Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/34BAD5632487C33B4AEC833ACB99CC53A1959C0E.cer
File:                     34BAD5632487C33B4AEC833ACB99CC53A1959C0E.cer (raw, json)
Hash identifier:          mCmuw2DMQn5yba3lGk1NeVmEegkeJJHcrV0uxHmnvGw=
Subject key identifier:   34:BA:D5:63:24:87:C3:3B:4A:EC:83:3A:CB:99:CC:53:A1:95:9C:0E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       50A6C8544748565C0DF6AD904DD19F477D105EAC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/34BAD5632487C33B4AEC833ACB99CC53A1959C0E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Dec 2022 23:21:27 +0000
Certificate not after:    Wed 13 Dec 2023 23:26:27 +0000
Subordinate resources:    AS: 265181
                          IP: 167.249.132.0/22
                          IP: 170.233.36.0/22
                          IP: 2804:2bdc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a6:c8:54:47:48:56:5c:0d:f6:ad:90:4d:d1:9f:47:7d:10:5e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 14 23:21:27 2022 GMT
            Not After : Dec 13 23:26:27 2023 GMT
        Subject: CN=34BAD5632487C33B4AEC833ACB99CC53A1959C0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f0:f1:0d:97:7c:0b:c2:57:99:8e:4e:0d:c0:
                    5e:74:fe:3b:c6:e9:ab:dd:93:0d:78:a4:c0:3b:54:
                    3c:7c:76:d8:a8:dc:57:84:4c:1a:bc:d5:85:76:25:
                    c7:65:b7:8b:82:e3:71:f9:f9:71:7c:07:da:b9:60:
                    a2:3e:41:24:24:b8:e1:f5:2d:ef:f2:7e:71:8e:49:
                    f6:f1:5a:f7:73:16:31:61:26:8a:2e:fc:19:03:c1:
                    12:5c:29:a7:f6:29:a9:9a:d2:1c:6e:54:13:33:75:
                    58:da:19:da:27:37:bf:0b:db:6f:04:62:73:f7:d2:
                    83:37:b7:79:08:80:0c:e9:fc:d6:5a:bd:51:24:b1:
                    18:5f:9e:8e:5e:69:20:2a:48:f3:ee:bc:62:14:90:
                    24:25:71:8c:61:2e:a8:a6:2b:97:d5:98:45:2a:87:
                    2d:09:fb:cc:93:d5:17:c4:11:6a:95:84:de:09:94:
                    01:7a:5b:66:21:bd:d3:9f:78:5b:9c:91:af:63:02:
                    b2:2c:b6:0c:44:66:78:c3:fa:ae:26:33:38:68:6c:
                    71:57:ed:8b:3a:ec:4b:8d:1a:b2:41:f4:44:2a:8d:
                    56:de:1f:c3:c3:09:d9:18:16:92:4b:7c:f4:67:22:
                    00:52:bf:7a:c4:a6:9e:4d:9b:ec:d2:2b:07:53:a4:
                    a1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:BA:D5:63:24:87:C3:3B:4A:EC:83:3A:CB:99:CC:53:A1:95:9C:0E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/34BAD5632487C33B4AEC833ACB99CC53A1959C0E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.132.0/22
                  170.233.36.0/22
                IPv6:
