Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3D3A16C30DB13F7417CAA993CFC459B87CB20D7E.cer
File:                     3D3A16C30DB13F7417CAA993CFC459B87CB20D7E.cer (raw, json)
Hash identifier:          4lghszQg43XJOrgKHS1id4kk+alYl47t8Avmf/VY7/k=
Subject key identifier:   3D:3A:16:C3:0D:B1:3F:74:17:CA:A9:93:CF:C4:59:B8:7C:B2:0D:7E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       16D486FD394739481585973C09C586B6F5D29FA1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/3D3A16C30DB13F7417CAA993CFC459B87CB20D7E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 27 Aug 2023 15:19:38 +0000
Certificate not after:    Sun 25 Aug 2024 15:24:38 +0000
Subordinate resources:    AS: 269153
                          IP: 45.180.236.0/22
                          IP: 2804:6038::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d4:86:fd:39:47:39:48:15:85:97:3c:09:c5:86:b6:f5:d2:9f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 27 15:19:38 2023 GMT
            Not After : Aug 25 15:24:38 2024 GMT
        Subject: CN=3D3A16C30DB13F7417CAA993CFC459B87CB20D7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:88:19:b4:cb:f6:8f:59:09:4f:6e:a6:75:a8:
                    a4:88:ef:85:34:aa:7b:1b:7d:06:08:28:29:12:a8:
                    df:7c:5b:b5:c4:28:3e:dd:ea:a5:9e:a8:e3:e5:34:
                    0f:07:e4:a0:a8:5b:2a:30:7a:c0:61:6f:47:0f:63:
                    63:89:92:84:4b:6b:b7:61:ed:17:b0:56:ba:f4:12:
                    bf:d8:bf:23:84:74:aa:d8:66:9b:9a:59:d1:b6:69:
                    63:16:b4:99:45:d1:a0:6f:d4:f0:8e:fe:65:8a:15:
                    9a:1d:2a:87:a6:1f:4e:bf:04:bb:95:6d:8b:22:8b:
                    1e:06:8c:98:d5:6c:20:46:82:b4:ca:f8:25:4c:a9:
                    6c:16:3e:d1:22:9d:68:be:13:7f:79:48:7c:dc:73:
                    17:a5:cb:78:4f:fb:72:ab:01:9e:2a:17:93:16:09:
                    38:81:54:55:36:bc:78:2a:9e:eb:6e:d7:bf:0c:e5:
                    26:57:64:7e:61:e0:07:2a:2b:b4:6e:1f:ba:ba:42:
                    a0:ef:51:b6:20:d8:0f:2e:80:a5:1e:93:91:3c:49:
                    21:9d:41:fb:c0:26:f4:3f:8b:bf:7c:21:f1:94:45:
                    33:cc:f5:4e:c0:1c:8f:0e:12:9c:3a:64:1a:5a:37:
                    73:70:66:cb:90:ac:40:6d:65:05:45:1e:4d:4c:7f:
                    33:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3D:3A:16:C3:0D:B1:3F:74:17:CA:A9:93:CF:C4:59:B8:7C:B2:0D:7E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/3D3A16C30DB13F7417CAA993CFC459B87CB20D7E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.236.0/22
                IPv6:
                  2804:6038::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269153

    Signature Algorithm: sha256WithRSAEncryption
         15:39:f1:87:34:54:bb:3c:93:2f:a1:46:d4:68:1a:14:79:3b:
         57:bf:6e:db:0a:d9:38:bd:ba:54:98:5b:d2:b1:f7:a8:da:9f:
         37:ad:33:a9:dd:45:7f:ef:0b:56:e6:08:e4:a7:d4:a3:b2:96:
         88:f6:ce:63:82:ab:02:76:3e:bd:aa:58:a1:28:2a:3d:06:db:
         ab:92:a4:f2:cc:c3:0b:48:cf:86:a5:30:d5:93:d2:c6:ab:7b:
         59:d9:df:4f:cd:74:52:87:a7:01:17:b0:3a:bc:3c:a8:0f:b3:
         0b:d9:5a:db:2a:46:86:10:2e:0c:2c:d7:33:22:1d:df:3a:e8:
         65:6c:6b:eb:f8:75:a6:48:fd:e6:09:3e:69:1d:a9:98:88:1b:
         d2:a8:85:e7:94:ba:12:b7:aa:70:e9:4d:7b:0a:31:c7:b1:15:
         6c:fe:7b:79:58:38:bc:28:15:2e:f4:c8:54:9c:79:18:47:e8:
         3f:f8:ae:7c:96:f7:de:4a:97:a8:8d:62:f9:e0:32:58:71:87:
         67:7e:13:f1:8d:83:71:11:46:1e:8f:a2:de:a5:45:59:2e:61:
         92:78:a4:bc:2a:29:43:0a:4b:bc:3c:48:fe:e1:f8:6c:25:45:
         8e:0e:df:54:0e:a2:cf:e1:c4:65:62:94:a5:34:fa:18:68:85:
         b9:0c:b3:43
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUFtSG/TlHOUgVhZc8CcWGtvXSn6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MjcxNTE5MzhaFw0yNDA4MjUxNTI0MzhaMDMxMTAvBgNV
BAMTKDNEM0ExNkMzMERCMTNGNzQxN0NBQTk5M0NGQzQ1OUI4N0NCMjBEN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3iBm0y/aPWQlPbqZ1qKSI74U0
qnsbfQYIKCkSqN98W7XEKD7d6qWeqOPlNA8H5KCoWyowesBhb0cPY2OJkoRLa7dh
7RewVrr0Er/YvyOEdKrYZpuaWdG2aWMWtJlF0aBv1PCO/mWKFZodKoemH06/BLuV
bYsiix4GjJjVbCBGgrTK+CVMqWwWPtEinWi+E395SHzccxely3hP+3KrAZ4qF5MW
CTiBVFU2vHgqnutu178M5SZXZH5h4AcqK7RuH7q6QqDvUbYg2A8ugKUek5E8SSGd
QfvAJvQ/i798IfGURTPM9U7AHI8OEpw6ZBpaN3NwZsuQrEBtZQVFHk1MfzMvAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ9OhbDDbE/dBfK
qZPPxFm4fLINfjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HclpYemZ3YTJQMWlDMlU2ZU1NWUZTVWtCcmZDNENzYlVS
NndBMlBUVlpBaC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vR3JaWHpmd2EyUDFpQzJVNmVNTVlGU1VrQnJmQzRDc2JV
UjZ3QTJQVFZaQWgvMC8zRDNBMTZDMzBEQjEzRjc0MTdDQUE5OTNDRkM0NTlCODdD
QjIwRDdFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIttOwwDQQCAAIwBwMF
ACgEYDgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBthMA0GCSqGSIb3DQEBCwUA
A4IBAQAVOfGHNFS7PJMvoUbUaBoUeTtXv27bCtk4vbpUmFvSsfeo2p83rTOp3UV/
7wtW5gjkp9SjspaI9s5jgqsCdj69qlihKCo9BturkqTyzMMLSM+GpTDVk9LGq3tZ
2d9PzXRSh6cBF7A6vDyoD7ML2VrbKkaGEC4MLNczIh3fOuhlbGvr+HWmSP3mCT5p
HamYiBvSqIXnlLoSt6pw6U17CjHHsRVs/nt5WDi8KBUu9MhUnHkYR+g/+K58lvfe
SpeojWL54DJYcYdnfhPxjYNxEUYej6LepUVZLmGSeKS8KilDCku8PEj+4fhsJUWO
Dt9UDqLP4cRlYpSlNPoYaIW5DLND
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org