Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/35B8EDA9CDE6A9361227A536A999C156D518D26B.cer
File:                     35B8EDA9CDE6A9361227A536A999C156D518D26B.cer (raw, json)
Hash identifier:          grHcy7s8ry8DNbxlhZZ+G+IyAfrMqR3GFc3S08H3h2k=
Subject key identifier:   35:B8:ED:A9:CD:E6:A9:36:12:27:A5:36:A9:99:C1:56:D5:18:D2:6B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       26073D3D962CAD5A7138877A9C97A54F2CC074E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/35B8EDA9CDE6A9361227A536A999C156D518D26B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 15:00:00 +0000
Certificate not after:    Tue 27 Aug 2024 15:05:00 +0000
Subordinate resources:    AS: 263878
                          IP: 138.204.20.0/22
                          IP: 2804:2720::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:07:3d:3d:96:2c:ad:5a:71:38:87:7a:9c:97:a5:4f:2c:c0:74:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 29 15:00:00 2023 GMT
            Not After : Aug 27 15:05:00 2024 GMT
        Subject: CN=35B8EDA9CDE6A9361227A536A999C156D518D26B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:29:71:b0:2a:2f:7b:e8:69:fc:33:11:6d:b1:
                    4f:82:d1:2a:4f:da:f8:22:5d:59:79:26:6c:86:b5:
                    7e:65:59:52:8c:cd:c1:6d:01:78:64:0f:12:83:b9:
                    7b:cf:78:f1:70:4d:49:4c:2b:67:46:25:47:8a:7f:
                    ff:a4:78:9d:f5:4b:b7:07:f1:f4:b9:60:e4:2e:93:
                    40:90:f4:5f:7c:37:05:a9:40:d0:88:5f:dc:e6:9e:
                    0a:27:47:c7:2f:40:76:65:16:f1:48:bd:e7:b4:41:
                    0b:39:15:f4:12:91:2e:e8:ec:ae:15:65:e5:7d:d1:
                    e8:0e:a1:5e:0c:5c:82:f6:a0:0c:48:73:0a:36:ee:
                    24:e6:81:4e:34:1f:84:b5:8a:f0:80:cd:75:e2:4f:
                    da:d0:d9:4d:91:8b:c1:76:a5:b6:eb:af:4e:66:e3:
                    f7:6e:d3:9f:85:df:5f:25:5f:62:b6:27:96:33:53:
                    c6:59:90:00:48:4f:1e:64:55:c1:5e:3b:db:7d:18:
                    a8:9d:ee:cc:7f:eb:d9:09:73:e6:1a:71:4a:79:5a:
                    25:5a:29:bc:2c:50:ee:d3:a9:3e:42:55:65:4f:f5:
                    6b:4b:b8:cf:c5:3e:3b:73:1d:34:ad:16:76:c2:91:
                    60:98:93:12:5b:20:f2:0d:44:0e:b1:1f:17:07:87:
                    dd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:B8:ED:A9:CD:E6:A9:36:12:27:A5:36:A9:99:C1:56:D5:18:D2:6B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/35B8EDA9CDE6A9361227A536A999C156D518D26B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.20.0/22
                IPv6:
                  2804:2720::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263878

    Signature Algorithm: sha256WithRSAEncryption
         41:06:bb:fd:16:06:40:1a:cd:2e:23:dc:46:3d:dc:4f:71:57:
         45:ae:23:59:6b:e4:fe:04:03:9f:b1:6e:ff:a9:e9:77:53:e2:
         cd:04:c3:ae:5d:75:cc:7d:43:3a:e7:6c:30:89:41:4e:8f:d7:
         3e:1c:f3:eb:da:bf:41:c9:1d:b2:af:73:91:e4:fc:74:b7:a9:
         95:88:25:85:92:10:52:c1:a2:92:42:f7:19:c4:42:34:a1:a2:
         b4:1a:5f:65:57:fa:d0:0e:4b:c3:50:15:8f:dc:2b:e0:f1:7e:
         ee:ce:70:ee:c0:a1:e7:71:81:ce:12:46:87:71:8b:e1:bc:3f:
         2b:dd:0c:eb:6d:da:63:99:14:60:c0:ff:c7:da:eb:36:77:5a:
         e2:84:b2:05:7e:53:f7:bc:5a:19:05:f3:b4:d0:ff:6c:09:e6:
         83:0c:0e:92:c9:f4:0c:78:d7:28:ec:78:7c:db:69:33:4f:db:
         ac:88:f0:82:6a:ae:e2:7d:eb:3c:0c:9d:eb:87:80:00:4b:4f:
         49:e1:f5:1e:26:34:57:f4:a6:3c:b3:69:fd:39:72:c2:fd:f6:
         60:d3:34:57:8e:49:31:d5:35:16:1d:53:e0:b0:69:c1:72:cc:
         c7:1d:ca:7e:18:d0:93:7f:76:a1:a2:10:fd:0c:69:ac:91:3d:
         9b:cb:6c:71
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUJgc9PZYsrVpxOId6nJelTyzAdOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MjkxNTAwMDBaFw0yNDA4MjcxNTA1MDBaMDMxMTAvBgNV
BAMTKDM1QjhFREE5Q0RFNkE5MzYxMjI3QTUzNkE5OTlDMTU2RDUxOEQyNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6KXGwKi976Gn8MxFtsU+C0SpP
2vgiXVl5JmyGtX5lWVKMzcFtAXhkDxKDuXvPePFwTUlMK2dGJUeKf/+keJ31S7cH
8fS5YOQuk0CQ9F98NwWpQNCIX9zmngonR8cvQHZlFvFIvee0QQs5FfQSkS7o7K4V
ZeV90egOoV4MXIL2oAxIcwo27iTmgU40H4S1ivCAzXXiT9rQ2U2Ri8F2pbbrr05m
4/du05+F318lX2K2J5YzU8ZZkABITx5kVcFeO9t9GKid7sx/69kJc+YacUp5WiVa
KbwsUO7TqT5CVWVP9WtLuM/FPjtzHTStFnbCkWCYkxJbIPINRA6xHxcHh92RAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ1uO2pzeapNhIn
pTapmcFW1RjSazAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80SDliUlJSQ0RWcWZjbWFKenc3NnA5VVhYTVFvYUhpd3hw
ZGV1aG5lWkZUWC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNEg5YlJSUkNEVnFmY21hSnp3NzZwOVVYWE1Rb2FIaXd4
cGRldWhuZVpGVFgvMC8zNUI4RURBOUNERTZBOTM2MTIyN0E1MzZBOTk5QzE1NkQ1
MThEMjZCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKKzBQwDQQCAAIwBwMF
ACgEJyAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAbGMA0GCSqGSIb3DQEBCwUA
A4IBAQBBBrv9FgZAGs0uI9xGPdxPcVdFriNZa+T+BAOfsW7/qel3U+LNBMOuXXXM
fUM652wwiUFOj9c+HPPr2r9ByR2yr3OR5Px0t6mViCWFkhBSwaKSQvcZxEI0oaK0
Gl9lV/rQDkvDUBWP3Cvg8X7uznDuwKHncYHOEkaHcYvhvD8r3QzrbdpjmRRgwP/H
2us2d1rihLIFflP3vFoZBfO00P9sCeaDDA6SyfQMeNco7Hh822kzT9usiPCCaq7i
fes8DJ3rh4AAS09J4fUeJjRX9KY8s2n9OXLC/fZg0zRXjkkx1TUWHVPgsGnBcszH
Hcp+GNCTf3ahohD9DGmskT2by2xx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org