Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/35248CB09B693D23CFD3F80C290CB26E21F1B5BB.cer
File:                     35248CB09B693D23CFD3F80C290CB26E21F1B5BB.cer (raw, json)
Hash identifier:          e3bZIExSM6TwAuaS+XHQs/5Fqfg91CpGro3tE+oLeao=
Subject key identifier:   35:24:8C:B0:9B:69:3D:23:CF:D3:F8:0C:29:0C:B2:6E:21:F1:B5:BB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4FC9AC534617673D60CC3F2111E6BB0AD9AB4C06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/0/35248CB09B693D23CFD3F80C290CB26E21F1B5BB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Mar 2024 17:48:52 +0000
Certificate not after:    Tue 18 Mar 2025 17:53:52 +0000
Subordinate resources:    AS: 270304
                          IP: 201.216.124.0/22
                          IP: 2804:69fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c9:ac:53:46:17:67:3d:60:cc:3f:21:11:e6:bb:0a:d9:ab:4c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 19 17:48:52 2024 GMT
            Not After : Mar 18 17:53:52 2025 GMT
        Subject: CN=35248CB09B693D23CFD3F80C290CB26E21F1B5BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:80:cb:ce:b1:e9:5e:f5:09:fd:32:d7:d9:56:
                    90:1e:c0:37:9e:9e:77:cc:d8:90:42:df:9b:cf:e8:
                    80:50:4c:48:e0:38:6f:7b:61:16:6c:d0:a1:02:d7:
                    90:c4:d9:0b:1f:d7:41:24:55:5c:2e:e9:8a:ba:32:
                    36:e8:3a:ba:e5:4a:3a:13:91:d1:b7:40:86:64:72:
                    2f:f2:73:e9:62:b7:67:cb:27:d6:1d:4c:6a:b1:4f:
                    ed:8a:8d:0f:89:68:c2:70:75:64:79:e2:bd:db:e0:
                    e6:d1:c0:e0:a6:18:1c:a2:fd:13:01:1a:77:e1:6a:
                    0e:1a:13:7d:72:ad:76:cc:25:b4:44:1e:25:0e:de:
                    01:66:b3:44:b4:06:87:7e:c1:f7:c4:65:50:14:de:
                    50:e3:5f:ca:21:e7:34:32:71:4a:03:a4:81:b7:bc:
                    be:ed:7e:e1:ea:91:73:92:b8:c6:79:34:af:3b:1a:
                    a5:c7:e6:43:65:c3:6f:3b:bf:23:5c:05:d6:ca:97:
                    55:75:09:0f:38:7e:c7:b1:17:ea:12:16:16:a4:17:
                    51:9c:56:b8:f8:9e:67:f5:8b:1e:48:50:f7:1e:55:
                    9d:32:f1:dd:4c:d7:9b:a0:35:de:2d:19:e3:47:01:
                    0f:c3:6a:60:fc:68:ca:f6:59:f4:71:1d:e1:15:ba:
                    8c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:24:8C:B0:9B:69:3D:23:CF:D3:F8:0C:29:0C:B2:6E:21:F1:B5:BB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/0/35248CB09B693D23CFD3F80C290CB26E21F1B5BB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.124.0/22
                IPv6:
                  2804:69fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270304

    Signature Algorithm: sha256WithRSAEncryption
         8c:af:b2:b5:8f:d5:2e:d6:91:f4:8b:76:72:c2:ac:43:58:4f:
         bb:85:b4:ff:29:e7:44:7b:a9:a4:4f:e4:57:7f:f6:b8:00:b8:
         57:b4:1a:c8:9b:bf:34:35:48:bf:d1:8c:dd:ee:76:99:c5:37:
         28:47:db:0d:42:f3:31:58:92:db:5b:fc:56:33:8e:33:cb:12:
         dd:65:f0:b4:62:9e:65:dd:df:98:72:8c:0f:53:59:74:18:3c:
         de:d7:fa:e0:de:ce:e4:47:dc:fe:a6:7f:30:21:17:80:a2:df:
         54:e3:42:25:6a:a4:d1:bc:e3:f6:7e:6d:6f:ac:65:b2:f9:aa:
         60:f3:00:ae:48:0f:67:5b:c7:2d:61:db:16:69:f0:dd:3f:46:
         7c:e9:e2:be:2d:93:53:0b:25:91:84:25:67:48:43:05:88:f1:
         89:8e:91:ad:f1:06:60:f8:78:ab:1e:3e:6f:b0:d8:3b:99:4c:
         e4:be:a3:96:b8:a7:83:25:11:02:c9:5c:0c:51:53:08:a2:e3:
         30:79:23:e6:8e:e5:b0:be:e0:a9:80:26:11:79:55:7e:99:e7:
         fc:12:38:f4:8e:63:f5:8f:9a:14:e7:85:8e:1e:90:17:49:20:
         73:af:32:df:18:a1:1b:b7:4f:cb:a5:ec:7a:e9:27:fc:41:71:
         71:ad:f9:28
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUT8msU0YXZz1gzD8hEea7CtmrTAYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMTkxNzQ4NTJaFw0yNTAzMTgxNzUzNTJaMDMxMTAvBgNV
BAMTKDM1MjQ4Q0IwOUI2OTNEMjNDRkQzRjgwQzI5MENCMjZFMjFGMUI1QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlgMvOsele9Qn9MtfZVpAewDee
nnfM2JBC35vP6IBQTEjgOG97YRZs0KEC15DE2Qsf10EkVVwu6Yq6MjboOrrlSjoT
kdG3QIZkci/yc+lit2fLJ9YdTGqxT+2KjQ+JaMJwdWR54r3b4ObRwOCmGByi/RMB
Gnfhag4aE31yrXbMJbREHiUO3gFms0S0Bod+wffEZVAU3lDjX8oh5zQycUoDpIG3
vL7tfuHqkXOSuMZ5NK87GqXH5kNlw287vyNcBdbKl1V1CQ84fsexF+oSFhakF1Gc
Vrj4nmf1ix5IUPceVZ0y8d1M15ugNd4tGeNHAQ/DamD8aMr2WfRxHeEVuozXAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ1JIywm2k9I8/T
+AwpDLJuIfG1uzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BN0pvSllFUUV0VzFmNWVLalpFWmdMMTliNGdOcHB3NFly
S1M5c2R4ODdLTC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQTdKb0pZRVFFdFcxZjVlS2paRVpnTDE5YjRnTnBwdzRZ
cktTOXNkeDg3S0wvMC8zNTI0OENCMDlCNjkzRDIzQ0ZEM0Y4MEMyOTBDQjI2RTIx
RjFCNUJCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALJ2HwwDQQCAAIwBwMF
ACgEafwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBB/gMA0GCSqGSIb3DQEBCwUA
A4IBAQCMr7K1j9Uu1pH0i3ZywqxDWE+7hbT/KedEe6mkT+RXf/a4ALhXtBrIm780
NUi/0Yzd7naZxTcoR9sNQvMxWJLbW/xWM44zyxLdZfC0Yp5l3d+YcowPU1l0GDze
1/rg3s7kR9z+pn8wIReAot9U40IlaqTRvOP2fm1vrGWy+apg8wCuSA9nW8ctYdsW
afDdP0Z86eK+LZNTCyWRhCVnSEMFiPGJjpGt8QZg+HirHj5vsNg7mUzkvqOWuKeD
JRECyVwMUVMIouMweSPmjuWwvuCpgCYReVV+mef8Ejj0jmP1j5oU54WOHpAXSSBz
rzLfGKEbt0/Lpex66Sf8QXFxrfko
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org