Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A3948DF92873B3152952F292409AE5A8EE92371C.cer
File:                     A3948DF92873B3152952F292409AE5A8EE92371C.cer (raw, json)
Hash identifier:          4jB5UU9kylU8NRAEgAKYwFWRpRxYvGecumj7dNFF+Mk=
Subject key identifier:   A3:94:8D:F9:28:73:B3:15:29:52:F2:92:40:9A:E5:A8:EE:92:37:1C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       73CD26D3A552152F6E4A7401C68A75626F7DC830
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/A3948DF92873B3152952F292409AE5A8EE92371C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Apr 2023 19:00:50 +0000
Certificate not after:    Wed 24 Apr 2024 19:05:50 +0000
Subordinate resources:    AS: 269372
                          IP: 45.185.96.0/22
                          IP: 2804:639c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:cd:26:d3:a5:52:15:2f:6e:4a:74:01:c6:8a:75:62:6f:7d:c8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 26 19:00:50 2023 GMT
            Not After : Apr 24 19:05:50 2024 GMT
        Subject: CN=A3948DF92873B3152952F292409AE5A8EE92371C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:20:c8:a3:43:3b:2d:8d:92:0d:60:8f:f9:ab:
                    ea:db:03:0c:96:b6:0a:cd:02:2c:53:38:6d:51:d0:
                    fa:07:78:0e:07:bc:25:7b:bd:c3:63:ce:fb:31:a2:
                    49:ba:db:76:2c:6a:b0:50:6d:9c:12:ed:e1:f5:29:
                    15:24:1a:8e:e8:e1:8b:d1:25:88:da:ce:76:96:d1:
                    98:e3:6d:76:0d:41:c2:84:63:76:7b:7e:ce:35:62:
                    3a:c5:fc:83:bd:d3:de:cb:e2:b1:12:48:91:b1:03:
                    62:d4:9c:fa:10:f6:72:75:2c:49:b0:26:8e:f4:e7:
                    48:65:e3:09:e1:2e:1e:d5:27:af:d7:93:b5:7a:26:
                    de:e3:02:1a:69:77:46:25:d0:6e:d9:1b:58:6f:2a:
                    cf:cd:6c:2f:d6:00:8d:9a:f9:26:f0:c0:f5:09:72:
                    4d:fb:95:fa:c8:55:34:5d:b6:ad:e4:c4:37:c1:65:
                    3f:39:ba:08:eb:05:f5:d7:3f:53:09:25:92:d9:ec:
                    40:02:3c:03:5d:63:6e:2e:bf:28:60:f9:68:09:c4:
                    1d:0e:08:80:20:90:78:89:ac:11:a8:8b:f4:28:c2:
                    6c:2d:ed:63:dc:82:3e:de:8e:a1:43:4f:d0:b3:15:
                    f8:74:ea:7d:8f:0e:8d:b1:86:50:fc:69:da:a4:1f:
                    15:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:94:8D:F9:28:73:B3:15:29:52:F2:92:40:9A:E5:A8:EE:92:37:1C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/A3948DF92873B3152952F292409AE5A8EE92371C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.96.0/22
                IPv6:
                  2804:639c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269372

    Signature Algorithm: sha256WithRSAEncryption
         14:7d:68:90:84:70:75:82:19:2a:ee:36:d2:2a:36:8b:63:a3:
         bc:0a:3e:11:14:11:2b:b2:a0:d4:45:06:08:6c:9f:28:2f:33:
         3b:f0:c8:2d:5c:9a:47:ee:ac:80:82:c9:a8:05:93:ef:71:d4:
         73:5e:0c:90:f5:0b:8e:b8:b7:af:75:8e:67:c6:5d:35:17:48:
         c4:3f:da:ab:83:32:be:34:4a:1b:77:67:0a:f5:6c:b5:3e:e2:
         09:97:38:64:69:27:9f:43:06:e3:87:87:3e:2e:58:df:cf:95:
         57:a2:74:05:48:0f:14:06:c5:b7:6a:8c:12:32:70:a2:cd:56:
         d5:92:6c:b8:85:54:ca:67:f5:22:61:64:5f:ef:b5:14:60:e8:
         df:ce:59:46:19:ce:3d:51:30:8a:e0:b5:29:ba:1e:61:ad:38:
         63:eb:41:22:c0:ab:79:c2:eb:95:74:02:08:7a:42:8c:ee:88:
         60:0e:8a:12:fe:a0:bd:55:d6:2c:97:72:ef:2c:10:0e:76:2e:
         b5:82:1c:a0:f8:9b:64:de:bd:01:23:27:cf:79:30:32:af:f0:
         14:f9:ea:27:29:d4:e3:11:37:70:f5:03:c3:c1:82:b4:a5:4f:
         90:7b:3e:c9:cb:c6:67:b8:a1:56:38:52:2f:4d:fa:cd:2e:c9:
         56:67:f2:4b
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUc80m06VSFS9uSnQBxop1Ym99yDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MjYxOTAwNTBaFw0yNDA0MjQxOTA1NTBaMDMxMTAvBgNV
BAMTKEEzOTQ4REY5Mjg3M0IzMTUyOTUyRjI5MjQwOUFFNUE4RUU5MjM3MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxIMijQzstjZINYI/5q+rbAwyW
tgrNAixTOG1R0PoHeA4HvCV7vcNjzvsxokm623YsarBQbZwS7eH1KRUkGo7o4YvR
JYjaznaW0ZjjbXYNQcKEY3Z7fs41YjrF/IO9097L4rESSJGxA2LUnPoQ9nJ1LEmw
Jo7050hl4wnhLh7VJ6/Xk7V6Jt7jAhppd0Yl0G7ZG1hvKs/NbC/WAI2a+SbwwPUJ
ck37lfrIVTRdtq3kxDfBZT85ugjrBfXXP1MJJZLZ7EACPANdY24uvyhg+WgJxB0O
CIAgkHiJrBGoi/Qowmwt7WPcgj7ejqFDT9CzFfh06n2PDo2xhlD8adqkHxXnAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSjlI35KHOzFSlS
8pJAmuWo7pI3HDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Ebjc4Y1Q3d3h6Y0I5N0tkajhCblg3ZjRRVnF2VDZlVXB0
SGJGdzlud29yWS8xMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Ebjc4Y1Q3d3h6Y0I5N0tkajhCblg3ZjRRVnF2VDZlVXB0
SGJGdzlud29yWS8xL0EzOTQ4REY5Mjg3M0IzMTUyOTUyRjI5MjQwOUFFNUE4RUU5
MjM3MUMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi25YDANBAIAAjAHAwUA
KARjnDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHDwwDQYJKoZIhvcNAQELBQAD
ggEBABR9aJCEcHWCGSruNtIqNotjo7wKPhEUESuyoNRFBghsnygvMzvwyC1cmkfu
rICCyagFk+9x1HNeDJD1C464t691jmfGXTUXSMQ/2quDMr40Sht3Zwr1bLU+4gmX
OGRpJ59DBuOHhz4uWN/PlVeidAVIDxQGxbdqjBIycKLNVtWSbLiFVMpn9SJhZF/v
tRRg6N/OWUYZzj1RMIrgtSm6HmGtOGPrQSLAq3nC65V0Agh6QozuiGAOihL+oL1V
1iyXcu8sEA52LrWCHKD4m2TevQEjJ895MDKv8BT56icp1OMRN3D1A8PBgrSlT5B7
PsnLxme4oVY4Ui9N+s0uyVZn8ks=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org