2e:60:30:a2:2b:36:9e:d8:18:78:38:df:
                    ff:03:0b:31:29:75:59:d7:07:03:17:c6:4e:a4:c2:
                    2d:a9:4c:37:10:61:32:5c:39:36:a1:77:e3:e3:07:
                    93:2a:fa:ec:02:95:8e:04:0e:bf:ab:e9:af:51:d6:
                    6d:41:eb:ba:0d:fc:4f:79:79:90:b1:62:12:88:8f:
                    1b:8f:67:a5:16:3e:55:0d:72:e6:8f:7e:f1:13:ec:
                    aa:30:22:33:c9:03:ac:c2:51:51:6a:60:20:04:93:
                    1a:46:16:dd:96:b8:1f:cf:1b:f7:aa:7b:72:98:98:
                    d3:57:06:2a:9a:5f:ce:15:e7:1e:c5:93:46:57:55:
                    92:12:db:ca:1c:62:e3:32:5f:04:4c:55:8e:54:44:
                    e6:50:a1:1d:76:5f:4a:1b:d4:30:4c:07:06:21:76:
                    df:eb:27:96:f9:1f:f9:82:43:64:e2:70:16:0c:ab:
                    9c:89:57:c3:a4:6c:1a:3f:0d:49:3f:54:c4:1b:3f:
                    47:c6:05:70:3f:d0:14:09:b0:5d:3c:a0:72:e1:59:
                    2f:85:37:8c:0c:1d:0e:68:ba:69:fb:28:6e:8d:24:
                    f0:4c:b6:f8:5b:e1:17:6b:cc:a9:34:a8:ee:59:11:
                    5b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:3F:19:36:0D:7A:C4:E9:90:2F:8B:30:80:5A:DA:33:23:51:67:B4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/0/1D3F19360D7AC4E9902F8B30805ADA33235167B4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.40.0/22
                IPv6:
                  2804:7308::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270891

    Signature Algorithm: sha256WithRSAEncryption
         6b:d8:03:ab:b1:81:79:ba:5d:32:72:27:45:f8:e0:fd:23:ef:
         0f:0a:bd:46:44:f8:f0:fd:f3:3c:c0:3d:4a:6c:81:3a:1d:3f:
         fb:c1:22:c0:f0:54:79:2a:5d:a7:5b:24:61:96:f9:e3:4b:ae:
         8a:78:53:dc:68:67:94:3c:85:98:4e:8e:6b:f5:8c:65:3e:00:
         e4:58:de:b0:28:34:0f:0f:c5:ee:28:56:5a:5a:66:18:39:37:
         9c:91:6e:6c:13:f9:73:a8:6a:46:ad:15:4f:4d:fd:2d:17:d0:
         9d:1a:b4:5c:25:29:7e:87:4b:dc:18:8c:47:28:cc:0b:8a:75:
         a2:1d:b5:06:a9:6c:16:24:92:64:03:90:03:04:d2:bc:e4:a1:
         5c:a0:34:bf:d0:96:f7:c5:0a:ee:49:62:64:1c:bd:a6:a5:cd:
         88:84:af:e0:97:06:75:ef:a3:9d:1c:f0:f7:a9:ea:d4:25:db:
         f3:ba:b4:93:6f:08:af:54:7b:b1:9a:0e:91:d7:b7:63:79:34:
         e2:22:69:86:35:8b:48:3f:65:01:65:d3:62:a1:1b:57:a1:4a:
         8c:87:7c:f5:6e:1c:44:7f:d4:73:3d:d4:87:53:5b:25:16:90:
         a9:8f:01:12:65:55:02:49:80:aa:9a:b6:af:a9:54:dc:35:6b:
         26:51:14:f9
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUK8PgvFfdJlxMXgDVEUQC6yhTyBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMjUxMzAwMTBaFw0yNTAxMjMxMzA1MTBaMDMxMTAvBgNV
BAMTKDFEM0YxOTM2MEQ3QUM0RTk5MDJGOEIzMDgwNUFEQTMzMjM1MTY3QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBCvim3Ncqat6fShuuYw2DRy5g
MKIrNp7YGHg43/8DCzEpdVnXBwMXxk6kwi2pTDcQYTJcOTahd+PjB5Mq+uwClY4E
Dr+r6a9R1m1B67oN/E95eZCxYhKIjxuPZ6UWPlUNcuaPfvET7KowIjPJA6zCUVFq
YCAEkxpGFt2WuB/PG/eqe3KYmNNXBiqaX84V5x7Fk0ZXVZIS28ocYuMyXwRMVY5U
ROZQoR12X0ob1DBMBwYhdt/rJ5b5H/mCQ2TicBYMq5yJV8OkbBo/DUk/VMQbP0fG
BXA/0BQJsF08oHLhWS+FN4wMHQ5oumn7KG6NJPBMtvhb4RdrzKk0qO5ZEVutAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQdPxk2DXrE6ZAv
izCAWtozI1FntDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80Q2ZtY3ZZNFdxTnZ6cXlxZlRyQnRKSHBkVUY5S3MzaGtH
MXQ5ZmJCS2tWdi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNENmbWN2WTRXcU52enF5cWZUckJ0SkhwZFVGOUtzM2hr
RzF0OWZiQktrVnYvMC8xRDNGMTkzNjBEN0FDNEU5OTAyRjhCMzA4MDVBREEzMzIz
NTE2N0I0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKKeSgwDQQCAAIwBwMF
ACgEcwgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCIrMA0GCSqGSIb3DQEBCwUA
A4IBAQBr2AOrsYF5ul0ycidF+OD9I+8PCr1GRPjw/fM8wD1KbIE6HT/7wSLA8FR5
Kl2nWyRhlvnjS66KeFPcaGeUPIWYTo5r9YxlPgDkWN6wKDQPD8XuKFZaWmYYOTec
kW5sE/lzqGpGrRVPTf0tF9CdGrRcJSl+h0vcGIxHKMwLinWiHbUGqWwWJJJkA5AD
BNK85KFcoDS/0Jb3xQruSWJkHL2mpc2IhK/glwZ176OdHPD3qerUJdvzurSTbwiv
VHuxmg6R17djeTTiImmGNYtIP2UBZdNioRtXoUqMh3z1bhxEf9RzPdSHU1slFpCp
jwESZVUCSYCqmravqVTcNWsmURT5
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org