Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.cer
File:                     3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.cer (raw, json)
Hash identifier:          z8pEHoHuhD4OprZdL+SpSiFmVS63yVcCloA+muHeBhU=
Subject key identifier:   3C:23:9D:DB:CB:EA:B3:AC:D0:31:4F:00:BE:09:D8:7A:35:40:82:2F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6EF4D74A32CBD4FB0B2DEF9DCB1A904AB2222D56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Mar 2024 23:13:58 +0000
Certificate not after:    Wed 19 Mar 2025 23:18:58 +0000
Subordinate resources:    AS: 272645
                          IP: 201.216.104.0/22
                          IP: 2804:8678::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f4:d7:4a:32:cb:d4:fb:0b:2d:ef:9d:cb:1a:90:4a:b2:22:2d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 20 23:13:58 2024 GMT
            Not After : Mar 19 23:18:58 2025 GMT
        Subject: CN=3C239DDBCBEAB3ACD0314F00BE09D87A3540822F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:32:ba:d6:40:84:91:4c:5b:a1:7a:a3:3f:dc:
                    eb:0d:bc:cc:4d:00:ee:68:b6:5e:ba:89:9f:22:37:
                    76:0d:f9:55:64:da:0c:9d:91:12:40:6c:5a:ea:80:
                    45:ca:4e:82:c3:1e:6c:23:32:05:94:69:9c:46:6f:
                    6e:56:ce:3d:00:ea:c2:8c:32:96:7f:30:0e:a6:73:
                    21:4e:73:ba:e9:17:3d:4e:6d:8b:55:d7:ab:a3:11:
                    df:b7:b8:ff:f5:71:8e:1b:fc:d9:97:5e:94:52:ec:
                    6a:d2:71:92:cb:d0:dd:3d:11:5f:ec:7e:eb:b9:b6:
                    b5:59:63:0b:b2:e2:ee:dd:ea:fb:04:8f:5a:6a:b0:
                    e7:b6:e9:a5:6c:47:46:86:68:c6:85:d4:05:e6:ef:
                    a8:20:52:ec:4a:c2:a7:fc:8c:63:1b:97:8d:48:61:
                    96:1e:69:9d:4d:6d:35:dc:3b:c9:19:8c:77:85:97:
                    d1:41:43:0a:8a:bd:55:16:bc:da:de:e5:16:88:e8:
                    df:d0:15:cb:30:7a:98:30:23:51:33:ec:69:0a:52:
                    d3:63:19:54:83:fa:8e:d0:1d:2f:94:49:1f:09:8b:
                    83:2a:74:76:4e:4d:53:2a:18:c0:d4:b3:08:cf:bf:
                    aa:61:70:3c:6d:8a:08:b1:07:40:bb:43:34:20:86:
                    19:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:23:9D:DB:CB:EA:B3:AC:D0:31:4F:00:BE:09:D8:7A:35:40:82:2F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.104.0/22
                IPv6:
                  2804:8678::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272645

    Signature Algorithm: sha256WithRSAEncryption
         69:29:fa:61:4b:d4:13:7f:d7:a4:fd:45:e1:71:83:cb:8d:b4:
         56:a8:89:3d:2f:1f:28:be:3b:5e:c3:a7:3e:3f:2c:a8:aa:5b:
         a7:fa:11:da:50:02:51:bf:7e:5e:8b:7e:7c:a3:0b:78:ea:21:
         c4:c8:09:54:fc:f4:17:cc:5e:1f:30:a7:69:90:96:20:d7:48:
         4c:9e:bf:4a:bd:3b:43:ac:f8:68:82:5d:0a:75:5d:ca:2c:54:
         ee:42:cc:4a:2c:09:5b:9f:29:02:59:81:6d:57:68:df:da:7b:
         c2:b8:01:af:8f:f6:07:9e:36:2e:50:8d:83:87:c5:26:e5:1c:
         20:50:f0:3b:a8:0b:af:af:80:4d:b8:b4:52:61:d2:91:70:ab:
         2d:a1:82:ca:87:70:01:0a:43:89:b2:cf:0d:64:11:3b:ad:ed:
         ac:de:2e:d0:0a:21:47:0e:11:25:51:99:b5:68:42:0b:00:42:
         a7:ba:3f:bc:0e:26:8f:93:48:e8:c8:86:21:ef:56:8d:8b:b6:
         63:7c:92:30:5d:13:cf:c9:9b:93:23:ad:f0:79:a8:8e:94:7d:
         70:a5:af:22:0d:2b:55:ce:42:ea:48:34:da:ae:3b:00:0f:cd:
         2a:98:86:b6:22:ea:5f:8d:8e:96:d9:30:22:b0:01:fd:0c:48:
         c4:32:32:7a
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUbvTXSjLL1PsLLe+dyxqQSrIiLVYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjAyMzEzNThaFw0yNTAzMTkyMzE4NThaMDMxMTAvBgNV
BAMTKDNDMjM5RERCQ0JFQUIzQUNEMDMxNEYwMEJFMDlEODdBMzU0MDgyMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtMrrWQISRTFuheqM/3OsNvMxN
AO5otl66iZ8iN3YN+VVk2gydkRJAbFrqgEXKToLDHmwjMgWUaZxGb25Wzj0A6sKM
MpZ/MA6mcyFOc7rpFz1ObYtV16ujEd+3uP/1cY4b/NmXXpRS7GrScZLL0N09EV/s
fuu5trVZYwuy4u7d6vsEj1pqsOe26aVsR0aGaMaF1AXm76ggUuxKwqf8jGMbl41I
YZYeaZ1NbTXcO8kZjHeFl9FBQwqKvVUWvNre5RaI6N/QFcswepgwI1Ez7GkKUtNj
GVSD+o7QHS+USR8Ji4MqdHZOTVMqGMDUswjPv6phcDxtigixB0C7QzQghhltAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8I53by+qzrNAx
TwC+Cdh6NUCCLzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85aXpQV1F4ZFFpeVR2YWY3eUpxaHo1ZlhGU3BVUlN3aXVC
VEIxd3NrSFo0Qi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOWl6UFdReGRRaXlUdmFmN3lKcWh6NWZYRlNwVVJTd2l1
QlRCMXdza0haNEIvMC8zQzIzOUREQkNCRUFCM0FDRDAzMTRGMDBCRTA5RDg3QTM1
NDA4MjJGLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALJ2GgwDQQCAAIwBwMF
ACgEhngwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCkFMA0GCSqGSIb3DQEBCwUA
A4IBAQBpKfphS9QTf9ek/UXhcYPLjbRWqIk9Lx8ovjtew6c+Pyyoqlun+hHaUAJR
v35ei358owt46iHEyAlU/PQXzF4fMKdpkJYg10hMnr9KvTtDrPhogl0KdV3KLFTu
QsxKLAlbnykCWYFtV2jf2nvCuAGvj/YHnjYuUI2Dh8Um5RwgUPA7qAuvr4BNuLRS
YdKRcKstoYLKh3ABCkOJss8NZBE7re2s3i7QCiFHDhElUZm1aEILAEKnuj+8DiaP
k0joyIYh71aNi7ZjfJIwXRPPyZuTI63weaiOlH1wpa8iDStVzkLqSDTarjsAD80q
mIa2IupfjY6W2TAisAH9DEjEMjJ6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:23 2024 by rpki-client on console-ams.rpki-client.org