Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3290BAB7120044F5FF65AFA1D46D8032C68C0E17.cer
File:                     3290BAB7120044F5FF65AFA1D46D8032C68C0E17.cer (raw, json)
Hash identifier:          DqzUOdeDWvTgEHrpbeyb7ZTru/y7Ce/Xw81zuSGOIcs=
Subject key identifier:   32:90:BA:B7:12:00:44:F5:FF:65:AF:A1:D4:6D:80:32:C6:8C:0E:17
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3003D9A35C71C0F154C16C44276676F035088279
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3290BAB7120044F5FF65AFA1D46D8032C68C0E17.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Oct 2021 12:54:03 +0000
Certificate not after:    Mon 03 Oct 2022 12:59:03 +0000
Subordinate resources:    AS: 264014
                          IP: 143.0.164.0/22
                          IP: 2804:296c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:03:d9:a3:5c:71:c0:f1:54:c1:6c:44:27:66:76:f0:35:08:82:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  4 12:54:03 2021 GMT
            Not After : Oct  3 12:59:03 2022 GMT
        Subject: CN=3290BAB7120044F5FF65AFA1D46D8032C68C0E17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:03:16:5c:ed:64:fc:21:95:a4:3c:d2:00:a9:
                    2f:18:36:70:d6:7a:4a:19:ef:3a:ed:ce:72:5b:e1:
                    b3:05:b6:84:d2:ad:3b:92:d8:4d:d5:93:a6:f1:b9:
                    aa:7b:57:84:81:0f:c5:78:67:a6:c8:90:b8:13:70:
                    0c:d9:ab:f9:81:7e:fc:a6:79:27:43:18:d8:83:44:
                    07:39:bd:74:ef:81:21:7b:86:5e:22:12:0c:97:b8:
                    bb:d9:8b:33:15:26:e5:0d:96:e6:b1:1a:e9:44:ce:
                    82:43:3b:32:92:27:09:fe:3c:af:9f:d1:44:a6:ce:
                    1c:ff:92:d8:e5:1e:ce:fa:57:1e:d8:57:60:eb:d4:
                    b9:80:f5:17:6c:77:43:be:ae:7f:9f:dc:6d:12:f9:
                    b1:de:18:fa:f6:a9:24:f7:6d:45:f9:4e:d6:e1:d9:
                    30:78:61:66:63:70:67:30:ab:d6:6a:ea:59:3a:d3:
                    47:2d:f9:0b:bc:d6:db:ee:a1:06:86:84:7b:3e:c8:
                    f0:bd:75:20:a7:9e:e4:b2:51:50:eb:07:01:d9:d6:
                    26:1e:03:57:98:7a:c8:77:c0:02:db:b4:aa:1f:4c:
                    7c:ad:03:37:44:ee:a5:cc:c6:95:1f:aa:ee:2f:ca:
                    7c:c7:cc:f2:16:a0:f0:10:4b:12:23:7a:6e:84:86:
                    56:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:90:BA:B7:12:00:44:F5:FF:65:AF:A1:D4:6D:80:32:C6:8C:0E:17
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3290BAB7120044F5FF65AFA1D46D8032C68C0E17.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.164.0/22
                IPv6:
                  2804:296c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264014

