Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3466167D04F38F8CEF8550A465D68E28A6542667.cer
File:                     3466167D04F38F8CEF8550A465D68E28A6542667.cer (raw, json)
Hash identifier:          ZVc/HqV1eferDpOclrrTwFD4boe3wU7gZCFPM9C/AFo=
Subject key identifier:   34:66:16:7D:04:F3:8F:8C:EF:85:50:A4:65:D6:8E:28:A6:54:26:67
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5B98C340BF4720ED7413B1FCEA8F0BECC8B4340F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3466167D04F38F8CEF8550A465D68E28A6542667.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Feb 2023 12:15:33 +0000
Certificate not after:    Thu 22 Feb 2024 12:20:33 +0000
Subordinate resources:    AS: 267263
                          IP: 160.238.24.0/22
                          IP: 2804:4ac8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:98:c3:40:bf:47:20:ed:74:13:b1:fc:ea:8f:0b:ec:c8:b4:34:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 23 12:15:33 2023 GMT
            Not After : Feb 22 12:20:33 2024 GMT
        Subject: CN=3466167D04F38F8CEF8550A465D68E28A6542667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7c:a8:74:15:8c:df:69:34:22:05:d7:96:b9:
                    43:39:85:35:84:ed:14:a5:5c:ad:83:40:09:18:d9:
                    2d:ea:7e:57:42:f1:fd:d8:a1:c6:b6:7f:bc:c5:81:
                    02:50:86:e3:96:bf:22:3f:ca:b1:de:76:62:86:74:
                    1c:7f:cd:5e:72:5c:44:f9:b0:78:a9:af:eb:fc:21:
                    74:1a:cd:55:36:88:df:cb:d9:73:eb:ac:05:99:25:
                    0a:88:80:29:26:72:cc:7d:d3:33:2b:1c:8e:80:b2:
                    4b:47:3c:08:46:4e:23:54:2d:5c:a1:09:a2:20:d6:
                    78:b7:57:cf:8b:b9:5e:b4:cf:c6:2f:5c:bb:d5:78:
                    d3:f2:8b:fc:58:bf:79:6c:60:4c:a6:ac:9f:0f:80:
                    d1:29:ea:53:19:53:f3:7c:e0:2f:77:d0:c8:0a:d5:
                    db:82:48:19:88:21:66:c4:9a:26:b2:2a:a0:4d:1a:
                    05:b3:c0:af:27:dd:82:92:f8:6a:f6:42:68:13:a9:
                    7d:ab:e6:10:c6:60:cb:87:81:25:9f:ea:b2:fa:2b:
                    92:7c:70:9d:4c:35:81:03:a0:e7:7b:85:b9:ce:41:
                    8d:4b:58:50:f8:06:a5:de:99:fe:88:9e:8c:95:62:
                    bd:b6:1b:14:0c:34:9f:65:43:38:3f:60:0c:ec:0a:
                    65:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:66:16:7D:04:F3:8F:8C:EF:85:50:A4:65:D6:8E:28:A6:54:26:67
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3466167D04F38F8CEF8550A465D68E28A6542667.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.24.0/22
                IPv6:
                  2804:4ac8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267263

    Signature Algorithm: sha256WithRSAEncryption
         06:21:8a:68:a9:89:0e:07:36:8d:e1:8c:25:6d:c1:ea:70:e8:
         94:62:2d:e4:b3:71:0a:67:2b:aa:b3:9f:43:a8:62:5c:ce:07:
         7b:60:58:85:8a:57:55:7d:34:53:dd:42:77:05:ad:48:3e:09:
         3e:04:f9:92:f5:85:f2:e7:a6:b4:d6:08:c5:60:52:fa:42:bc:
         e3:f5:25:24:84:8c:ec:20:cd:1e:c8:fd:2a:b8:e5:3a:ea:53:
         04:54:56:f8:88:24:3b:f3:f2:92:62:89:96:50:76:3e:d6:b9:
         a6:97:dd:38:7d:09:a5:13:0c:97:53:40:c1:cd:85:3e:b1:ba:
         41:10:d3:cf:a4:97:05:d6:fa:ed:05:db:45:eb:85:93:fc:3b:
         21:00:85:03:c3:7b:07:24:c5:fb:6d:5f:e1:50:1a:d7:e7:7f:
         9a:6f:54:0b:6a:8d:d6:f2:e0:18:15:dc:66:fa:2d:bd:2d:9c:
         63:00:70:b1:07:eb:a1:bf:47:f5:ca:80:0d:3c:c3:b1:99:d7:
         51:0d:f9:c2:08:a4:b2:b1:72:ea:b7:42:2c:59:6b:63:6a:82:
         29:c5:70:11:6f:23:75:23:54:ee:ec:0a:d5:da:96:51:40:c8:
         00:48:30:fa:22:f5:1a:39:25:99:78:92:74:16:f6:b3:3f:5d:
         00:42:46:19
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUW5jDQL9HIO10E7H86o8L7Mi0NA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAyMjMxMjE1MzNaFw0yNDAyMjIxMjIwMzNaMDMxMTAvBgNV
BAMTKDM0NjYxNjdEMDRGMzhGOENFRjg1NTBBNDY1RDY4RTI4QTY1NDI2NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4fKh0FYzfaTQiBdeWuUM5hTWE
7RSlXK2DQAkY2S3qfldC8f3Yoca2f7zFgQJQhuOWvyI/yrHedmKGdBx/zV5yXET5
sHipr+v8IXQazVU2iN/L2XPrrAWZJQqIgCkmcsx90zMrHI6AsktHPAhGTiNULVyh
CaIg1ni3V8+LuV60z8YvXLvVeNPyi/xYv3lsYEymrJ8PgNEp6lMZU/N84C930MgK
1duCSBmIIWbEmiayKqBNGgWzwK8n3YKS+Gr2QmgTqX2r5hDGYMuHgSWf6rL6K5J8
cJ1MNYEDoOd7hbnOQY1LWFD4BqXemf6InoyVYr22GxQMNJ9lQzg/YAzsCmXnAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0ZhZ9BPOPjO+F
UKRl1o4oplQmZzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ISmpnSEQ3a0hoUDFVYWdmVjFDbkxZYkpqVVJBaVVjaXBy
OTVRemhubkV5ay8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ISmpnSEQ3a0hoUDFVYWdmVjFDbkxZYkpqVVJBaVVjaXBy
OTVRemhubkV5ay8wLzM0NjYxNjdEMDRGMzhGOENFRjg1NTBBNDY1RDY4RTI4QTY1
NDI2NjcubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqDuGDANBAIAAjAHAwUA
KARKyDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEE/8wDQYJKoZIhvcNAQELBQAD
ggEBAAYhimipiQ4HNo3hjCVtwepw6JRiLeSzcQpnK6qzn0OoYlzOB3tgWIWKV1V9
NFPdQncFrUg+CT4E+ZL1hfLnprTWCMVgUvpCvOP1JSSEjOwgzR7I/Sq45TrqUwRU
VviIJDvz8pJiiZZQdj7WuaaX3Th9CaUTDJdTQMHNhT6xukEQ08+klwXW+u0F20Xr
hZP8OyEAhQPDewckxfttX+FQGtfnf5pvVAtqjdby4BgV3Gb6Lb0tnGMAcLEH66G/
R/XKgA08w7GZ11EN+cIIpLKxcuq3QixZa2NqginFcBFvI3UjVO7sCtXallFAyABI
MPoi9Ro5JZl4knQW9rM/XQBCRhk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org