Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/39EA9546DD0BCEE3FDD6F5C3AC59800021014ED3.cer
File:                     39EA9546DD0BCEE3FDD6F5C3AC59800021014ED3.cer (raw, json)
Hash identifier:          RjVyIOdOQ+e2hcesZeEwMe3FQicBUhhSR8oGpm4yYU4=
Subject key identifier:   39:EA:95:46:DD:0B:CE:E3:FD:D6:F5:C3:AC:59:80:00:21:01:4E:D3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1FE4CCDDDE6B2584B323667D5CE3E1CE3588D01A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/39EA9546DD0BCEE3FDD6F5C3AC59800021014ED3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 May 2022 20:02:45 +0000
Certificate not after:    Mon 29 May 2023 20:07:45 +0000
Subordinate resources:    AS: 53087
                          IP: 177.75.64.0/20
                          IP: 187.33.224.0/19
                          IP: 2804:298::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e4:cc:dd:de:6b:25:84:b3:23:66:7d:5c:e3:e1:ce:35:88:d0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 20:02:45 2022 GMT
            Not After : May 29 20:07:45 2023 GMT
        Subject: CN=39EA9546DD0BCEE3FDD6F5C3AC59800021014ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:20:b0:47:2c:e5:01:35:85:f3:c1:98:98:5a:
                    58:0f:86:ec:c2:66:fc:14:ef:95:cd:08:bb:58:7e:
                    bf:80:20:91:f7:32:74:a1:c0:cf:62:ef:7f:09:9a:
                    e7:b7:04:68:5e:8a:0e:fd:00:2c:96:f2:bd:ad:a9:
                    e9:24:ce:be:2a:e7:4e:4c:4e:2c:94:ee:8b:2d:99:
                    cc:71:b6:b5:bf:d1:18:e8:ed:af:55:ff:a0:cc:d7:
                    ac:0f:e4:42:90:32:88:e8:d7:d9:97:5b:0c:ff:55:
                    0b:6a:93:a1:16:8c:b0:d9:ab:b5:68:b8:89:e5:6b:
                    e6:f6:82:03:61:a9:55:ae:0b:1e:e3:e2:4c:3b:8a:
                    d3:d0:04:f2:ae:d8:10:16:f6:98:ef:6a:1f:b9:0c:
                    ff:3e:3e:3c:d7:3e:35:5b:09:ea:d8:eb:19:5b:97:
                    ec:cf:cb:f3:e5:d3:32:96:37:c2:48:91:9d:7f:9d:
                    c6:19:9c:58:92:ea:5f:ed:04:cf:af:54:6f:79:da:
                    fa:e5:1e:dc:d6:ce:ce:00:bd:bd:5b:63:95:dc:e5:
                    f7:bf:e2:b8:9f:8d:56:f1:50:4f:7c:d7:27:cb:ff:
                    2a:30:b2:93:8e:a3:9f:4e:f0:ea:a7:e3:98:99:cb:
                    fb:dd:56:c8:81:ed:db:0b:22:89:03:67:ff:ff:fb:
                    40:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:EA:95:46:DD:0B:CE:E3:FD:D6:F5:C3:AC:59:80:00:21:01:4E:D3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/39EA9546DD0BCEE3FDD6F5C3AC59800021014ED3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.64.0/20
                  187.33.224.0/19
                IPv6:
