Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3E435B6E2F60303497FA9126BF4A8566EC78561B.cer
File:                     3E435B6E2F60303497FA9126BF4A8566EC78561B.cer (raw, json)
Hash identifier:          bZHtQm8MCzo7KaK9Z7IIJDU2DRAb21F09fQVjGuGFwc=
Subject key identifier:   3E:43:5B:6E:2F:60:30:34:97:FA:91:26:BF:4A:85:66:EC:78:56:1B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       29683E169017D6E4FE180D0FE73A343609C715D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/3E435B6E2F60303497FA9126BF4A8566EC78561B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 11 Aug 2023 15:06:35 +0000
Certificate not after:    Fri 09 Aug 2024 15:11:35 +0000
Subordinate resources:    AS: 268492
                          IP: 45.162.4.0/22
                          IP: 2804:5210::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:68:3e:16:90:17:d6:e4:fe:18:0d:0f:e7:3a:34:36:09:c7:15:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 11 15:06:35 2023 GMT
            Not After : Aug  9 15:11:35 2024 GMT
        Subject: CN=3E435B6E2F60303497FA9126BF4A8566EC78561B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6b:33:82:6f:c9:b0:64:da:46:64:ec:af:6f:
                    54:bf:f2:59:fa:45:dc:f6:98:cf:8e:b9:0a:b9:64:
                    70:36:dd:38:37:5f:66:c5:2e:06:61:5a:12:9d:e2:
                    d5:5a:07:67:09:1c:f9:28:67:d6:20:24:55:b3:f9:
                    54:50:47:2c:8e:db:a9:87:2b:96:a9:c3:a9:5a:c3:
                    89:30:94:92:8c:13:b2:61:24:6c:e2:ca:a3:f9:4d:
                    fb:99:fe:bf:47:a7:5e:11:17:55:54:d5:94:fc:aa:
                    61:f6:15:11:3b:9f:9a:60:aa:73:73:e6:dc:02:ea:
                    a0:53:e7:48:6e:cb:e8:39:2f:35:bd:07:8c:e1:8e:
                    a3:cc:c6:e3:fa:aa:d2:ba:2e:4c:d0:4b:4e:46:80:
                    b9:ca:d7:34:1d:8f:85:d2:aa:4f:a8:45:68:ed:e0:
                    25:3e:ea:32:b3:84:a1:19:98:e3:b1:2d:22:a4:b8:
                    f7:63:93:b2:25:02:ed:34:ac:38:26:13:46:70:9d:
                    72:00:93:df:80:6a:ad:61:d5:c6:83:1e:76:ed:db:
                    ef:f2:e5:73:91:7b:b8:72:e5:8a:bf:a2:fc:a1:18:
                    6c:90:24:b2:a6:a1:7f:32:c2:47:22:1a:f8:6e:82:
                    e6:53:aa:76:c5:7b:6d:b9:7c:3e:1e:83:16:e2:0d:
                    67:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:43:5B:6E:2F:60:30:34:97:FA:91:26:BF:4A:85:66:EC:78:56:1B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/3E435B6E2F60303497FA9126BF4A8566EC78561B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.4.0/22
                IPv6:
                  2804:5210::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268492

    Signature Algorithm: sha256WithRSAEncryption
         92:5c:27:1b:41:cb:5f:13:fc:f2:94:24:ca:ef:e2:d1:ac:3b:
         47:92:36:2e:f1:33:dd:00:8a:9a:8f:d6:d6:61:60:5e:b3:7f:
         81:da:03:94:31:e2:25:a7:49:f1:f6:05:96:c7:ea:e8:e2:5c:
         bb:c8:85:36:1f:95:43:4b:fb:32:99:79:2a:57:3c:5a:36:cd:
         31:30:59:21:c8:c6:ed:21:f6:27:27:c1:cd:50:bb:07:08:d8:
         bb:18:fb:ea:0d:73:76:06:36:61:ec:6d:80:2c:8e:9e:b8:74:
         e4:32:b0:0f:8b:b2:f8:7e:77:8b:c6:65:f8:68:d8:a0:e4:e5:
         50:56:68:1d:16:f7:5e:2a:a1:4d:e2:45:f0:eb:b1:da:16:d0:
         6e:43:ed:85:ce:69:8b:95:e0:d1:52:23:e5:75:bc:e0:c5:3f:
         d4:d1:34:2a:c3:71:3f:ad:df:15:85:0e:c4:b8:df:1a:f1:65:
         68:ee:3e:02:a7:fd:31:ea:7b:b1:16:21:06:93:e8:8c:6d:85:
         5c:73:22:89:d4:d3:a2:a7:71:24:7d:6f:ab:d8:39:36:8b:8b:
         ec:46:77:9d:45:4c:09:f0:45:1c:92:ef:9c:8f:4e:41:04:e8:
         c2:59:57:34:eb:9c:1f:23:3f:84:5a:be:cc:48:fe:ec:55:94:
         e8:36:28:96
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUKWg+FpAX1uT+GA0P5zo0NgnHFdkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MTExNTA2MzVaFw0yNDA4MDkxNTExMzVaMDMxMTAvBgNV
BAMTKDNFNDM1QjZFMkY2MDMwMzQ5N0ZBOTEyNkJGNEE4NTY2RUM3ODU2MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGazOCb8mwZNpGZOyvb1S/8ln6
Rdz2mM+OuQq5ZHA23Tg3X2bFLgZhWhKd4tVaB2cJHPkoZ9YgJFWz+VRQRyyO26mH
K5apw6law4kwlJKME7JhJGziyqP5TfuZ/r9Hp14RF1VU1ZT8qmH2FRE7n5pgqnNz
5twC6qBT50huy+g5LzW9B4zhjqPMxuP6qtK6LkzQS05GgLnK1zQdj4XSqk+oRWjt
4CU+6jKzhKEZmOOxLSKkuPdjk7IlAu00rDgmE0ZwnXIAk9+Aaq1h1caDHnbt2+/y
5XORe7hy5Yq/ovyhGGyQJLKmoX8ywkciGvhuguZTqnbFe225fD4egxbiDWcjAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+Q1tuL2AwNJf6
kSa/SoVm7HhWGzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Gc2FxaTdvWmFEN1htUjUxYkxTUEZlVUhHeTZqZkUzY2dK
RFBWYmpNMUpqMS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRnNhcWk3b1phRDdYbVI1MWJMU1BGZVVIR3k2amZFM2Nn
SkRQVmJqTTFKajEvMC8zRTQzNUI2RTJGNjAzMDM0OTdGQTkxMjZCRjRBODU2NkVD
Nzg1NjFCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItogQwDQQCAAIwBwMF
ACgEUhAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBjMMA0GCSqGSIb3DQEBCwUA
A4IBAQCSXCcbQctfE/zylCTK7+LRrDtHkjYu8TPdAIqaj9bWYWBes3+B2gOUMeIl
p0nx9gWWx+ro4ly7yIU2H5VDS/symXkqVzxaNs0xMFkhyMbtIfYnJ8HNULsHCNi7
GPvqDXN2BjZh7G2ALI6euHTkMrAPi7L4fneLxmX4aNig5OVQVmgdFvdeKqFN4kXw
67HaFtBuQ+2FzmmLleDRUiPldbzgxT/U0TQqw3E/rd8VhQ7EuN8a8WVo7j4Cp/0x
6nuxFiEGk+iMbYVccyKJ1NOip3EkfW+r2Dk2i4vsRnedRUwJ8EUcku+cj05BBOjC
WVc065wfIz+EWr7MSP7sVZToNiiW
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org