Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3099D03A6D6B68F55E4289613262727807C4A6A7.cer
File:                     3099D03A6D6B68F55E4289613262727807C4A6A7.cer (raw, json)
Hash identifier:          ZlVNZGt4YXt4MMGQCBQAKF7zuFLUI3sT/Z9+JnZaDRQ=
Subject key identifier:   30:99:D0:3A:6D:6B:68:F5:5E:42:89:61:32:62:72:78:07:C4:A6:A7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       18C4CC115E833C0CFD51020EABF7A0FD58C2961B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/0/3099D03A6D6B68F55E4289613262727807C4A6A7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 19:49:59 +0000
Certificate not after:    Tue 04 Mar 2025 19:54:59 +0000
Subordinate resources:    AS: 270237
                          IP: 45.189.164.0/22
                          IP: 2804:68ec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c4:cc:11:5e:83:3c:0c:fd:51:02:0e:ab:f7:a0:fd:58:c2:96:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  5 19:49:59 2024 GMT
            Not After : Mar  4 19:54:59 2025 GMT
        Subject: CN=3099D03A6D6B68F55E4289613262727807C4A6A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:03:0d:f3:b5:91:48:72:e3:8c:e2:74:a3:c9:
                    a3:a0:29:8f:82:57:c0:a6:1d:4a:a5:f5:ea:79:5d:
                    cc:bd:f4:6d:8b:31:8a:0e:3d:34:28:78:23:d8:1a:
                    db:c7:06:72:b9:d6:7b:f2:d0:ff:f8:cc:56:0e:8b:
                    f2:da:44:27:27:f0:86:05:38:6e:82:ff:6e:7c:1f:
                    9b:06:ca:94:d2:59:fa:2b:8b:73:89:c6:e3:d1:fe:
                    b6:d4:07:fa:3b:f6:8e:18:03:b9:4a:dd:ca:19:14:
                    dc:d6:69:fb:1e:e1:a0:ac:78:b1:ed:99:b2:a8:3c:
                    88:0e:5b:31:89:b7:34:ef:01:c6:cd:f7:e7:f6:40:
                    b8:be:42:f4:2e:76:5d:46:56:4f:5d:18:2a:83:b9:
                    0d:0c:36:c8:91:a5:a4:16:2c:bf:be:7d:c8:c6:c5:
                    65:78:aa:45:cd:38:ac:98:da:bb:f9:ad:fe:87:46:
                    33:1a:44:8c:f1:ed:6a:d5:9d:f8:13:d3:ab:08:e1:
                    1a:2e:39:e5:26:06:85:cb:1e:da:ba:e1:2e:a3:bf:
                    d8:3a:91:1b:2a:35:66:1f:0d:cb:91:36:52:94:db:
                    34:f1:eb:74:73:9a:c7:ae:ee:91:ae:55:a2:62:0b:
                    6a:e4:d6:64:18:c6:7a:9e:1d:5b:60:6b:da:34:a6:
                    71:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:99:D0:3A:6D:6B:68:F5:5E:42:89:61:32:62:72:78:07:C4:A6:A7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gs2p5uKALXieijJvNid2yNX7GTtwCguNRLhhdCVzjqiJ/0/3099D03A6D6B68F55E4289613262727807C4A6A7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.164.0/22
                IPv6:
