Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/347031E886A1761CE1CBE9ACB8541F33592066CC.cer
File:                     347031E886A1761CE1CBE9ACB8541F33592066CC.cer (raw, json)
Hash identifier:          IwI8d7fGaO9wHwo+/1zEmEEUEMTusoLCMbqXLJ/9PN8=
Subject key identifier:   34:70:31:E8:86:A1:76:1C:E1:CB:E9:AC:B8:54:1F:33:59:20:66:CC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0B808B6B20A5F357C4171E7FD92A7C1762C33E95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/347031E886A1761CE1CBE9ACB8541F33592066CC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Nov 2023 03:40:52 +0000
Certificate not after:    Thu 31 Oct 2024 03:45:52 +0000
Subordinate resources:    AS: 271031
                          IP: 168.228.76.0/22
                          IP: 186.250.60.0/22
                          IP: 2804:7534::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:80:8b:6b:20:a5:f3:57:c4:17:1e:7f:d9:2a:7c:17:62:c3:3e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  2 03:40:52 2023 GMT
            Not After : Oct 31 03:45:52 2024 GMT
        Subject: CN=347031E886A1761CE1CBE9ACB8541F33592066CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:24:bb:0b:e0:1f:01:91:ac:fc:a5:01:13:d3:
                    33:7d:64:98:21:4b:8a:43:fe:a6:0f:47:e3:19:22:
                    aa:c1:2a:88:d0:d9:6e:89:a9:72:31:70:1d:f9:38:
                    85:a2:6a:46:4a:f8:3a:6c:5a:ac:5e:93:58:a2:23:
                    d2:b2:2f:2f:fc:34:a3:d6:19:a5:e4:56:af:98:e2:
                    b6:89:46:26:d9:4d:40:eb:cd:2d:61:a3:d1:c5:36:
                    bb:b0:67:60:34:3a:f7:a7:5b:45:b2:d0:dc:f0:ac:
                    77:d9:cb:54:31:df:92:28:e4:c1:ee:5d:f0:00:34:
                    6c:a8:84:84:07:2f:92:87:e2:11:b0:da:27:ba:f1:
                    10:da:3b:c3:31:13:63:5b:ac:f2:3e:23:57:0a:e4:
                    1f:dc:c4:8b:5d:93:3d:4b:65:4a:99:de:15:d4:2b:
                    67:8c:90:b7:b3:1b:81:39:ae:48:00:50:aa:3e:5b:
                    53:2e:a3:36:b8:64:74:44:0f:41:47:69:bb:83:e9:
                    87:05:e5:68:94:83:94:b3:0a:12:44:11:c1:48:cc:
                    25:6f:43:71:90:59:c7:79:ba:47:01:f8:fe:48:bc:
                    cf:97:31:9e:b4:bf:9f:de:f6:97:86:ba:7b:fb:9d:
                    d5:0a:c8:dc:71:c6:88:06:9b:97:95:07:68:17:3c:
                    4c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:70:31:E8:86:A1:76:1C:E1:CB:E9:AC:B8:54:1F:33:59:20:66:CC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/347031E886A1761CE1CBE9ACB8541F33592066CC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.76.0/22
                  186.250.60.0/22
                IPv6:
