Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3F0705FC4127F9D4667DD917703327B2B41A215A.cer
File:                     3F0705FC4127F9D4667DD917703327B2B41A215A.cer (raw, json)
Hash identifier:          C3qjWlKGyIdico0hyzvpvrjfI8T5yWCiUrSa1ZiINFY=
Subject key identifier:   3F:07:05:FC:41:27:F9:D4:66:7D:D9:17:70:33:27:B2:B4:1A:21:5A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       699B0323D65533F37E359C9E19E17F2DC38099C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/0/3F0705FC4127F9D4667DD917703327B2B41A215A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 04 Nov 2023 12:50:40 +0000
Certificate not after:    Sat 02 Nov 2024 12:55:40 +0000
Subordinate resources:    AS: 263104
                          IP: 179.124.48.0/21
                          IP: 2804:16dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:9b:03:23:d6:55:33:f3:7e:35:9c:9e:19:e1:7f:2d:c3:80:99:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  4 12:50:40 2023 GMT
            Not After : Nov  2 12:55:40 2024 GMT
        Subject: CN=3F0705FC4127F9D4667DD917703327B2B41A215A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:84:4f:08:6a:1a:fb:02:6b:81:fd:85:0d:c6:
                    16:9d:86:be:d9:7e:05:25:ff:9a:fc:3f:07:27:02:
                    d4:bd:59:26:ae:d2:11:ca:8a:d2:1f:9a:13:4a:81:
                    b5:d0:02:a2:2a:d8:04:1f:07:3e:84:c1:e3:72:bb:
                    68:0f:a8:12:9a:1c:e6:16:46:ca:4f:60:3b:cc:b3:
                    c6:e1:19:c0:ea:06:be:3f:f2:31:9a:80:f3:24:3f:
                    3b:e5:a4:53:ee:e1:ab:f2:68:94:61:84:07:46:ce:
                    74:27:26:b9:72:26:61:25:9c:62:cf:7a:ff:2d:5a:
                    f6:d6:ef:63:78:43:b1:8f:2b:59:8d:b7:a2:fc:2a:
                    5e:96:00:99:f2:c8:d4:21:d0:f4:9d:b4:df:a0:ee:
                    b4:9a:0f:f8:7f:23:eb:a6:be:27:b7:a3:eb:0c:4d:
                    34:8b:71:9a:f0:26:7e:bb:cd:b1:6d:0f:d5:c8:73:
                    60:92:72:53:7f:98:8b:3d:67:ab:85:53:a1:b6:e0:
                    b4:87:93:70:ff:8b:ad:66:71:e1:74:9b:9d:0f:31:
                    8c:f1:05:ce:41:15:8c:ef:b2:9c:4f:d5:90:fe:e6:
                    8b:91:6b:17:d5:0f:0a:c2:5f:e5:00:ac:22:21:7b:
                    21:9e:41:8f:b0:07:b5:1a:73:2e:6d:09:56:6e:92:
                    9c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:07:05:FC:41:27:F9:D4:66:7D:D9:17:70:33:27:B2:B4:1A:21:5A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/0/3F0705FC4127F9D4667DD917703327B2B41A215A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.48.0/21
                IPv6:
                  2804:16dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263104

    Signature Algorithm: sha256WithRSAEncryption
         ab:e6:ce:7f:26:b4:7e:60:08:84:6d:52:4f:08:3c:17:8f:77:
         25:2d:4e:39:0e:e6:d3:4e:cd:10:c1:2f:66:49:72:61:de:01:
         14:98:69:7f:07:04:ec:eb:bf:cb:05:6d:e5:e9:a3:34:75:a5:
         6f:fc:dd:41:4a:e6:8f:ff:77:aa:52:ce:ee:b4:0c:bd:5f:0e:
         65:f7:0b:99:3f:30:9d:76:50:cc:4c:3a:a8:39:f8:ef:29:a2:
         90:69:ac:cb:04:8e:f0:9a:2d:b0:c8:6b:8d:c0:6c:63:f5:4f:
         49:a3:ab:a5:74:78:c3:f8:a4:7a:b9:a6:f3:74:0d:8b:7e:aa:
         3f:66:69:93:9b:04:34:c0:34:ce:da:ef:d4:fb:e9:b6:5a:ab:
         82:20:a6:11:1d:10:3e:23:c7:3e:4e:33:ec:67:6a:f9:cd:5a:
         7d:d8:9e:04:6a:2f:84:62:94:52:47:06:a0:fc:6c:72:15:4e:
         71:42:13:0a:ac:62:09:f8:5c:10:fc:cd:69:fc:9e:a3:cb:6e:
         c6:1c:d9:e4:b7:c1:4d:c0:ef:95:63:08:95:98:33:ba:06:0a:
         92:e9:d7:af:98:6d:fa:32:73:e3:e3:65:52:54:53:e2:9f:5a:
         31:8b:a9:e6:50:55:70:fc:4f:ac:9f:bc:83:0d:10:fe:e6:96:
         48:a4:90:a2
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUaZsDI9ZVM/N+NZyeGeF/LcOAmcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMDQxMjUwNDBaFw0yNDExMDIxMjU1NDBaMDMxMTAvBgNV
BAMTKDNGMDcwNUZDNDEyN0Y5RDQ2NjdERDkxNzcwMzMyN0IyQjQxQTIxNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+hE8Iahr7AmuB/YUNxhadhr7Z
fgUl/5r8PwcnAtS9WSau0hHKitIfmhNKgbXQAqIq2AQfBz6EweNyu2gPqBKaHOYW
RspPYDvMs8bhGcDqBr4/8jGagPMkPzvlpFPu4avyaJRhhAdGznQnJrlyJmElnGLP
ev8tWvbW72N4Q7GPK1mNt6L8Kl6WAJnyyNQh0PSdtN+g7rSaD/h/I+umvie3o+sM
TTSLcZrwJn67zbFtD9XIc2CSclN/mIs9Z6uFU6G24LSHk3D/i61mceF0m50PMYzx
Bc5BFYzvspxP1ZD+5ouRaxfVDwrCX+UArCIheyGeQY+wB7Uacy5tCVZukpxxAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/BwX8QSf51GZ9
2RdwMyeytBohWjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EcXdmakZ1Qlg0a1E0Z01VelJ4MUQ4ZnZLNEtZRmZYWm9O
Rlo2SmE2QXJHci8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRHF3ZmpGdUJYNGtRNGdNVXpSeDFEOGZ2SzRLWUZmWFpv
TkZaNkphNkFyR3IvMC8zRjA3MDVGQzQxMjdGOUQ0NjY3REQ5MTc3MDMzMjdCMkI0
MUEyMTVBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAOzfDAwDQQCAAIwBwMF
ACgEFtwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAPAMA0GCSqGSIb3DQEBCwUA
A4IBAQCr5s5/JrR+YAiEbVJPCDwXj3clLU45DubTTs0QwS9mSXJh3gEUmGl/BwTs
67/LBW3l6aM0daVv/N1BSuaP/3eqUs7utAy9Xw5l9wuZPzCddlDMTDqoOfjvKaKQ
aazLBI7wmi2wyGuNwGxj9U9Jo6uldHjD+KR6uabzdA2Lfqo/ZmmTmwQ0wDTO2u/U
++m2WquCIKYRHRA+I8c+TjPsZ2r5zVp92J4Eai+EYpRSRwag/GxyFU5xQhMKrGIJ
+FwQ/M1p/J6jy27GHNnkt8FNwO+VYwiVmDO6BgqS6devmG36MnPj42VSVFPin1ox
i6nmUFVw/E+sn7yDDRD+5pZIpJCi
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org