Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3ABA369F9008028C8B61246DD199EA286A62F0EE.cer
File:                     3ABA369F9008028C8B61246DD199EA286A62F0EE.cer (raw, json)
Hash identifier:          Bkjx0nvL7bsiW4D4i9yUqLgyfsDEQJXd5sueLqAOBVE=
Subject key identifier:   3A:BA:36:9F:90:08:02:8C:8B:61:24:6D:D1:99:EA:28:6A:62:F0:EE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       342A6623F14BFD0A9DC5298554506328FE7B5F37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/0/3ABA369F9008028C8B61246DD199EA286A62F0EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 12 Aug 2023 02:54:05 +0000
Certificate not after:    Sat 10 Aug 2024 02:59:05 +0000
Subordinate resources:    AS: 266084
                          IP: 45.5.88.0/22
                          IP: 2804:3a58::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2a:66:23:f1:4b:fd:0a:9d:c5:29:85:54:50:63:28:fe:7b:5f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 12 02:54:05 2023 GMT
            Not After : Aug 10 02:59:05 2024 GMT
        Subject: CN=3ABA369F9008028C8B61246DD199EA286A62F0EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:12:ac:ea:a5:a6:84:92:be:af:40:98:7f:b2:
                    0b:68:d1:94:6d:88:11:50:d6:f6:99:b7:1d:c2:bb:
                    b8:50:05:92:ce:3b:45:11:32:6d:5f:90:aa:8f:b9:
                    08:52:b9:b7:6e:12:4f:1f:2e:bb:35:57:e9:3c:38:
                    02:9f:21:b7:96:84:72:ab:c2:83:0c:56:93:7c:e2:
                    44:8c:d2:38:ed:8c:09:b2:06:14:20:2c:e6:a9:cc:
                    2c:32:3f:2d:bb:36:6e:af:8d:2f:41:44:84:94:fc:
                    73:71:f3:5c:2d:35:53:69:22:b3:b5:68:83:9c:c3:
                    05:52:0d:c8:5f:10:e1:b3:43:d0:88:6e:06:ce:fc:
                    b7:09:72:f6:98:b9:b2:d1:6e:ae:cc:6d:91:90:1f:
                    0d:bd:f3:23:ba:6f:18:d3:b7:3a:c3:d4:a3:52:bb:
                    59:66:80:53:4e:dc:9c:ca:96:15:fc:68:4f:1a:74:
                    50:4d:d5:59:04:85:33:1a:30:37:a8:8e:17:88:da:
                    5a:33:e9:f9:ac:57:57:ed:d0:57:27:7d:c0:11:b5:
                    13:bd:84:8f:43:8b:0e:e4:7b:ac:19:b8:de:6a:c4:
                    e6:15:3e:df:4e:f2:0a:10:b1:b6:54:d0:93:ee:a6:
                    bc:2b:3b:bd:b4:2d:19:6b:da:6b:bf:8f:07:e0:21:
                    fb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:BA:36:9F:90:08:02:8C:8B:61:24:6D:D1:99:EA:28:6A:62:F0:EE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/0/3ABA369F9008028C8B61246DD199EA286A62F0EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.88.0/22
                IPv6:
                  2804:3a58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266084

    Signature Algorithm: sha256WithRSAEncryption
         a7:fc:49:ef:e4:ec:4b:a1:92:b6:dd:2e:d7:8e:75:a8:57:43:
         f2:53:f3:e6:af:92:d3:2c:f9:a8:92:1f:55:4d:1c:30:70:1b:
         3f:b1:86:a3:61:e4:42:07:99:9f:01:ec:ae:e1:e7:36:f2:c0:
         cb:e8:df:5b:b2:c8:be:06:50:3b:2d:c6:d4:ce:ed:5b:ef:77:
         1c:4a:c5:50:7a:18:5f:1f:57:b3:76:a5:b7:e7:7d:bf:10:7a:
         52:0d:4f:5e:01:3e:4d:e3:9f:c3:9d:12:8c:07:e6:98:1d:90:
         61:3f:75:25:49:49:dc:19:ec:eb:23:2b:82:bf:51:39:22:10:
         2a:fd:f9:14:96:9c:0f:8e:4c:c1:75:b8:7c:a5:a8:70:2a:c0:
         40:ce:2c:11:af:70:89:89:4a:25:6f:81:26:4d:0a:05:12:51:
         3f:3d:18:f3:81:91:93:5f:d1:3b:30:59:6c:2c:4b:1d:19:39:
         19:58:ae:d8:3f:c4:da:16:38:9d:72:33:5a:60:01:1b:67:1e:
         18:79:11:46:c0:f8:3a:b0:6e:7c:59:54:92:d2:9a:30:3a:53:
         4d:d6:7e:65:49:54:89:4d:b2:97:14:b4:94:ab:46:54:fb:92:
         81:cf:fe:24:e0:cd:37:41:48:8c:cb:62:3c:25:e3:df:ad:79:
         8e:67:10:67
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUNCpmI/FL/QqdxSmFVFBjKP57XzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MTIwMjU0MDVaFw0yNDA4MTAwMjU5MDVaMDMxMTAvBgNV
BAMTKDNBQkEzNjlGOTAwODAyOEM4QjYxMjQ2REQxOTlFQTI4NkE2MkYwRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCEqzqpaaEkr6vQJh/sgto0ZRt
iBFQ1vaZtx3Cu7hQBZLOO0URMm1fkKqPuQhSubduEk8fLrs1V+k8OAKfIbeWhHKr
woMMVpN84kSM0jjtjAmyBhQgLOapzCwyPy27Nm6vjS9BRISU/HNx81wtNVNpIrO1
aIOcwwVSDchfEOGzQ9CIbgbO/LcJcvaYubLRbq7MbZGQHw298yO6bxjTtzrD1KNS
u1lmgFNO3JzKlhX8aE8adFBN1VkEhTMaMDeojheI2loz6fmsV1ft0FcnfcARtRO9
hI9Diw7ke6wZuN5qxOYVPt9O8goQsbZU0JPuprwrO720LRlr2mu/jwfgIftDAgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ6ujafkAgCjIth
JG3RmeooamLw7jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ZRHp6elVXNjlGbmUyUkdaemJtWFpKcG1Hajl3Q2RqR0Nh
dEtEUDJNYVBVLzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ZRHp6elVXNjlGbmUyUkdaemJtWFpKcG1Hajl3Q2RqR0Nh
dEtEUDJNYVBVLzAvM0FCQTM2OUY5MDA4MDI4QzhCNjEyNDZERDE5OUVBMjg2QTYy
RjBFRS5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLQVYMA0EAgACMAcDBQAo
BDpYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQPZDANBgkqhkiG9w0BAQsFAAOC
AQEAp/xJ7+TsS6GStt0u1451qFdD8lPz5q+S0yz5qJIfVU0cMHAbP7GGo2HkQgeZ
nwHsruHnNvLAy+jfW7LIvgZQOy3G1M7tW+93HErFUHoYXx9Xs3alt+d9vxB6Ug1P
XgE+TeOfw50SjAfmmB2QYT91JUlJ3Bns6yMrgr9ROSIQKv35FJacD45MwXW4fKWo
cCrAQM4sEa9wiYlKJW+BJk0KBRJRPz0Y84GRk1/ROzBZbCxLHRk5GViu2D/E2hY4
nXIzWmABG2ceGHkRRsD4OrBufFlUktKaMDpTTdZ+ZUlUiU2ylxS0lKtGVPuSgc/+
JODNN0FIjMtiPCXj3615jmcQZw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org