Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B3F1D9417F733A49E0B661F346F7F89A5AD7C4DA.cer
File:                     B3F1D9417F733A49E0B661F346F7F89A5AD7C4DA.cer (raw, json)
Hash identifier:          DocEVxzrRQ3VY+S16y2cOvvfXwLRvjbEAb1mW2CFtSI=
Subject key identifier:   B3:F1:D9:41:7F:73:3A:49:E0:B6:61:F3:46:F7:F8:9A:5A:D7:C4:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       12B1CB81609E542DD77434C14D22762512520404
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/B3F1D9417F733A49E0B661F346F7F89A5AD7C4DA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 30 Jun 2023 13:05:23 +0000
Certificate not after:    Fri 28 Jun 2024 13:10:23 +0000
Subordinate resources:    AS: 265278
                          IP: 168.90.56.0/22
                          IP: 170.231.149.0 -- 170.231.151.255
                          IP: 2804:2d60::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b1:cb:81:60:9e:54:2d:d7:74:34:c1:4d:22:76:25:12:52:04:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 30 13:05:23 2023 GMT
            Not After : Jun 28 13:10:23 2024 GMT
        Subject: CN=B3F1D9417F733A49E0B661F346F7F89A5AD7C4DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:28:76:0e:33:1b:6c:91:9b:74:08:f4:2f:
                    35:e0:f3:ae:e9:05:dd:ff:1e:83:a0:1e:8b:dc:45:
                    0c:de:52:3d:56:e2:d6:33:01:d4:ec:d3:23:b9:cf:
                    d8:e0:c1:07:48:e3:54:be:62:31:56:45:3f:02:69:
                    85:8d:76:cc:81:58:2b:0a:2c:db:17:0e:bd:bb:f8:
                    a9:d3:93:1a:70:f2:d0:4f:37:ba:0f:bc:c1:49:76:
                    0e:46:4f:7a:ab:ee:a5:52:19:79:8a:07:f6:ed:07:
                    d9:02:8a:4c:5a:26:ec:bf:ee:b2:5e:ad:2b:bd:84:
                    37:fc:90:52:da:11:1b:ac:35:cb:95:34:31:1d:7e:
                    e1:86:2f:03:b5:e2:f0:6d:17:31:3f:7c:a9:d3:7c:
                    27:6b:49:c9:af:f0:34:93:e0:f9:90:0c:b5:30:f2:
                    65:5a:fd:27:d4:69:04:63:13:d1:42:b9:af:d9:66:
                    ac:b2:fc:89:12:7c:42:67:1d:06:9c:fc:35:64:18:
                    b2:2f:db:ed:aa:89:aa:a9:9d:3b:be:bd:d2:c6:7d:
                    9f:83:ac:4c:5b:cb:88:af:cc:75:79:e0:31:ac:ee:
                    90:d7:af:96:2f:c1:47:61:38:b6:9e:05:64:1b:14:
                    1d:44:1c:51:ae:aa:56:f6:82:d8:8c:73:3e:0e:5c:
                    8f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:F1:D9:41:7F:73:3A:49:E0:B6:61:F3:46:F7:F8:9A:5A:D7:C4:DA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/B3F1D9417F733A49E0B661F346F7F89A5AD7C4DA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.56.0/22
                  170.231.149.0-170.231.151.255
                IPv6:
