Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/35AAA330E2078C00952908EF903B1216EE41620C.cer
File:                     35AAA330E2078C00952908EF903B1216EE41620C.cer (raw, json)
Hash identifier:          hqeduGFFlFHZBbOR+PwrTnfX6Rru97qBHKfJgBkE8uA=
Subject key identifier:   35:AA:A3:30:E2:07:8C:00:95:29:08:EF:90:3B:12:16:EE:41:62:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4993D85F1781825A328C2AD7E50A65391CC5972F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/35AAA330E2078C00952908EF903B1216EE41620C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 Sep 2022 20:50:37 +0000
Certificate not after:    Fri 01 Sep 2023 20:55:37 +0000
Subordinate resources:    AS: 264178
                          IP: 138.99.72.0/22
                          IP: 2804:23b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:93:d8:5f:17:81:82:5a:32:8c:2a:d7:e5:0a:65:39:1c:c5:97:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  2 20:50:37 2022 GMT
            Not After : Sep  1 20:55:37 2023 GMT
        Subject: CN=35AAA330E2078C00952908EF903B1216EE41620C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:48:6f:87:ff:14:38:df:6e:60:8c:95:f4:5b:
                    7a:af:95:92:e7:c2:c1:c0:57:49:cb:92:95:5f:ac:
                    c0:d3:78:1f:9b:5c:e3:f4:a6:f4:5e:c3:55:71:0d:
                    4d:6c:28:ae:8e:3d:ed:86:90:b4:02:75:0b:5a:be:
                    cf:30:56:67:3c:c7:d7:a0:a1:9a:44:f1:79:20:7f:
                    26:98:53:f8:e2:79:4b:88:05:ae:3e:0b:b0:af:2e:
                    be:00:81:3c:b1:8e:08:02:ba:ba:a9:ce:05:88:7d:
                    be:d8:5d:b6:96:36:4c:82:c2:ff:31:ff:2d:ec:aa:
                    56:06:36:b2:8f:95:fb:cd:bf:df:a9:a3:5d:0c:56:
                    60:9f:7c:c3:d2:41:f7:8a:90:4f:45:58:b1:dd:ec:
                    70:d1:1a:eb:78:95:4f:fe:85:79:e1:a9:eb:34:02:
                    d9:b9:1e:51:2f:76:de:75:ae:0b:0a:f0:ed:b7:13:
                    70:0f:da:98:6f:f0:66:9f:51:87:76:c2:5f:32:ec:
                    ee:84:7c:5a:33:22:70:5c:5f:fd:de:a2:cb:70:ef:
                    d4:59:c9:ee:45:a9:2c:f5:73:a5:8f:b8:ba:a0:9b:
                    92:60:4c:a3:2e:a9:e0:6c:ff:b2:7c:7c:9b:9d:e8:
                    8e:f9:78:39:dc:5f:5c:c8:41:04:2e:87:ce:86:1d:
                    30:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:AA:A3:30:E2:07:8C:00:95:29:08:EF:90:3B:12:16:EE:41:62:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/35AAA330E2078C00952908EF903B1216EE41620C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.72.0/22
                IPv6:
                  2804:23b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264178

    Signature Algorithm: sha256WithRSAEncryption
         82:ad:63:05:60:e2:ae:5c:3c:69:b6:e4:30:9d:bd:15:16:ff:
         7a:f2:57:42:47:5a:08:2c:35:ac:e0:92:bc:68:5c:b9:3b:b2:
         1e:1d:1a:1b:96:6b:02:f2:7f:55:14:db:0d:ae:32:c6:73:d8:
         47:65:00:f4:23:b4:83:b4:19:1b:7a:1d:06:d5:be:43:12:a9:
         3b:07:95:21:3d:59:bf:f3:0f:60:ff:e4:b7:67:02:1b:ab:02:
         0c:ce:ec:a3:46:f7:2b:0b:dc:10:1d:72:65:b9:75:9f:20:ce:
         be:92:d5:59:1b:bc:35:7c:eb:05:f7:3c:8f:91:48:49:d8:d3:
         fc:92:82:ab:f5:d7:5b:30:b8:fa:ca:14:ba:76:08:c2:7c:85:
         b3:5a:b3:d1:93:71:bc:98:a8:5b:68:71:bf:24:90:2e:05:7d:
         b3:8f:46:3f:d7:e9:03:6c:06:8a:b8:a1:eb:a3:5b:e0:4c:c9:
         ea:11:97:23:6e:08:4b:53:a4:d4:0d:a4:c0:78:98:55:81:63:
         2c:a3:27:ed:e0:b1:97:9d:3c:e5:fc:46:73:2c:15:b2:8b:4c:
         e3:30:52:f1:01:39:ab:e8:8d:02:62:a3:cb:a7:42:b8:72:c7:
         5f:f8:de:2a:de:1c:39:fd:35:57:4b:92:0a:24:32:98:74:0e:
         91:82:96:ee
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUSZPYXxeBgloyjCrX5QplORzFly8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA5MDIyMDUwMzdaFw0yMzA5MDEyMDU1MzdaMDMxMTAvBgNV
BAMTKDM1QUFBMzMwRTIwNzhDMDA5NTI5MDhFRjkwM0IxMjE2RUU0MTYyMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMSG+H/xQ4325gjJX0W3qvlZLn
wsHAV0nLkpVfrMDTeB+bXOP0pvRew1VxDU1sKK6OPe2GkLQCdQtavs8wVmc8x9eg
oZpE8XkgfyaYU/jieUuIBa4+C7CvLr4AgTyxjggCurqpzgWIfb7YXbaWNkyCwv8x
/y3sqlYGNrKPlfvNv9+po10MVmCffMPSQfeKkE9FWLHd7HDRGut4lU/+hXnhqes0
Atm5HlEvdt51rgsK8O23E3AP2phv8GafUYd2wl8y7O6EfFozInBcX/3eostw79RZ
ye5FqSz1c6WPuLqgm5JgTKMuqeBs/7J8fJud6I75eDncX1zIQQQuh86GHTDXAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ1qqMw4geMAJUp
CO+QOxIW7kFiDDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Hc29IVjRmUkx0QjRpYUhFUjU5Zkt0aWozVkJDUzZzcUxr
VnhOWFpSWGVEMi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Hc29IVjRmUkx0QjRpYUhFUjU5Zkt0aWozVkJDUzZzcUxr
VnhOWFpSWGVEMi8wLzM1QUFBMzMwRTIwNzhDMDA5NTI5MDhFRjkwM0IxMjE2RUU0
MTYyMEMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAopjSDANBAIAAjAHAwUA
KAQjtDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEB/IwDQYJKoZIhvcNAQELBQAD
ggEBAIKtYwVg4q5cPGm25DCdvRUW/3ryV0JHWggsNazgkrxoXLk7sh4dGhuWawLy
f1UU2w2uMsZz2EdlAPQjtIO0GRt6HQbVvkMSqTsHlSE9Wb/zD2D/5LdnAhurAgzO
7KNG9ysL3BAdcmW5dZ8gzr6S1VkbvDV86wX3PI+RSEnY0/ySgqv111swuPrKFLp2
CMJ8hbNas9GTcbyYqFtocb8kkC4FfbOPRj/X6QNsBoq4oeujW+BMyeoRlyNuCEtT
pNQNpMB4mFWBYyyjJ+3gsZedPOX8RnMsFbKLTOMwUvEBOavojQJio8unQrhyx1/4
3ireHDn9NVdLkgokMph0DpGClu4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org