Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3C958A74B2BE394EF1B49956150E93F3CE2F149B.cer
File:                     3C958A74B2BE394EF1B49956150E93F3CE2F149B.cer (raw, json)
Hash identifier:          BUAuO0fbBEP/3vdaeJK4hlServLaTSSQF4dj4BWkrFw=
Subject key identifier:   3C:95:8A:74:B2:BE:39:4E:F1:B4:99:56:15:0E:93:F3:CE:2F:14:9B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       12D22B3A6A19B596B03163A7126F07A7293E3ABF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3C958A74B2BE394EF1B49956150E93F3CE2F149B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Jul 2023 13:13:29 +0000
Certificate not after:    Fri 05 Jul 2024 13:18:29 +0000
Subordinate resources:    AS: 262535
                          IP: 167.249.56.0/22
                          IP: 177.67.240.0/21
                          IP: 177.84.208.0/21
                          IP: 201.159.116.0/22
                          IP: 2804:5b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d2:2b:3a:6a:19:b5:96:b0:31:63:a7:12:6f:07:a7:29:3e:3a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  7 13:13:29 2023 GMT
            Not After : Jul  5 13:18:29 2024 GMT
        Subject: CN=3C958A74B2BE394EF1B49956150E93F3CE2F149B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fb:a5:c8:c9:38:3b:27:b0:50:86:58:ac:de:
                    80:52:8b:07:87:b0:83:dc:dc:70:49:94:72:3c:b8:
                    dc:d4:5b:35:14:8e:49:55:5f:b3:00:02:e0:89:a4:
                    00:7d:97:00:61:b9:c5:2d:d3:0b:73:cd:be:4a:91:
                    bf:b1:b9:57:7a:6d:ab:b6:f4:ca:86:5c:73:b8:a2:
                    6d:d4:a0:4f:f4:8b:ad:01:db:7d:b1:d8:43:ad:87:
                    bd:27:cd:7d:65:fa:e4:47:3f:31:90:0d:1b:4a:0c:
                    9d:dc:fd:7f:b8:9c:31:c5:de:d7:4f:a1:fe:35:22:
                    ca:d8:e7:fd:af:22:c8:6f:de:9d:b7:0c:88:9a:6c:
                    a2:cd:b1:28:64:a6:57:4b:43:d3:9e:f0:83:f1:eb:
                    51:a1:cf:ed:71:c9:d2:7c:58:c1:9f:27:fb:69:14:
                    17:65:d0:54:5f:da:a9:ec:f7:b8:45:70:8e:38:af:
                    09:cb:c1:b7:c0:fc:92:96:58:79:de:33:e1:63:b7:
                    2a:d5:74:e7:e7:0a:a9:13:6b:80:22:88:cc:b9:c2:
                    fc:ec:b5:02:cb:8a:2e:ac:32:8f:6b:ac:31:1d:bd:
                    10:85:53:50:01:be:06:e8:8b:01:61:70:b0:bd:23:
                    d6:b6:5b:e1:a8:69:75:e2:5d:a0:72:a1:fc:8d:55:
                    93:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:95:8A:74:B2:BE:39:4E:F1:B4:99:56:15:0E:93:F3:CE:2F:14:9B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3C958A74B2BE394EF1B49956150E93F3CE2F149B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.56.0/22
                  177.67.240.0/21
                  177.84.208.0/21
                  201.159.116.0/22