                  2804:2bdc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265181

    Signature Algorithm: sha256WithRSAEncryption
         22:6f:cd:28:c0:65:c6:73:6a:c6:32:e2:c5:5d:b1:26:74:0a:
         b9:d3:e5:c3:3e:ca:c0:b9:47:65:81:b0:10:52:4d:4e:83:b9:
         30:44:3f:7f:3f:3c:34:de:62:dd:1f:e7:2c:52:84:a2:c9:c3:
         df:55:a6:7f:be:a7:9e:71:31:e7:f1:ff:68:10:09:5e:49:09:
         f7:29:51:a5:3f:c9:ec:ee:3e:8c:26:60:39:96:64:4e:54:4f:
         f4:ce:eb:53:f7:c7:6e:65:2f:b9:cd:60:34:3c:38:64:cf:3b:
         70:b7:cf:14:c9:b9:35:d7:6b:2b:3d:a1:c3:93:ed:7e:8d:ad:
         93:ee:78:44:7f:8d:4a:f4:04:2e:fb:50:52:83:d7:78:5f:6b:
         56:a7:bc:d1:7e:65:da:29:dc:97:34:ba:e6:2d:ae:a1:ec:a3:
         cd:00:89:e1:c7:d3:ec:c1:d5:62:8f:48:dc:73:ff:5d:c7:9a:
         64:56:61:b7:b3:3f:ef:10:f3:69:d1:fd:2e:47:be:0c:da:f3:
         a7:86:c7:f4:94:2c:7f:00:7c:de:80:6b:4d:7c:30:fb:70:e5:
         bf:e8:32:68:60:68:6d:af:92:dd:43:ce:e1:1d:ae:62:dc:1f:
         61:d2:f5:04:9d:90:6b:33:b6:a8:41:6f:2c:c3:eb:2d:de:f4:
         d5:fe:83:7e
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUUKbIVEdIVlwN9q2QTdGfR30QXqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjEyMTQyMzIxMjdaFw0yMzEyMTMyMzI2MjdaMDMxMTAvBgNV
BAMTKDM0QkFENTYzMjQ4N0MzM0I0QUVDODMzQUNCOTlDQzUzQTE5NTlDMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv8PENl3wLwleZjk4NwF50/jvG
6avdkw14pMA7VDx8dtio3FeETBq81YV2Jcdlt4uC43H5+XF8B9q5YKI+QSQkuOH1
Le/yfnGOSfbxWvdzFjFhJoou/BkDwRJcKaf2Kama0hxuVBMzdVjaGdonN78L228E
YnP30oM3t3kIgAzp/NZavVEksRhfno5eaSAqSPPuvGIUkCQlcYxhLqimK5fVmEUq
hy0J+8yT1RfEEWqVhN4JlAF6W2YhvdOfeFucka9jArIstgxEZnjD+q4mMzhobHFX
7Ys67EuNGrJB9EQqjVbeH8PDCdkYFpJLfPRnIgBSv3rEpp5Nm+zSKwdTpKGBAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0utVjJIfDO0rs
gzrLmcxToZWcDjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84a2g0b0xrZENLYkthcTVndWtNaEtkVHdzbWlvUkd2NUpN
Y1Rac3RTTHl3dy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84a2g0b0xrZENLYkthcTVndWtNaEtkVHdzbWlvUkd2NUpN
Y1Rac3RTTHl3dy8wLzM0QkFENTYzMjQ4N0MzM0I0QUVDODMzQUNCOTlDQzUzQTE5
NTlDMEUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAqf5hAMEAqrpJDANBAIA
AjAHAwUAKAQr3DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEC90wDQYJKoZIhvcN
AQELBQADggEBACJvzSjAZcZzasYy4sVdsSZ0CrnT5cM+ysC5R2WBsBBSTU6DuTBE
P38/PDTeYt0f5yxShKLJw99Vpn++p55xMefx/2gQCV5JCfcpUaU/yezuPowmYDmW
ZE5UT/TO61P3x25lL7nNYDQ8OGTPO3C3zxTJuTXXays9ocOT7X6NrZPueER/jUr0
BC77UFKD13hfa1anvNF+Zdop3Jc0uuYtrqHso80AieHH0+zB1WKPSNxz/13HmmRW
YbezP+8Q82nR/S5Hvgza86eGx/SULH8AfN6Aa018MPtw5b/oMmhgaG2vkt1DzuEd
rmLcH2HS9QSdkGsztqhBbyzD6y3e9NX+g34=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org