Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.cer
File:                     3F0A020836A7712EC0C3C17FC164D37F5AB5E703.cer (raw, json)
Hash identifier:          f/yFFVf0vLia1hkeIJPNZu/ON9rA3N9lW+5OO7Ar/mk=
Subject key identifier:   3F:0A:02:08:36:A7:71:2E:C0:C3:C1:7F:C1:64:D3:7F:5A:B5:E7:03
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E600C4A46549BB934021335AB67177BFC35A90B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Jan 2024 07:55:48 +0000
Certificate not after:    Thu 09 Jan 2025 08:00:48 +0000
Subordinate resources:    AS: 262343
                          IP: 143.255.124.0/22
                          IP: 177.126.128.0/20
                          IP: 2804:80c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:60:0c:4a:46:54:9b:b9:34:02:13:35:ab:67:17:7b:fc:35:a9:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 11 07:55:48 2024 GMT
            Not After : Jan  9 08:00:48 2025 GMT
        Subject: CN=3F0A020836A7712EC0C3C17FC164D37F5AB5E703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c2:3b:99:f5:13:7a:59:4a:32:2a:d2:91:99:
                    6e:d5:b5:48:55:bd:84:ef:10:e9:44:99:a8:bf:f8:
                    c3:5a:c4:ed:f2:9a:d9:41:cb:f7:c1:ea:4a:6e:45:
                    29:19:d2:8b:13:89:11:7f:ad:51:9d:ad:93:04:74:
                    91:b9:a9:08:7b:54:f4:8d:69:3b:54:3b:17:21:ab:
                    7a:d7:73:bf:51:d8:f0:d1:f0:22:8c:8e:ea:c0:44:
                    c6:b8:bf:ec:25:3e:9a:fb:98:d9:59:a1:8c:c6:54:
                    55:35:33:e6:3d:db:2b:93:69:5d:b9:be:53:2d:ae:
                    2b:61:fe:36:18:74:aa:5d:0d:ce:cc:05:f5:86:ca:
                    a7:4f:43:08:53:cc:6d:cc:41:1c:69:cb:f2:9a:55:
                    51:a5:79:31:2b:60:7e:3b:1d:fd:61:94:cb:40:9b:
                    d0:59:88:5f:47:b1:0b:5b:1e:fa:88:97:2d:1f:34:
                    6d:32:02:82:a2:d6:ba:65:56:90:79:a9:fd:b8:78:
                    94:e2:a1:03:98:61:c5:8d:4f:ae:b0:db:bc:e0:43:
                    cc:fd:b5:75:0e:7f:e9:2a:24:70:4e:25:e2:3f:90:
                    00:91:39:35:f1:cf:08:04:7b:6c:df:b9:d3:d6:6c:
                    f4:1a:39:b4:b5:6b:69:2a:31:9c:8e:47:27:c7:0f:
                    25:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:0A:02:08:36:A7:71:2E:C0:C3:C1:7F:C1:64:D3:7F:5A:B5:E7:03
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/1/3F0A020836A7712EC0C3C17FC164D37F5AB5E703.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.124.0/22
                  177.126.128.0/20
                IPv6:
                  2804:80c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262343

    Signature Algorithm: sha256WithRSAEncryption
         a5:14:4f:11:4e:73:6c:7d:2e:c3:3b:0d:3e:91:34:70:25:be:
         46:3f:1a:25:12:90:ed:35:33:13:8e:44:10:d0:71:a1:d2:a8:
         08:3b:67:b1:50:02:28:90:80:0d:fe:58:e7:f3:58:0b:e2:69:
         df:b9:66:1a:58:c9:bc:1c:76:77:c1:9d:95:c9:6c:fd:3b:ee:
         97:f6:d9:9e:ba:7b:f1:7c:d8:be:a8:a2:40:fc:fa:53:fe:ec:
         89:89:a4:5a:f6:bd:b9:73:35:ae:2e:fe:55:83:01:22:9a:7b:
         8f:9f:a5:f4:f6:db:0a:a3:a4:d7:dd:36:f7:ea:ae:c2:80:fd:
         ee:f8:8b:1b:e3:44:d2:e1:63:93:2c:86:dd:cb:de:11:a3:d6:
         28:f7:7a:cd:50:73:cc:0f:f2:d4:37:cc:07:e8:de:55:e1:83:
         88:f8:d1:4c:1e:2e:69:ae:41:db:70:a2:86:3d:4e:ce:d4:3b:
         0a:e4:f3:b5:fd:64:a8:84:c8:47:5b:68:34:d5:a6:a0:1b:0b:
         22:85:e8:26:12:4b:0e:0b:c5:9d:a8:e9:73:30:79:d2:7c:de:
         bd:a1:1f:aa:c5:48:f8:ed:2f:33:bb:7b:a5:db:40:e9:48:f4:
         bc:33:11:02:f2:92:1c:80:b7:e4:e6:00:12:fd:77:ad:e1:1a:
         2a:82:5a:d8
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUHmAMSkZUm7k0AhM1q2cXe/w1qQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMTEwNzU1NDhaFw0yNTAxMDkwODAwNDhaMDMxMTAvBgNV
BAMTKDNGMEEwMjA4MzZBNzcxMkVDMEMzQzE3RkMxNjREMzdGNUFCNUU3MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvwjuZ9RN6WUoyKtKRmW7VtUhV
vYTvEOlEmai/+MNaxO3ymtlBy/fB6kpuRSkZ0osTiRF/rVGdrZMEdJG5qQh7VPSN
aTtUOxchq3rXc79R2PDR8CKMjurARMa4v+wlPpr7mNlZoYzGVFU1M+Y92yuTaV25
vlMtrith/jYYdKpdDc7MBfWGyqdPQwhTzG3MQRxpy/KaVVGleTErYH47Hf1hlMtA
m9BZiF9HsQtbHvqIly0fNG0yAoKi1rplVpB5qf24eJTioQOYYcWNT66w27zgQ8z9
tXUOf+kqJHBOJeI/kACROTXxzwgEe2zfudPWbPQaObS1a2kqMZyORyfHDyWnAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/CgIINqdxLsDD
wX/BZNN/WrXnAzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EazM0eGc1QVlqTm4xdlNmWjd6dzRLcnl3elpEOHY2WUU3
eW8zNHZLcFdvai8xMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EazM0eGc1QVlqTm4xdlNmWjd6dzRLcnl3elpEOHY2WUU3
eW8zNHZLcFdvai8xLzNGMEEwMjA4MzZBNzcxMkVDMEMzQzE3RkMxNjREMzdGNUFC
NUU3MDMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAo//fAMEBLF+gDANBAIA
AjAHAwUAKAQIDDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAMcwDQYJKoZIhvcN
AQELBQADggEBAKUUTxFOc2x9LsM7DT6RNHAlvkY/GiUSkO01MxOORBDQcaHSqAg7
Z7FQAiiQgA3+WOfzWAviad+5ZhpYybwcdnfBnZXJbP077pf22Z66e/F82L6ookD8
+lP+7ImJpFr2vblzNa4u/lWDASKae4+fpfT22wqjpNfdNvfqrsKA/e74ixvjRNLh
Y5Msht3L3hGj1ij3es1Qc8wP8tQ3zAfo3lXhg4j40UweLmmuQdtwooY9Ts7UOwrk
87X9ZKiEyEdbaDTVpqAbCyKF6CYSSw4LxZ2o6XMwedJ83r2hH6rFSPjtLzO7e6Xb
QOlI9LwzEQLykhyAt+TmABL9d63hGiqCWtg=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org