                  2804:7534::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271031

    Signature Algorithm: sha256WithRSAEncryption
         78:9b:68:33:7d:fd:b2:a1:58:2a:7e:23:80:86:01:38:44:bc:
         43:0e:68:29:0d:e5:53:6e:fd:7b:ca:ee:27:34:9d:ff:d6:0c:
         15:25:25:49:68:34:70:15:8a:ef:d0:c7:b6:e8:5b:fd:86:a9:
         2d:c0:fa:2c:3a:37:d0:c0:76:ba:34:6c:0e:1f:97:d8:b3:f3:
         27:04:00:e7:e7:c3:d2:52:ae:09:14:a9:30:4e:1b:ab:08:8d:
         57:50:f9:60:1c:ed:c5:55:01:01:b4:b2:02:49:02:cf:49:47:
         76:60:eb:aa:f0:3f:e6:e7:97:75:10:b5:37:9e:d4:32:2a:49:
         a5:19:fe:fb:a5:a2:b1:0c:ee:a6:9c:10:dc:b8:5d:6d:8a:ad:
         b8:81:02:20:72:f2:2a:81:51:e5:6d:fa:ca:d0:31:a8:ed:20:
         45:8d:f2:61:14:e1:f3:cb:23:64:1d:4a:c2:ba:60:7f:1c:88:
         47:f2:48:71:34:4d:bd:91:2b:7f:79:1e:86:9c:88:d7:86:c6:
         a1:6a:9c:0f:8a:c2:4a:b3:f8:30:37:7a:4d:dd:5e:29:69:bf:
         fc:db:e6:66:8f:88:57:e0:6c:5b:c1:28:ce:e2:91:6f:b6:bc:
         98:61:b4:c8:3c:fd:7f:1d:5c:9a:2e:33:66:22:12:87:0f:78:
         11:de:9a:60
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUC4CLayCl81fEFx5/2Sp8F2LDPpUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMDIwMzQwNTJaFw0yNDEwMzEwMzQ1NTJaMDMxMTAvBgNV
BAMTKDM0NzAzMUU4ODZBMTc2MUNFMUNCRTlBQ0I4NTQxRjMzNTkyMDY2Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiJLsL4B8Bkaz8pQET0zN9ZJgh
S4pD/qYPR+MZIqrBKojQ2W6JqXIxcB35OIWiakZK+DpsWqxek1iiI9KyLy/8NKPW
GaXkVq+Y4raJRibZTUDrzS1ho9HFNruwZ2A0OvenW0Wy0NzwrHfZy1Qx35Io5MHu
XfAANGyohIQHL5KH4hGw2ie68RDaO8MxE2NbrPI+I1cK5B/cxItdkz1LZUqZ3hXU
K2eMkLezG4E5rkgAUKo+W1Muoza4ZHRED0FHabuD6YcF5WiUg5SzChJEEcFIzCVv
Q3GQWcd5ukcB+P5IvM+XMZ60v5/e9peGunv7ndUKyNxxxogGm5eVB2gXPEwpAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0cDHohqF2HOHL
6ay4VB8zWSBmzDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83R1U3emJ5cFdIU05Sdnh3cWJ2RzNCbTVDRlI0cXVkZkxj
ZW9nRFhhcUEzTS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vN0dVN3pieXBXSFNOUnZ4d3FidkczQm01Q0ZSNHF1ZGZM
Y2VvZ0RYYXFBM00vMC8zNDcwMzFFODg2QTE3NjFDRTFDQkU5QUNCODU0MUYzMzU5
MjA2NkNDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKo5EwDBAK6+jwwDQQC
AAIwBwMFACgEdTQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCK3MA0GCSqGSIb3
DQEBCwUAA4IBAQB4m2gzff2yoVgqfiOAhgE4RLxDDmgpDeVTbv17yu4nNJ3/1gwV
JSVJaDRwFYrv0Me26Fv9hqktwPosOjfQwHa6NGwOH5fYs/MnBADn58PSUq4JFKkw
ThurCI1XUPlgHO3FVQEBtLICSQLPSUd2YOuq8D/m55d1ELU3ntQyKkmlGf77paKx
DO6mnBDcuF1tiq24gQIgcvIqgVHlbfrK0DGo7SBFjfJhFOHzyyNkHUrCumB/HIhH
8khxNE29kSt/eR6GnIjXhsahapwPisJKs/gwN3pN3V4pab/82+Zmj4hX4GxbwSjO
4pFvtryYYbTIPP1/HVyaLjNmIhKHD3gR3ppg
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org