Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.cer
File:                     3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.cer (raw, json)
Hash identifier:          auCMq9SHCZNh+ldA/v/+mJcZqtYIUkmohV93yFGOpQ4=
Subject key identifier:   3E:30:AF:F4:F0:E3:80:35:FE:9F:FD:3E:B9:7E:17:66:73:94:FE:49
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       743B7300B422CB291304438D58196448AEA3EAAE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Oct 2023 18:35:05 +0000
Certificate not after:    Thu 03 Oct 2024 18:40:05 +0000
Subordinate resources:    AS: 263380
                          IP: 177.74.112.0/21
                          IP: 2804:1540::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:3b:73:00:b4:22:cb:29:13:04:43:8d:58:19:64:48:ae:a3:ea:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  5 18:35:05 2023 GMT
            Not After : Oct  3 18:40:05 2024 GMT
        Subject: CN=3E30AFF4F0E38035FE9FFD3EB97E17667394FE49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:64:3c:6b:76:59:d3:45:d7:70:cc:b2:bf:
                    ba:8c:ef:17:c2:27:b8:57:80:1e:ae:bc:45:0f:a3:
                    f2:db:b0:90:3e:c0:b3:09:4d:01:bb:f2:88:ea:c8:
                    05:3f:11:bb:7b:d7:9e:a3:06:03:82:88:cf:59:bc:
                    5b:3e:97:8b:a5:3d:45:16:7a:d8:ce:8c:82:43:1d:
                    95:45:89:24:31:27:50:12:ef:20:5b:30:a7:35:d4:
                    c1:87:04:f0:d6:09:bd:d4:fa:83:51:70:b6:03:e9:
                    19:2d:21:c4:bd:ff:f2:a0:a9:53:52:52:2f:21:8c:
                    35:b4:4d:af:41:5f:09:4e:aa:dd:dd:16:49:89:e4:
                    96:26:77:48:58:f9:9c:e1:9a:db:f1:30:79:88:b2:
                    db:dd:2c:ca:1a:39:6a:eb:16:cb:d2:04:ce:da:e4:
                    89:f2:e2:a0:3a:fc:43:a1:fb:f2:0d:e6:eb:e9:7c:
                    35:4a:87:76:43:c4:5b:32:9c:4a:e1:be:be:65:60:
                    84:66:fc:67:bf:51:17:5f:a7:f6:31:22:7b:d2:07:
                    fb:87:3f:12:49:df:aa:eb:42:8a:98:3b:63:7c:5c:
                    77:ce:43:d4:7c:2a:bb:f6:c7:0b:96:3d:1d:b8:b8:
                    f1:0f:4b:3f:48:8e:47:d6:17:89:6a:6a:f7:20:2d:
                    34:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:30:AF:F4:F0:E3:80:35:FE:9F:FD:3E:B9:7E:17:66:73:94:FE:49
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DEK4HEDtChopfPzMEWbFfT84vw9TZBvAiFgzyKiQ8PFr/0/3E30AFF4F0E38035FE9FFD3EB97E17667394FE49.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.112.0/21
                IPv6:
                  2804:1540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263380

    Signature Algorithm: sha256WithRSAEncryption
         12:1d:59:f9:0b:01:6c:2c:d3:ce:8e:1c:40:83:82:65:a2:ae:
         f4:f0:75:51:23:7a:f6:ac:a2:3b:cc:f9:fa:40:3a:9f:b9:0d:
         20:47:b3:9a:44:9a:86:3f:bb:a6:88:ba:7b:b2:a1:38:03:a1:
         f9:e2:c8:27:10:d6:2d:d6:1f:a3:b3:dd:15:99:9f:1e:82:77:
         8c:68:9b:dc:03:49:7b:e4:75:29:96:09:35:b0:50:e5:01:1d:
         1e:9f:bd:29:1d:da:13:05:f8:23:db:9f:73:32:16:df:d0:6e:
         a3:7b:4a:81:4b:3d:ed:80:29:bc:88:6e:16:cb:1e:e0:fc:93:
         d1:f0:36:ea:11:c3:66:2e:c1:61:e8:e3:fd:7b:e3:c1:e0:58:
         7a:2e:c7:ee:b5:05:8c:55:98:95:54:16:a5:e6:e2:b3:bd:62:
         67:27:82:f1:4b:5c:ea:52:ab:bc:b4:17:6c:64:6f:cc:5b:0a:
         5c:27:98:db:55:59:4a:af:23:a9:84:ad:b9:f5:68:d1:9a:e6:
         eb:33:48:59:df:25:a0:e5:1b:9d:6f:8c:b6:24:e4:eb:29:38:
         ff:08:79:8f:73:25:da:1b:7c:ba:bd:7f:31:ae:86:b3:d7:04:
         39:e8:89:b4:2d:d6:9c:58:e4:34:17:0c:02:54:bf:ad:c1:36:
         07:4e:68:12
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUdDtzALQiyykTBEONWBlkSK6j6q4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMDUxODM1MDVaFw0yNDEwMDMxODQwMDVaMDMxMTAvBgNV
BAMTKDNFMzBBRkY0RjBFMzgwMzVGRTlGRkQzRUI5N0UxNzY2NzM5NEZFNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzL2Q8a3ZZ00XXcMyyv7qM7xfC
J7hXgB6uvEUPo/LbsJA+wLMJTQG78ojqyAU/Ebt7156jBgOCiM9ZvFs+l4ulPUUW
etjOjIJDHZVFiSQxJ1AS7yBbMKc11MGHBPDWCb3U+oNRcLYD6RktIcS9//KgqVNS
Ui8hjDW0Ta9BXwlOqt3dFkmJ5JYmd0hY+ZzhmtvxMHmIstvdLMoaOWrrFsvSBM7a
5Iny4qA6/EOh+/IN5uvpfDVKh3ZDxFsynErhvr5lYIRm/Ge/URdfp/YxInvSB/uH
PxJJ36rrQoqYO2N8XHfOQ9R8Krv2xwuWPR24uPEPSz9IjkfWF4lqavcgLTRtAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+MK/08OOANf6f
/T65fhdmc5T+STAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ERUs0SEVEdENob3BmUHpNRVdiRmZUODR2dzlUWkJ2QWlG
Z3p5S2lROFBGci8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ERUs0SEVEdENob3BmUHpNRVdiRmZUODR2dzlUWkJ2QWlG
Z3p5S2lROFBGci8wLzNFMzBBRkY0RjBFMzgwMzVGRTlGRkQzRUI5N0UxNzY2NzM5
NEZFNDkubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA7FKcDANBAIAAjAHAwUA
KAQVQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBNQwDQYJKoZIhvcNAQELBQAD
ggEBABIdWfkLAWws086OHECDgmWirvTwdVEjevasojvM+fpAOp+5DSBHs5pEmoY/
u6aIunuyoTgDofniyCcQ1i3WH6Oz3RWZnx6Cd4xom9wDSXvkdSmWCTWwUOUBHR6f
vSkd2hMF+CPbn3MyFt/QbqN7SoFLPe2AKbyIbhbLHuD8k9HwNuoRw2YuwWHo4/17
48HgWHoux+61BYxVmJVUFqXm4rO9YmcngvFLXOpSq7y0F2xkb8xbClwnmNtVWUqv
I6mErbn1aNGa5uszSFnfJaDlG51vjLYk5OspOP8IeY9zJdobfLq9fzGuhrPXBDno
ibQt1pxY5DQXDAJUv63BNgdOaBI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org