Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3035C70EBA626EEE8D4401EB8BE427BA12210EE1.cer
File:                     3035C70EBA626EEE8D4401EB8BE427BA12210EE1.cer (raw, json)
Hash identifier:          /Ga8lKl1HjR/sRXDwWQnGgfry+aVhO7lYrbSRZcucxI=
Subject key identifier:   30:35:C7:0E:BA:62:6E:EE:8D:44:01:EB:8B:E4:27:BA:12:21:0E:E1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       11A2A4BCE5D79F85CE5C1A20E80C934A1E3CA8E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/3035C70EBA626EEE8D4401EB8BE427BA12210EE1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Nov 2023 12:02:02 +0000
Certificate not after:    Wed 20 Nov 2024 12:07:02 +0000
Subordinate resources:    AS: 266250
                          IP: 45.6.208.0/22
                          IP: 2804:3d0c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a2:a4:bc:e5:d7:9f:85:ce:5c:1a:20:e8:0c:93:4a:1e:3c:a8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 22 12:02:02 2023 GMT
            Not After : Nov 20 12:07:02 2024 GMT
        Subject: CN=3035C70EBA626EEE8D4401EB8BE427BA12210EE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0b:eb:58:ae:b4:92:b1:79:46:70:11:a9:f0:
                    16:f4:c9:3d:ee:c1:b1:ae:14:59:15:4d:de:a4:c2:
                    67:29:e8:51:bc:61:02:b4:4b:52:6f:ab:57:75:78:
                    26:5d:59:7f:f1:3b:91:99:e0:42:31:d8:7a:e8:29:
                    c0:8d:61:53:95:3e:d1:f6:2a:d5:31:b5:b4:d5:ce:
                    c0:3c:90:a1:65:2f:3f:43:99:09:8d:70:68:81:9f:
                    85:65:7e:4a:2b:0c:09:88:83:93:a8:d2:3a:36:da:
                    dd:bc:c0:9f:95:5f:a5:49:16:6d:3d:db:73:f0:78:
                    b4:5e:e4:5e:a6:6e:f3:94:f5:f1:ea:3a:33:64:03:
                    11:60:34:58:55:71:b5:a4:3b:fc:8f:d1:4a:50:bc:
                    2d:3f:6d:b2:59:a7:e5:7e:67:48:d4:50:e0:6f:1d:
                    44:af:cb:92:99:84:99:1e:38:04:41:b7:31:ec:e3:
                    ae:a1:81:a7:9c:94:d1:2e:6f:31:f1:7a:ce:c8:66:
                    45:de:ab:f9:5b:5a:18:e9:f7:6e:67:9d:0a:82:a5:
                    f6:01:be:2b:1c:18:94:c9:f6:e0:65:6f:0f:2f:22:
                    48:23:f9:c0:a3:5f:56:70:a9:45:ec:e7:29:7a:3d:
                    89:9f:7c:01:87:4e:38:80:e9:3a:b3:fa:59:9f:1d:
                    2b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:35:C7:0E:BA:62:6E:EE:8D:44:01:EB:8B:E4:27:BA:12:21:0E:E1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/3035C70EBA626EEE8D4401EB8BE427BA12210EE1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.208.0/22
                IPv6:
                  2804:3d0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266250

    Signature Algorithm: sha256WithRSAEncryption
         04:74:63:b0:7c:35:42:cb:c2:73:a8:04:cd:31:e7:fb:aa:d4:
         db:c3:2b:87:19:78:8d:44:19:23:6f:a6:9b:fb:35:37:71:b9:
         c9:b3:99:5e:69:b9:ac:d4:ad:28:e3:60:9b:ff:a4:a4:d0:a7:
         f2:3f:f9:cb:cf:f6:c1:07:34:cc:fa:3c:88:28:6d:ba:24:ab:
         74:68:2a:f0:a3:16:13:75:2a:f3:33:64:95:8d:74:b2:17:b8:
         b4:7c:ca:22:78:57:8a:43:63:31:40:7d:07:9b:01:7f:09:37:
         09:a1:36:aa:30:bf:c9:7e:bb:c4:5e:b9:99:04:cb:97:ad:6d:
         e0:24:89:ef:5c:be:ea:23:99:37:84:bd:3d:bb:2c:ec:8b:a4:
         63:ef:23:28:f7:b1:70:71:71:95:4b:40:01:3f:f1:73:c8:c8:
         ef:6d:3e:35:91:e5:17:0d:1e:fb:02:c2:f5:d7:f8:5b:b0:c7:
         69:62:28:34:48:6b:66:fd:da:6b:18:c3:50:0b:10:ad:7b:7d:
         93:3a:4f:96:ad:96:dd:a5:45:89:20:4b:d6:34:10:24:9c:c8:
         a7:64:42:60:f4:16:4f:0b:be:55:bd:f8:d3:2b:77:0d:6b:b0:
         ce:08:c4:5d:42:32:b4:ac:29:b7:38:a8:58:bd:0f:09:be:de:
         ec:9a:39:eb
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUEaKkvOXXn4XOXBog6AyTSh48qOYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMjIxMjAyMDJaFw0yNDExMjAxMjA3MDJaMDMxMTAvBgNV
BAMTKDMwMzVDNzBFQkE2MjZFRUU4RDQ0MDFFQjhCRTQyN0JBMTIyMTBFRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYC+tYrrSSsXlGcBGp8Bb0yT3u
wbGuFFkVTd6kwmcp6FG8YQK0S1Jvq1d1eCZdWX/xO5GZ4EIx2HroKcCNYVOVPtH2
KtUxtbTVzsA8kKFlLz9DmQmNcGiBn4VlfkorDAmIg5Oo0jo22t28wJ+VX6VJFm09
23PweLRe5F6mbvOU9fHqOjNkAxFgNFhVcbWkO/yP0UpQvC0/bbJZp+V+Z0jUUOBv
HUSvy5KZhJkeOARBtzHs466hgaeclNEubzHxes7IZkXeq/lbWhjp925nnQqCpfYB
viscGJTJ9uBlbw8vIkgj+cCjX1ZwqUXs5yl6PYmffAGHTjiA6Tqz+lmfHStJAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwNccOumJu7o1E
AeuL5Ce6EiEO4TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yZVdSMThya1czaVdzanphWkhydnVFTDg3bXBCcUo3SHQy
ZVd0cW1DOHQ2eS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yZVdSMThya1czaVdzanphWkhydnVFTDg3bXBCcUo3SHQy
ZVd0cW1DOHQ2eS8wLzMwMzVDNzBFQkE2MjZFRUU4RDQ0MDFFQjhCRTQyN0JBMTIy
MTBFRTEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi0G0DANBAIAAjAHAwUA
KAQ9DDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEAowDQYJKoZIhvcNAQELBQAD
ggEBAAR0Y7B8NULLwnOoBM0x5/uq1NvDK4cZeI1EGSNvppv7NTdxucmzmV5puazU
rSjjYJv/pKTQp/I/+cvP9sEHNMz6PIgobbokq3RoKvCjFhN1KvMzZJWNdLIXuLR8
yiJ4V4pDYzFAfQebAX8JNwmhNqowv8l+u8ReuZkEy5etbeAkie9cvuojmTeEvT27
LOyLpGPvIyj3sXBxcZVLQAE/8XPIyO9tPjWR5RcNHvsCwvXX+Fuwx2liKDRIa2b9
2msYw1ALEK17fZM6T5atlt2lRYkgS9Y0ECScyKdkQmD0Fk8LvlW9+NMrdw1rsM4I
xF1CMrSsKbc4qFi9Dwm+3uyaOes=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org