                  2804:298::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53087

    Signature Algorithm: sha256WithRSAEncryption
         ad:43:05:74:2f:d0:74:98:c2:d5:6d:aa:7b:56:e9:da:4f:04:
         bb:40:ca:d3:2c:ba:91:95:09:b9:11:2d:22:b9:73:79:f2:4e:
         84:d1:85:88:7e:00:da:02:10:f7:dc:a0:9a:d9:11:37:3f:bb:
         89:a7:69:9b:53:3f:5a:5a:98:cc:88:47:e8:de:13:20:8b:0e:
         30:15:b9:88:61:12:f9:3c:4d:60:f5:2b:86:90:d4:23:0e:1a:
         3b:79:93:f7:21:fb:54:75:45:b9:23:fb:b1:f5:a1:61:7e:fb:
         cd:b9:4a:6c:82:cb:63:52:90:9a:4c:df:49:3c:5c:49:48:c9:
         42:1f:e1:8a:9d:44:1f:0d:22:cc:f5:fc:4a:dc:cf:34:ba:99:
         0b:7e:18:42:90:9b:ad:ab:65:ca:a1:b5:5f:7b:00:8d:fd:85:
         44:26:50:4e:2e:b8:dc:9b:34:c1:33:1f:cb:21:2d:66:6b:ce:
         7f:5e:0a:58:ac:0a:3f:32:2a:4a:59:76:55:ec:fe:ce:57:44:
         dd:89:57:e8:5a:96:ef:57:17:b3:55:e5:74:f5:29:97:3e:a5:
         be:55:98:d2:53:46:fe:0c:9f:22:c2:2f:31:3f:af:30:0f:56:
         97:9b:6f:73:fe:8a:79:92:ca:77:83:5a:23:00:18:b9:79:26:
         24:5d:94:88
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUH+TM3d5rJYSzI2Z9XOPhzjWI0BowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA1MzAyMDAyNDVaFw0yMzA1MjkyMDA3NDVaMDMxMTAvBgNV
BAMTKDM5RUE5NTQ2REQwQkNFRTNGREQ2RjVDM0FDNTk4MDAwMjEwMTRFRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ILBHLOUBNYXzwZiYWlgPhuzC
ZvwU75XNCLtYfr+AIJH3MnShwM9i738Jmue3BGheig79ACyW8r2tqekkzr4q505M
TiyU7ostmcxxtrW/0Rjo7a9V/6DM16wP5EKQMojo19mXWwz/VQtqk6EWjLDZq7Vo
uInla+b2ggNhqVWuCx7j4kw7itPQBPKu2BAW9pjvah+5DP8+PjzXPjVbCerY6xlb
l+zPy/Pl0zKWN8JIkZ1/ncYZnFiS6l/tBM+vVG952vrlHtzWzs4Avb1bY5Xc5fe/
4rifjVbxUE981yfL/yowspOOo59O8Oqn45iZy/vdVsiB7dsLIokDZ///+0AJAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ56pVG3QvO4/3W
9cOsWYAAIQFO0zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GazdrZmo2WDZ3cjV2eFh6Q3U4WWdSVE42UHd6NFVRaTdR
YVE4TlpCcmk3dC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GazdrZmo2WDZ3cjV2eFh6Q3U4WWdSVE42UHd6NFVRaTdR
YVE4TlpCcmk3dC8wLzM5RUE5NTQ2REQwQkNFRTNGREQ2RjVDM0FDNTk4MDAwMjEw
MTRFRDMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBLFLQAMEBbsh4DANBAIA
AjAHAwUAKAQCmDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAz18wDQYJKoZIhvcN
AQELBQADggEBAK1DBXQv0HSYwtVtqntW6dpPBLtAytMsupGVCbkRLSK5c3nyToTR
hYh+ANoCEPfcoJrZETc/u4mnaZtTP1pamMyIR+jeEyCLDjAVuYhhEvk8TWD1K4aQ
1CMOGjt5k/ch+1R1Rbkj+7H1oWF++825SmyCy2NSkJpM30k8XElIyUIf4YqdRB8N
Isz1/ErczzS6mQt+GEKQm62rZcqhtV97AI39hUQmUE4uuNybNMEzH8shLWZrzn9e
ClisCj8yKkpZdlXs/s5XRN2JV+halu9XF7NV5XT1KZc+pb5VmNJTRv4MnyLCLzE/
rzAPVpebb3P+inmSyneDWiMAGLl5JiRdlIg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org