                  2804:2d60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265278

    Signature Algorithm: sha256WithRSAEncryption
         21:f8:fc:83:c4:41:72:ad:64:87:50:23:3b:20:01:ae:dd:a6:
         54:b2:f8:ae:8f:4b:65:b2:82:ea:41:e4:a6:4c:16:9b:e0:54:
         ea:9b:91:02:45:10:46:e9:32:d9:fa:8a:80:b3:7e:44:e3:ec:
         dd:df:21:4c:28:31:b0:c7:ae:4d:7a:21:e9:72:8b:fa:e5:b4:
         d8:85:f6:18:26:1d:51:74:c3:a5:79:62:ca:dc:22:ab:78:91:
         9f:c7:e3:d4:9f:12:0e:bb:1f:9f:2f:a0:61:02:47:c3:52:47:
         73:c9:a3:00:81:2e:a6:ef:e0:87:b4:bc:3d:24:63:a6:ff:82:
         d6:5d:60:02:4a:61:c5:03:7d:fe:8f:66:c4:a6:81:84:fe:8a:
         2b:a2:61:0d:5b:15:24:f6:fe:02:ca:eb:04:cb:34:c1:f4:7a:
         6e:35:58:a8:11:0f:76:2d:ee:c4:ec:19:82:fa:cd:fa:b4:97:
         d1:3f:7a:97:69:03:bd:10:b0:fd:a7:9a:0b:de:37:bc:86:20:
         d8:9d:c7:36:c3:c1:ed:23:78:5e:96:b6:27:05:07:be:b6:2c:
         b0:af:2b:19:cf:bc:d8:05:f5:36:ca:6f:74:26:46:e5:67:8f:
         0e:7f:c5:c9:52:ab:b3:8c:02:48:0c:cc:2e:7f:fe:48:e7:64:
         d9:ab:71:6e
-----BEGIN CERTIFICATE-----
MIIGHjCCBQagAwIBAgIUErHLgWCeVC3XdDTBTSJ2JRJSBAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MzAxMzA1MjNaFw0yNDA2MjgxMzEwMjNaMDMxMTAvBgNV
BAMTKEIzRjFEOTQxN0Y3MzNBNDlFMEI2NjFGMzQ2RjdGODlBNUFEN0M0REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0dSh2DjMbbJGbdAj0LzXg867p
Bd3/HoOgHovcRQzeUj1W4tYzAdTs0yO5z9jgwQdI41S+YjFWRT8CaYWNdsyBWCsK
LNsXDr27+KnTkxpw8tBPN7oPvMFJdg5GT3qr7qVSGXmKB/btB9kCikxaJuy/7rJe
rSu9hDf8kFLaERusNcuVNDEdfuGGLwO14vBtFzE/fKnTfCdrScmv8DST4PmQDLUw
8mVa/SfUaQRjE9FCua/ZZqyy/IkSfEJnHQac/DVkGLIv2+2qiaqpnTu+vdLGfZ+D
rExby4ivzHV54DGs7pDXr5YvwUdhOLaeBWQbFB1EHFGuqlb2gtiMcz4OXI+XAgMB
AAGjggMoMIIDJDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSz8dlBf3M6SeC2
YfNG9/iaWtfE2jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85ZUxCRFJITjhwY2p5cHBqQ2V2dXVRTmE3THE3RThXQmRB
Z0hNRnF3MjJxci8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85ZUxCRFJITjhwY2p5cHBqQ2V2dXVRTmE3THE3RThXQmRB
Z0hNRnF3MjJxci8wL0IzRjFEOTQxN0Y3MzNBNDlFMEI2NjFGMzQ2RjdGODlBNUFE
N0M0REEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA8BggrBgEFBQcBBwEB/wQtMCswGgQCAAEwFAMEAqhaODAMAwQAqueVAwQD
queQMA0EAgACMAcDBQAoBC1gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQMPjAN
BgkqhkiG9w0BAQsFAAOCAQEAIfj8g8RBcq1kh1AjOyABrt2mVLL4ro9LZbKC6kHk
pkwWm+BU6puRAkUQRuky2fqKgLN+ROPs3d8hTCgxsMeuTXoh6XKL+uW02IX2GCYd
UXTDpXliytwiq3iRn8fj1J8SDrsfny+gYQJHw1JHc8mjAIEupu/gh7S8PSRjpv+C
1l1gAkphxQN9/o9mxKaBhP6KK6JhDVsVJPb+AsrrBMs0wfR6bjVYqBEPdi3uxOwZ
gvrN+rSX0T96l2kDvRCw/aeaC943vIYg2J3HNsPB7SN4Xpa2JwUHvrYssK8rGc+8
2AX1NspvdCZG5WePDn/FyVKrs4wCSAzMLn/+SOdk2atxbg==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:51 2025 by rpki-client