Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3E8280C3FD4D40ED1A9D727BEDC031DB4E6949E7.cer
File:                     3E8280C3FD4D40ED1A9D727BEDC031DB4E6949E7.cer (raw, json)
Hash identifier:          /l7c0WSBIu3ZcWW5s3bvggC2efazRq3TbKOEntPvWVo=
Subject key identifier:   3E:82:80:C3:FD:4D:40:ED:1A:9D:72:7B:ED:C0:31:DB:4E:69:49:E7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       047B447236595C423DC760C4553F0FCB0577C174
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/0/3E8280C3FD4D40ED1A9D727BEDC031DB4E6949E7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Oct 2022 16:05:26 +0000
Certificate not after:    Mon 02 Oct 2023 16:10:26 +0000
Subordinate resources:    AS: 270796
                          IP: 189.36.252.0/22
                          IP: 2804:718c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7b:44:72:36:59:5c:42:3d:c7:60:c4:55:3f:0f:cb:05:77:c1:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  3 16:05:26 2022 GMT
            Not After : Oct  2 16:10:26 2023 GMT
        Subject: CN=3E8280C3FD4D40ED1A9D727BEDC031DB4E6949E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:8d:27:03:b5:80:af:08:ee:48:09:fd:af:
                    f6:94:62:98:98:89:17:55:29:bc:c5:67:eb:77:9f:
                    2b:ba:79:3a:52:2b:ee:fc:d6:5f:e5:68:ba:d9:5a:
                    cd:8b:0c:4c:e1:3a:45:6a:01:a8:61:33:d1:b1:c8:
                    d8:f5:75:a8:8f:29:6e:a4:61:18:ea:70:a6:70:74:
                    52:be:5b:bc:d0:35:52:92:4b:22:1f:b4:d0:01:59:
                    c2:af:d0:00:10:43:08:e8:b9:52:88:a8:95:ba:9a:
                    9e:16:dd:86:b9:d7:17:b2:0b:fa:6a:32:ec:1b:0a:
                    b0:38:18:ab:a4:e3:44:1c:2a:37:f5:d7:b3:03:c2:
                    bd:11:b5:0a:48:ff:44:7e:fe:18:ef:98:20:ed:9f:
                    a4:de:51:ef:e7:79:fb:6e:6d:71:76:f6:81:a1:b2:
                    26:0c:33:ad:1b:2e:fd:d9:3b:a5:a2:5c:7a:a5:5c:
                    c2:8f:88:c4:22:f9:e0:fc:86:1a:00:9c:81:83:e5:
                    24:31:01:99:82:45:b7:78:43:f0:8c:54:ff:4b:1a:
                    26:f9:ba:90:8c:e4:df:72:68:82:6f:89:dc:80:93:
                    00:9e:0c:96:49:04:bf:88:48:cf:2f:5e:a1:9c:69:
                    e5:95:de:8b:7d:a3:93:84:ab:df:45:f9:d0:8c:ee:
                    39:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:82:80:C3:FD:4D:40:ED:1A:9D:72:7B:ED:C0:31:DB:4E:69:49:E7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/0/3E8280C3FD4D40ED1A9D727BEDC031DB4E6949E7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.252.0/22
                IPv6:
                  2804:718c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270796

    Signature Algorithm: sha256WithRSAEncryption
         3e:e7:95:b6:4f:19:00:c6:86:49:8f:ca:a6:d9:16:3d:30:61:
         6b:44:94:f6:43:da:8c:73:2e:74:cc:2e:c6:7f:7c:e6:8f:88:
         96:5c:88:5f:35:bf:55:02:e4:50:e3:26:16:42:0e:a1:d3:0d:
         0e:81:bb:56:a8:03:e8:80:56:55:f7:c3:97:17:c6:83:70:03:
         55:a5:ab:f1:74:ce:d2:c4:35:3f:7c:9a:c1:9f:d3:e6:1a:73:
         b8:ad:b6:e5:4f:0a:37:0e:58:68:d2:d4:47:37:ba:56:9e:0c:
         0e:cc:cb:63:0c:98:07:a3:60:e0:97:b8:42:fb:86:60:19:27:
         91:89:cd:f8:ec:c5:c6:3b:8b:fb:8b:e7:7b:45:06:60:1b:6c:
         97:82:79:e7:23:dc:c2:56:a6:48:2c:7f:10:c7:df:39:01:66:
         08:5d:e5:1a:c7:ab:e5:99:c8:09:5c:c2:54:1c:44:01:25:77:
         d2:78:0f:8d:ac:20:4c:66:67:f6:25:03:87:5d:5c:ef:45:9c:
         d1:17:a6:9b:96:48:5a:92:1f:20:9a:63:1f:22:cb:bc:ce:36:
         1b:b0:46:fd:cf:63:ea:1b:46:cd:7d:47:a8:c6:fc:a1:69:ba:
         b1:9a:9b:bd:fd:f1:db:06:53:3d:d4:e0:66:61:df:20:14:22:
         0a:67:91:d8
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUBHtEcjZZXEI9x2DEVT8PywV3wXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjEwMDMxNjA1MjZaFw0yMzEwMDIxNjEwMjZaMDMxMTAvBgNV
BAMTKDNFODI4MEMzRkQ0RDQwRUQxQTlENzI3QkVEQzAzMURCNEU2OTQ5RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC34o0nA7WArwjuSAn9r/aUYpiY
iRdVKbzFZ+t3nyu6eTpSK+781l/laLrZWs2LDEzhOkVqAahhM9GxyNj1daiPKW6k
YRjqcKZwdFK+W7zQNVKSSyIftNABWcKv0AAQQwjouVKIqJW6mp4W3Ya51xeyC/pq
MuwbCrA4GKuk40QcKjf117MDwr0RtQpI/0R+/hjvmCDtn6TeUe/neftubXF29oGh
siYMM60bLv3ZO6WiXHqlXMKPiMQi+eD8hhoAnIGD5SQxAZmCRbd4Q/CMVP9LGib5
upCM5N9yaIJvidyAkwCeDJZJBL+ISM8vXqGcaeWV3ot9o5OEq99F+dCM7jlHAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+goDD/U1A7Rqd
cnvtwDHbTmlJ5zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81SDJ2N21ONWc3S0JMSDhSdmU1WkdtQm1IZzdNdlJBcW1w
YXQ4ektqcFpjSC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81SDJ2N21ONWc3S0JMSDhSdmU1WkdtQm1IZzdNdlJBcW1w
YXQ4ektqcFpjSC8wLzNFODI4MEMzRkQ0RDQwRUQxQTlENzI3QkVEQzAzMURCNEU2
OTQ5RTcubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAr0k/DANBAIAAjAHAwUA
KARxjDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEIcwwDQYJKoZIhvcNAQELBQAD
ggEBAD7nlbZPGQDGhkmPyqbZFj0wYWtElPZD2oxzLnTMLsZ/fOaPiJZciF81v1UC
5FDjJhZCDqHTDQ6Bu1aoA+iAVlX3w5cXxoNwA1Wlq/F0ztLENT98msGf0+Yac7it
tuVPCjcOWGjS1Ec3ulaeDA7My2MMmAejYOCXuEL7hmAZJ5GJzfjsxcY7i/uL53tF
BmAbbJeCeecj3MJWpkgsfxDH3zkBZghd5RrHq+WZyAlcwlQcRAEld9J4D42sIExm
Z/YlA4ddXO9FnNEXppuWSFqSHyCaYx8iy7zONhuwRv3PY+obRs19R6jG/KFpurGa
m7398dsGUz3U4GZh3yAUIgpnkdg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org