                IPv6:
                  2804:5b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262535

    Signature Algorithm: sha256WithRSAEncryption
         18:32:8a:6e:4d:2a:13:eb:ae:ba:c8:1b:24:32:1c:08:fa:d5:
         f3:f2:f5:3b:e5:54:0a:01:62:34:68:6f:ae:65:af:99:9b:2e:
         bb:f7:e5:e1:6b:e7:2c:b2:b5:a9:68:66:89:1a:d5:d3:d4:be:
         7f:4c:ea:75:22:88:b3:4f:da:d7:50:3b:73:55:ed:07:15:85:
         0f:94:b5:01:4f:5a:20:da:35:07:31:54:72:4c:b1:b2:ad:a9:
         b7:8b:bb:a6:7d:85:f0:df:c1:77:30:10:e6:0e:21:62:d0:7b:
         11:f1:ec:40:cb:74:89:e5:83:54:04:d4:1e:71:90:d8:db:f0:
         f3:48:62:2d:c3:c5:83:3d:8a:01:30:44:d5:cc:f9:69:ef:45:
         d8:85:e3:8f:1a:60:a4:19:62:85:38:be:32:1e:71:76:9d:4f:
         12:45:a9:ff:d8:de:cd:f3:65:8f:b3:fc:ce:2d:fa:a0:d0:ee:
         27:39:07:0c:ed:20:60:4c:f5:61:46:4a:3e:e2:44:82:6c:d0:
         aa:e3:3b:67:40:37:c4:0b:2b:a6:6c:ea:45:9e:8c:21:37:06:
         6a:71:89:d5:a8:01:56:53:0d:1a:5b:28:65:95:41:69:c4:96:
         35:6d:c5:4f:1c:0b:27:33:49:47:a2:ed:5e:68:ed:70:92:67:
         fa:b0:3b:31
-----BEGIN CERTIFICATE-----
MIIGIzCCBQugAwIBAgIUEtIrOmoZtZawMWOnEm8Hpyk+Or8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MDcxMzEzMjlaFw0yNDA3MDUxMzE4MjlaMDMxMTAvBgNV
BAMTKDNDOTU4QTc0QjJCRTM5NEVGMUI0OTk1NjE1MEU5M0YzQ0UyRjE0OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW+6XIyTg7J7BQhlis3oBSiweH
sIPc3HBJlHI8uNzUWzUUjklVX7MAAuCJpAB9lwBhucUt0wtzzb5Kkb+xuVd6bau2
9MqGXHO4om3UoE/0i60B232x2EOth70nzX1l+uRHPzGQDRtKDJ3c/X+4nDHF3tdP
of41IsrY5/2vIshv3p23DIiabKLNsShkpldLQ9Oe8IPx61Ghz+1xydJ8WMGfJ/tp
FBdl0FRf2qns97hFcI44rwnLwbfA/JKWWHneM+FjtyrVdOfnCqkTa4AiiMy5wvzs
tQLLii6sMo9rrDEdvRCFU1ABvgboiwFhcLC9I9a2W+GoaXXiXaByofyNVZMpAgMB
AAGjggMtMIIDKTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8lYp0sr45TvG0
mVYVDpPzzi8UmzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FcW0yQW80NW05YjdrckNCb3VRa3JZN1JWOVhXNnBXWnVy
cjFFczVHZ3hyaS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRXFtMkFvNDVtOWI3a3JDQm91UWtyWTdSVjlYVzZwV1p1
cnIxRXM1R2d4cmkvMC8zQzk1OEE3NEIyQkUzOTRFRjFCNDk5NTYxNTBFOTNGM0NF
MkYxNDlCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAKn+TgDBAOxQ/ADBAOx
VNADBALJn3QwDQQCAAIwBwMFACgEBbgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
BAGHMA0GCSqGSIb3DQEBCwUAA4IBAQAYMopuTSoT6666yBskMhwI+tXz8vU75VQK
AWI0aG+uZa+Zmy679+Xha+cssrWpaGaJGtXT1L5/TOp1IoizT9rXUDtzVe0HFYUP
lLUBT1og2jUHMVRyTLGyram3i7umfYXw38F3MBDmDiFi0HsR8exAy3SJ5YNUBNQe
cZDY2/DzSGItw8WDPYoBMETVzPlp70XYheOPGmCkGWKFOL4yHnF2nU8SRan/2N7N
82WPs/zOLfqg0O4nOQcM7SBgTPVhRko+4kSCbNCq4ztnQDfECyumbOpFnowhNwZq
cYnVqAFWUw0aWyhllUFpxJY1bcVPHAsnM0lHou1eaO1wkmf6sDsx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:23 2024 by rpki-client on console-ams.rpki-client.org