Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3B31579236031B51D9879A8F65CEC0B7421FD60C.cer
File:                     3B31579236031B51D9879A8F65CEC0B7421FD60C.cer (raw, json)
Hash identifier:          4ZWhznCdh2GzHroDUgvYtFN3hQElBv7tZ8FCA7MHfC0=
Subject key identifier:   3B:31:57:92:36:03:1B:51:D9:87:9A:8F:65:CE:C0:B7:42:1F:D6:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       22FA741BD0968095A798E7918C1149C204EB755E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/3B31579236031B51D9879A8F65CEC0B7421FD60C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 27 Jan 2023 02:21:25 +0000
Certificate not after:    Fri 26 Jan 2024 02:26:25 +0000
Subordinate resources:    AS: 264196
                          IP: 138.97.204.0/22
                          IP: 2804:23fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:fa:74:1b:d0:96:80:95:a7:98:e7:91:8c:11:49:c2:04:eb:75:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 27 02:21:25 2023 GMT
            Not After : Jan 26 02:26:25 2024 GMT
        Subject: CN=3B31579236031B51D9879A8F65CEC0B7421FD60C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:c9:18:a5:bb:65:84:af:a7:cc:9a:99:19:
                    ff:73:b7:05:cb:51:4e:fd:b7:aa:82:b8:59:5c:30:
                    63:10:08:0b:af:44:3a:9b:0b:ed:df:b9:03:1b:d9:
                    bf:8d:ba:fb:53:4c:7d:96:b3:81:89:6c:f8:86:d0:
                    21:d1:92:3d:48:f1:8a:14:82:15:fa:7e:d0:93:19:
                    86:96:f4:f9:23:57:a6:75:bc:12:5d:cf:42:91:56:
                    79:b9:50:d3:8b:06:f7:52:94:67:71:6d:4c:b1:6c:
                    d0:b4:f4:57:bd:84:70:96:25:2d:e0:2d:77:a2:1a:
                    d7:42:21:44:fb:5f:25:51:15:3a:2e:4c:84:0a:d6:
                    bf:30:68:4f:e5:78:3b:5a:d6:7e:e5:74:a5:ca:24:
                    c2:f5:6f:2c:0b:79:41:38:5a:b4:0c:d9:ea:d3:60:
                    3a:40:aa:69:dd:04:76:0d:d0:91:de:18:e7:7c:39:
                    57:83:41:3d:6c:c5:d1:85:a8:b6:69:cb:d0:1f:76:
                    73:2e:13:31:9e:88:c0:13:f2:41:ac:68:b6:7a:ee:
                    24:83:55:5e:6e:5e:87:33:a9:08:67:96:d2:3b:ec:
                    4f:55:38:20:ee:e0:9f:39:b6:78:45:d1:1f:88:1c:
                    9a:86:c7:c8:65:61:b6:17:e2:9d:49:0a:4d:6a:34:
                    4d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:31:57:92:36:03:1B:51:D9:87:9A:8F:65:CE:C0:B7:42:1F:D6:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/3B31579236031B51D9879A8F65CEC0B7421FD60C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.204.0/22
                IPv6:
                  2804:23fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264196

    Signature Algorithm: sha256WithRSAEncryption
         4a:76:8d:ed:99:05:f3:d6:b0:bd:08:7e:5d:58:3a:3f:83:98:
         69:d8:08:a2:18:59:8d:f3:52:09:b7:01:cf:3a:76:d4:be:14:
         56:2d:ee:cb:8c:5d:1e:6f:e2:fa:b7:33:cc:a6:74:ca:2c:b4:
         21:b2:7e:27:b5:b3:35:96:f3:60:2e:e4:26:f8:14:dc:2c:d2:
         16:b9:37:95:18:4f:a2:13:31:64:08:40:98:79:10:0a:02:ab:
         f7:a0:9e:e4:a7:74:be:bf:39:87:66:c1:6f:65:a2:0b:88:18:
         d1:96:93:61:e9:f0:8b:e8:33:ce:a9:f6:be:3a:bd:b2:2b:95:
         84:b3:5f:cd:01:ce:32:dd:ce:03:74:c3:2e:fe:14:f4:af:a0:
         9a:f7:d1:13:e3:ed:e1:07:02:fe:89:06:99:6d:ee:b3:26:ae:
         bd:e6:b3:1c:8f:3a:bf:07:92:64:22:d2:3c:27:62:6c:1b:7d:
         c4:2b:27:48:4c:a4:57:90:05:1b:5f:b5:fd:97:d3:a8:ee:9a:
         5d:94:e2:8b:44:43:7b:bb:0d:a6:b5:e9:19:b9:8f:1d:35:9f:
         8e:8c:75:d0:8b:48:55:df:16:7a:67:52:7a:90:25:15:d2:4f:
         d5:33:b9:ed:3e:f9:8b:de:cc:6b:c5:27:31:4d:38:58:91:e8:
         05:61:59:15
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUIvp0G9CWgJWnmOeRjBFJwgTrdV4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAxMjcwMjIxMjVaFw0yNDAxMjYwMjI2MjVaMDMxMTAvBgNV
BAMTKDNCMzE1NzkyMzYwMzFCNTFEOTg3OUE4RjY1Q0VDMEI3NDIxRkQ2MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw0ckYpbtlhK+nzJqZGf9ztwXL
UU79t6qCuFlcMGMQCAuvRDqbC+3fuQMb2b+NuvtTTH2Ws4GJbPiG0CHRkj1I8YoU
ghX6ftCTGYaW9PkjV6Z1vBJdz0KRVnm5UNOLBvdSlGdxbUyxbNC09Fe9hHCWJS3g
LXeiGtdCIUT7XyVRFTouTIQK1r8waE/leDta1n7ldKXKJML1bywLeUE4WrQM2erT
YDpAqmndBHYN0JHeGOd8OVeDQT1sxdGFqLZpy9AfdnMuEzGeiMAT8kGsaLZ67iSD
VV5uXoczqQhnltI77E9VOCDu4J85tnhF0R+IHJqGx8hlYbYX4p1JCk1qNE19AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ7MVeSNgMbUdmH
mo9lzsC3Qh/WDDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IaDhMSzhGWnFrRk1ud2FUYTloZ3ZGSlFOY0g4aFFFeFBq
ZWJrNHhlWkNrZy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IaDhMSzhGWnFrRk1ud2FUYTloZ3ZGSlFOY0g4aFFFeFBq
ZWJrNHhlWkNrZy8wLzNCMzE1NzkyMzYwMzFCNTFEOTg3OUE4RjY1Q0VDMEI3NDIx
RkQ2MEMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAophzDANBAIAAjAHAwUA
KAQj/DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECAQwDQYJKoZIhvcNAQELBQAD
ggEBAEp2je2ZBfPWsL0Ifl1YOj+DmGnYCKIYWY3zUgm3Ac86dtS+FFYt7suMXR5v
4vq3M8ymdMostCGyfie1szWW82Au5Cb4FNws0ha5N5UYT6ITMWQIQJh5EAoCq/eg
nuSndL6/OYdmwW9loguIGNGWk2Hp8IvoM86p9r46vbIrlYSzX80BzjLdzgN0wy7+
FPSvoJr30RPj7eEHAv6JBplt7rMmrr3msxyPOr8HkmQi0jwnYmwbfcQrJ0hMpFeQ
BRtftf2X06juml2U4otEQ3u7Daa16Rm5jx01n46MddCLSFXfFnpnUnqQJRXST9Uz
ue0++YvezGvFJzFNOFiR6AVhWRU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org