Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3EAA813ED949CBA4151156272AF89AA7E58B6CDB.cer
File:                     3EAA813ED949CBA4151156272AF89AA7E58B6CDB.cer (raw, json)
Hash identifier:          3teGysaTV8JHCfd92SYneQdCmfQhSd7aRxpGJTm8qiM=
Subject key identifier:   3E:AA:81:3E:D9:49:CB:A4:15:11:56:27:2A:F8:9A:A7:E5:8B:6C:DB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       02C89D2082911D74F8F6B2F1101A1CB700A81CF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3EAA813ED949CBA4151156272AF89AA7E58B6CDB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Sep 2022 19:45:14 +0000
Certificate not after:    Tue 19 Sep 2023 19:50:14 +0000
Subordinate resources:    AS: 263922
                          IP: 138.219.96.0/22
                          IP: 2804:27c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c8:9d:20:82:91:1d:74:f8:f6:b2:f1:10:1a:1c:b7:00:a8:1c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 20 19:45:14 2022 GMT
            Not After : Sep 19 19:50:14 2023 GMT
        Subject: CN=3EAA813ED949CBA4151156272AF89AA7E58B6CDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f2:96:7d:41:cf:0f:d6:2a:c3:3e:c3:db:f3:
                    35:45:da:d7:58:56:90:20:6a:80:91:33:fc:9c:cb:
                    4f:26:40:34:14:4d:f1:e4:ef:1f:57:9c:31:cd:20:
                    1a:67:ca:27:50:1a:11:b9:e5:b7:44:de:98:d0:d4:
                    08:79:18:ef:48:d9:30:96:b1:a2:f3:db:6a:19:ed:
                    02:7b:24:ac:5f:0e:16:b6:29:4d:d3:de:f2:4f:65:
                    9f:80:af:f7:9d:c1:0b:f9:c4:19:90:05:97:fd:4f:
                    6c:d1:35:d2:b2:e5:a0:4e:ca:97:a8:af:59:15:8a:
                    53:57:d9:7b:d6:91:c4:13:bc:ec:ac:d4:68:b7:c9:
                    0d:4c:69:71:55:ad:9e:e7:e2:d9:2e:be:85:b5:aa:
                    0e:ce:48:68:85:f0:8d:dd:18:cf:24:90:7d:8f:22:
                    4e:f3:24:ee:54:c1:57:31:c3:8e:72:df:5d:a0:e9:
                    5a:bd:1c:44:d5:12:2e:27:a2:da:02:56:00:6c:26:
                    19:50:02:5e:a0:21:cd:d3:37:7a:76:e1:92:5e:4a:
                    f1:1f:1c:d8:b9:70:dc:5b:21:69:b4:0d:e8:3f:4b:
                    e3:7b:28:e6:89:1f:1b:b2:c4:67:71:a7:79:52:bd:
                    23:05:cb:e6:ab:27:13:4c:71:71:bd:ce:c4:65:d5:
                    6c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:AA:81:3E:D9:49:CB:A4:15:11:56:27:2A:F8:9A:A7:E5:8B:6C:DB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3EAA813ED949CBA4151156272AF89AA7E58B6CDB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.96.0/22
                IPv6:
                  2804:27c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263922

    Signature Algorithm: sha256WithRSAEncryption
         92:8a:87:ab:b4:c3:94:4a:c9:e0:83:e5:73:ee:81:3d:9e:a9:
         54:06:39:a4:53:61:b1:0e:99:af:99:83:6c:dd:35:32:9c:3f:
         22:a2:a4:23:f5:6d:9a:19:8d:02:75:9a:32:4d:59:96:0c:d1:
         e3:89:ff:a2:64:b4:60:bf:06:f1:9b:46:13:dc:55:de:c0:c3:
         a3:2a:af:82:88:ad:09:80:c3:42:e2:9d:36:95:a2:00:19:e6:
         93:69:79:4e:45:16:97:ed:54:83:ea:6f:ea:53:cf:b5:92:0e:
         32:a9:de:a8:2c:08:4c:09:20:09:01:89:d8:98:eb:b6:61:61:
         98:09:18:4d:5c:a2:b3:e0:95:ae:e8:cd:a2:e2:7d:fe:a0:90:
         bb:8d:81:ee:57:ab:28:49:4b:49:1c:25:91:95:8a:b5:48:5e:
         11:db:8a:fe:39:a2:eb:05:a9:3f:fa:7a:aa:71:19:0d:cf:9c:
         ff:b5:c9:ba:1a:85:6b:26:15:d9:32:7b:13:ab:ed:a9:cc:ae:
         6f:e8:f4:77:49:a0:58:6a:0e:bc:c2:52:cc:74:38:af:14:f6:
         d7:00:01:71:44:e9:0f:29:fe:dc:06:31:3d:ea:3f:61:e3:be:
         4d:db:fe:dd:3a:86:98:5f:2e:dd:37:93:08:65:67:31:fd:60:
         52:07:32:a5
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUAsidIIKRHXT49rLxEBoctwCoHPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA5MjAxOTQ1MTRaFw0yMzA5MTkxOTUwMTRaMDMxMTAvBgNV
BAMTKDNFQUE4MTNFRDk0OUNCQTQxNTExNTYyNzJBRjg5QUE3RTU4QjZDREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa8pZ9Qc8P1irDPsPb8zVF2tdY
VpAgaoCRM/ycy08mQDQUTfHk7x9XnDHNIBpnyidQGhG55bdE3pjQ1Ah5GO9I2TCW
saLz22oZ7QJ7JKxfDha2KU3T3vJPZZ+Ar/edwQv5xBmQBZf9T2zRNdKy5aBOypeo
r1kVilNX2XvWkcQTvOys1Gi3yQ1MaXFVrZ7n4tkuvoW1qg7OSGiF8I3dGM8kkH2P
Ik7zJO5UwVcxw45y312g6Vq9HETVEi4notoCVgBsJhlQAl6gIc3TN3p24ZJeSvEf
HNi5cNxbIWm0Deg/S+N7KOaJHxuyxGdxp3lSvSMFy+arJxNMcXG9zsRl1WzFAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+qoE+2UnLpBUR
Vicq+Jqn5Yts2zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9KQjl5dFlHWFdVTnZWYkR3dkFqdnNBc2cxVGEybldCeXhB
R2lXY1dYdlBWNi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9KQjl5dFlHWFdVTnZWYkR3dkFqdnNBc2cxVGEybldCeXhB
R2lXY1dYdlBWNi8wLzNFQUE4MTNFRDk0OUNCQTQxNTExNTYyNzJBRjg5QUE3RTU4
QjZDREIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAorbYDANBAIAAjAHAwUA
KAQnyDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBvIwDQYJKoZIhvcNAQELBQAD
ggEBAJKKh6u0w5RKyeCD5XPugT2eqVQGOaRTYbEOma+Zg2zdNTKcPyKipCP1bZoZ
jQJ1mjJNWZYM0eOJ/6JktGC/BvGbRhPcVd7Aw6Mqr4KIrQmAw0LinTaVogAZ5pNp
eU5FFpftVIPqb+pTz7WSDjKp3qgsCEwJIAkBidiY67ZhYZgJGE1corPgla7ozaLi
ff6gkLuNge5XqyhJS0kcJZGVirVIXhHbiv45ousFqT/6eqpxGQ3PnP+1yboahWsm
FdkyexOr7anMrm/o9HdJoFhqDrzCUsx0OK8U9tcAAXFE6Q8p/twGMT3qP2Hjvk3b
/t06hphfLt03kwhlZzH9YFIHMqU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org