                  2804:68ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270237

    Signature Algorithm: sha256WithRSAEncryption
         0a:2a:be:56:b6:a3:73:c2:bb:88:d6:fb:98:bb:31:0b:09:f0:
         9d:01:15:5a:16:59:91:c5:b7:ae:83:b0:52:d4:81:0c:8b:b2:
         c3:33:33:2e:2f:42:bc:ee:69:2d:56:ed:09:92:21:4d:ae:12:
         b3:90:b4:5e:39:ab:4c:96:89:01:81:fa:c9:b4:fd:7d:40:d4:
         79:c3:dc:35:d1:82:8d:a5:62:0d:41:18:fc:07:2d:57:bb:57:
         e7:6f:41:25:82:82:ca:19:76:50:49:80:9b:30:7d:9d:54:e9:
         99:fa:76:c0:b4:51:fe:89:51:a9:68:fa:7f:8b:f5:ad:3a:33:
         a6:a0:e8:4b:4f:ff:03:c0:52:d0:be:ac:01:8a:63:e0:02:00:
         0a:84:34:57:ae:bd:5b:38:d3:fb:70:3e:40:12:cc:b2:35:ee:
         a0:6d:be:d4:c7:08:ba:ad:39:f5:a8:f1:4e:fa:ca:99:7b:7a:
         65:ad:b6:d7:6e:af:22:4f:a3:60:dd:11:05:a0:fe:d1:d8:0a:
         34:58:65:d9:98:6a:53:d4:d0:48:73:6d:e0:7d:a3:3d:a6:90:
         93:8f:b6:7c:ee:dd:b6:c3:19:ec:a6:59:28:f9:cb:f7:7b:7f:
         3d:93:0a:7e:e2:7a:7c:1a:7c:b2:f0:87:98:29:62:29:94:df:
         50:cb:6e:2c
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUGMTMEV6DPAz9UQIOq/eg/VjClhswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMDUxOTQ5NTlaFw0yNTAzMDQxOTU0NTlaMDMxMTAvBgNV
BAMTKDMwOTlEMDNBNkQ2QjY4RjU1RTQyODk2MTMyNjI3Mjc4MDdDNEE2QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkAw3ztZFIcuOM4nSjyaOgKY+C
V8CmHUql9ep5Xcy99G2LMYoOPTQoeCPYGtvHBnK51nvy0P/4zFYOi/LaRCcn8IYF
OG6C/258H5sGypTSWfori3OJxuPR/rbUB/o79o4YA7lK3coZFNzWafse4aCseLHt
mbKoPIgOWzGJtzTvAcbN9+f2QLi+QvQudl1GVk9dGCqDuQ0MNsiRpaQWLL++fcjG
xWV4qkXNOKyY2rv5rf6HRjMaRIzx7WrVnfgT06sI4RouOeUmBoXLHtq64S6jv9g6
kRsqNWYfDcuRNlKU2zTx63Rzmseu7pGuVaJiC2rk1mQYxnqeHVtga9o0pnENAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwmdA6bWto9V5C
iWEyYnJ4B8SmpzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HczJwNXVLQUxYaWVpakp2TmlkMnlOWDdHVHR3Q2d1TlJM
aGhkQ1Z6anFpSi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vR3MycDV1S0FMWGllaWpKdk5pZDJ5Tlg3R1R0d0NndU5S
TGhoZENWempxaUovMC8zMDk5RDAzQTZENkI2OEY1NUU0Mjg5NjEzMjYyNzI3ODA3
QzRBNkE3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItvaQwDQQCAAIwBwMF
ACgEaOwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBB+dMA0GCSqGSIb3DQEBCwUA
A4IBAQAKKr5WtqNzwruI1vuYuzELCfCdARVaFlmRxbeug7BS1IEMi7LDMzMuL0K8
7mktVu0JkiFNrhKzkLReOatMlokBgfrJtP19QNR5w9w10YKNpWINQRj8By1Xu1fn
b0ElgoLKGXZQSYCbMH2dVOmZ+nbAtFH+iVGpaPp/i/WtOjOmoOhLT/8DwFLQvqwB
imPgAgAKhDRXrr1bONP7cD5AEsyyNe6gbb7Uxwi6rTn1qPFO+sqZe3plrbbXbq8i
T6Ng3REFoP7R2Ao0WGXZmGpT1NBIc23gfaM9ppCTj7Z87t22wxnsplko+cv3e389
kwp+4np8Gnyy8IeYKWIplN9Qy24s
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org