    Signature Algorithm: sha256WithRSAEncryption
         55:f9:3a:9b:ee:cb:df:68:33:cc:44:ba:05:22:4f:67:75:d0:
         70:2b:ba:5b:e1:70:0c:92:0c:a3:2a:6d:4e:ee:4d:3b:66:ce:
         46:8e:f8:bd:d4:a7:3f:79:94:44:59:5f:5a:62:31:cf:05:21:
         ef:86:00:76:a7:fb:1d:29:1f:15:e2:28:7d:01:37:c7:be:e1:
         a2:b2:76:16:d8:93:ee:61:41:32:4e:dd:78:22:61:37:31:63:
         e5:3c:3d:2b:c3:0b:c8:d0:92:4d:eb:4f:1d:d0:f7:35:96:fc:
         38:a8:58:61:94:fe:bf:73:e1:d0:75:40:4f:8f:d0:e7:9d:01:
         68:50:c3:e0:6a:80:35:f3:4d:0f:46:6a:cf:1e:14:cd:1b:0f:
         f1:88:9c:33:bb:f7:35:28:7c:a4:9a:87:c3:4d:dc:ac:7e:e3:
         5b:fa:dd:c6:72:3b:ed:d2:e6:e6:57:63:73:03:15:b3:63:c2:
         65:cd:fa:5f:d4:13:5c:eb:43:75:3c:77:50:84:92:8f:2c:b2:
         86:10:b5:4c:a0:d6:a2:87:69:8d:e1:42:10:52:9d:6c:fe:fc:
         3d:dd:7e:e5:3e:dc:f3:0c:a3:41:9e:c1:6c:19:50:d5:57:72:
         04:a2:13:cd:7b:2b:ba:99:af:b6:54:16:17:c0:94:45:45:b1:
         be:44:fc:3f
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUMAPZo1xxwPFUwWxEJ2Z28DUIgnkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMTEwMDQxMjU0MDNaFw0yMjEwMDMxMjU5MDNaMDMxMTAvBgNV
BAMTKDMyOTBCQUI3MTIwMDQ0RjVGRjY1QUZBMUQ0NkQ4MDMyQzY4QzBFMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpAxZc7WT8IZWkPNIAqS8YNnDW
ekoZ7zrtznJb4bMFtoTSrTuS2E3Vk6bxuap7V4SBD8V4Z6bIkLgTcAzZq/mBfvym
eSdDGNiDRAc5vXTvgSF7hl4iEgyXuLvZizMVJuUNluaxGulEzoJDOzKSJwn+PK+f
0USmzhz/ktjlHs76Vx7YV2Dr1LmA9Rdsd0O+rn+f3G0S+bHeGPr2qST3bUX5Ttbh
2TB4YWZjcGcwq9Zq6lk600ct+Qu81tvuoQaGhHs+yPC9dSCnnuSyUVDrBwHZ1iYe
A1eYesh3wALbtKofTHytAzdE7qXMxpUfqu4vynzHzPIWoPAQSxIjem6EhlbRAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQykLq3EgBE9f9l
r6HUbYAyxowOFzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9INFRzRkhLdU12Y2ZZWFRwclhzUTM1WVcxUlA2QnliTkxG
YjdkMlU3aG5MeC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSDRUc0ZIS3VNdmNmWVhUcHJYc1EzNVlXMVJQNkJ5Yk5M
RmI3ZDJVN2huTHgvMC8zMjkwQkFCNzEyMDA0NEY1RkY2NUFGQTFENDZEODAzMkM2
OEMwRTE3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKPAKQwDQQCAAIwBwMF
ACgEKWwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAdOMA0GCSqGSIb3DQEBCwUA
A4IBAQBV+Tqb7svfaDPMRLoFIk9nddBwK7pb4XAMkgyjKm1O7k07Zs5Gjvi91Kc/
eZREWV9aYjHPBSHvhgB2p/sdKR8V4ih9ATfHvuGisnYW2JPuYUEyTt14ImE3MWPl
PD0rwwvI0JJN608d0Pc1lvw4qFhhlP6/c+HQdUBPj9DnnQFoUMPgaoA1800PRmrP
HhTNGw/xiJwzu/c1KHykmofDTdysfuNb+t3Gcjvt0ubmV2NzAxWzY8Jlzfpf1BNc
60N1PHdQhJKPLLKGELVMoNaih2mN4UIQUp1s/vw93X7lPtzzDKNBnsFsGVDVV3IE
ohPNeyu6ma+2VBYXwJRFRbG+RPw/
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org