Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer
File:                     3AA25D1A66959674425740B0D69389FFFDDE91CB.cer (raw, json)
Hash identifier:          pBzGmkpf1MFsS+2THKGZiYoDBgWyQguy3Vl+MzTXYuY=
Subject key identifier:   3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       503F209246465B788CFE668293487BC377C6A32A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Mar 2024 15:05:08 +0000
Certificate not after:    Mon 17 Mar 2025 15:10:08 +0000
Subordinate resources:    AS: 268471
                          IP: 45.160.192.0/22
                          IP: 2804:51b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3f:20:92:46:46:5b:78:8c:fe:66:82:93:48:7b:c3:77:c6:a3:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 18 15:05:08 2024 GMT
            Not After : Mar 17 15:10:08 2025 GMT
        Subject: CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:28:21:50:9d:41:cc:32:48:d0:77:d7:ad:
                    a4:64:32:bf:9b:28:af:f3:3f:23:63:07:c1:b5:d3:
                    5b:fc:d9:da:e4:f8:95:cb:c8:ac:33:92:11:3c:dd:
                    3d:d7:8f:3a:e0:34:e9:43:ad:2f:ef:db:5f:3e:26:
                    3c:5f:e6:41:3a:e8:98:51:0a:ba:65:75:48:7d:48:
                    a0:35:81:22:1b:88:cf:bc:de:58:2a:af:df:28:30:
                    1e:b9:72:72:29:dc:30:8a:b9:aa:7c:28:4f:9c:ee:
                    ee:62:1d:f2:63:23:72:0c:ec:4a:ea:85:fe:90:86:
                    4d:56:51:48:f6:54:4b:4a:bf:d4:a5:f1:43:08:f0:
                    7e:c0:58:33:57:d8:15:76:93:42:01:9f:a1:70:a6:
                    70:1e:94:06:54:80:46:dc:76:07:77:c3:5f:c0:87:
                    1c:38:27:4b:88:b1:4c:31:76:33:8d:4b:e1:c8:cb:
                    c2:58:ea:94:f5:6f:6d:97:03:46:87:30:7d:cf:cc:
                    d0:8d:52:fc:3c:60:6a:90:5b:45:95:e4:d9:c1:b7:
                    a7:92:c3:5a:28:cf:ea:b7:a1:c5:a7:a7:05:b2:24:
                    9f:d9:74:81:6c:13:6f:51:c3:e2:f4:ee:65:db:39:
                    3c:bc:91:cc:b4:3f:81:4b:9f:51:a3:84:a2:0b:d1:
                    e4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.192.0/22
                IPv6:
                  2804:51b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268471

    Signature Algorithm: sha256WithRSAEncryption
         14:4d:a8:8c:fe:31:96:03:d0:d3:e3:41:ed:a8:e7:39:fc:48:
         9f:2a:79:7b:5a:3b:db:da:f7:8c:66:5f:34:8a:d0:65:0d:7e:
         ea:05:86:b0:64:a0:f9:ec:46:6f:06:62:00:d8:aa:ed:f3:c7:
         80:6e:2c:4b:23:df:0c:ff:34:1d:7c:da:18:9f:47:8c:e3:a3:
         18:72:58:49:67:4f:86:41:7a:a0:15:db:ee:e1:b2:aa:51:9b:
         41:d8:e0:67:d7:e0:bd:84:67:59:e9:3f:df:1f:83:72:c0:34:
         49:cc:5d:63:4b:e4:74:26:ed:3e:b3:44:d3:db:05:99:02:f0:
         5f:fa:24:c0:81:fb:28:60:b6:fb:97:f2:5f:70:ea:68:0d:56:
         77:01:23:1f:ef:f1:6c:3d:04:77:1b:63:3a:94:4e:2b:fb:99:
         b8:73:b8:42:ed:06:02:4a:5c:bd:90:aa:ca:07:2b:c9:42:17:
         2b:a2:a7:1e:2c:bd:07:c6:5a:fa:64:cb:c7:1f:9f:57:49:2f:
         d4:fb:03:5b:12:36:fd:98:53:6a:3d:3e:f8:47:dc:3c:0a:db:
         cf:48:a8:aa:85:ef:aa:14:87:de:bb:69:2e:0f:1a:c0:db:99:
         a5:d9:0b:3d:97:83:ac:3a:ae:51:32:9a:f8:be:61:f9:bd:10:
         92:2f:3c:8d
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUUD8gkkZGW3iM/maCk0h7w3fGoyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMTgxNTA1MDhaFw0yNTAzMTcxNTEwMDhaMDMxMTAvBgNV
BAMTKDNBQTI1RDFBNjY5NTk2NzQ0MjU3NDBCMEQ2OTM4OUZGRkRERTkxQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyuCghUJ1BzDJI0HfXraRkMr+b
KK/zPyNjB8G101v82drk+JXLyKwzkhE83T3XjzrgNOlDrS/v218+Jjxf5kE66JhR
CrpldUh9SKA1gSIbiM+83lgqr98oMB65cnIp3DCKuap8KE+c7u5iHfJjI3IM7Erq
hf6Qhk1WUUj2VEtKv9Sl8UMI8H7AWDNX2BV2k0IBn6FwpnAelAZUgEbcdgd3w1/A
hxw4J0uIsUwxdjONS+HIy8JY6pT1b22XA0aHMH3PzNCNUvw8YGqQW0WV5NnBt6eS
w1ooz+q3ocWnpwWyJJ/ZdIFsE29Rw+L07mXbOTy8kcy0P4FLn1GjhKIL0eSHAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ6ol0aZpWWdEJX
QLDWk4n//d6RyzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GcWFXWnUzcG9GZlhVRlhLZDhOTmllTXNBWHRIaTJocUV0
U3lLNHJSUFljdC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GcWFXWnUzcG9GZlhVRlhLZDhOTmllTXNBWHRIaTJocUV0
U3lLNHJSUFljdC8wLzNBQTI1RDFBNjY5NTk2NzQ0MjU3NDBCMEQ2OTM4OUZGRkRE
RTkxQ0IubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2gwDANBAIAAjAHAwUA
KARRtDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGLcwDQYJKoZIhvcNAQELBQAD
ggEBABRNqIz+MZYD0NPjQe2o5zn8SJ8qeXtaO9va94xmXzSK0GUNfuoFhrBkoPns
Rm8GYgDYqu3zx4BuLEsj3wz/NB182hifR4zjoxhyWElnT4ZBeqAV2+7hsqpRm0HY
4GfX4L2EZ1npP98fg3LANEnMXWNL5HQm7T6zRNPbBZkC8F/6JMCB+yhgtvuX8l9w
6mgNVncBIx/v8Ww9BHcbYzqUTiv7mbhzuELtBgJKXL2QqsoHK8lCFyuipx4svQfG
Wvpky8cfn1dJL9T7A1sSNv2YU2o9PvhH3DwK289IqKqF76oUh967aS4PGsDbmaXZ
Cz2Xg6w6rlEymvi+Yfm9EJIvPI0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:23 2024 by rpki-client on console-ams.rpki-client.org