Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BE343E3D32BA67E514AD2010392367A6DF1F003E.cer
File:                     BE343E3D32BA67E514AD2010392367A6DF1F003E.cer (raw, json)
Hash identifier:          VstZruxLIhZc91uegxNUKGZsTMGnGJAVCzHhBERX8Dk=
Subject key identifier:   BE:34:3E:3D:32:BA:67:E5:14:AD:20:10:39:23:67:A6:DF:1F:00:3E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0DBA45300B1724A2F703F5635947ECA0B679B0AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/BE343E3D32BA67E514AD2010392367A6DF1F003E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Aug 2022 05:53:08 +0000
Certificate not after:    Fri 04 Aug 2023 05:58:08 +0000
Subordinate resources:    AS: 264886
                          IP: 168.227.180.0/22
                          IP: 179.108.44.0/22
                          IP: 2804:2f5c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ba:45:30:0b:17:24:a2:f7:03:f5:63:59:47:ec:a0:b6:79:b0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  5 05:53:08 2022 GMT
            Not After : Aug  4 05:58:08 2023 GMT
        Subject: CN=BE343E3D32BA67E514AD2010392367A6DF1F003E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:38:6b:3b:57:39:b1:f9:93:c1:34:67:0f:7e:
                    8e:61:95:19:c0:64:65:01:6e:ab:ae:8a:2b:75:e4:
                    b8:6a:70:26:70:2c:ba:0d:35:cf:36:f2:5c:d1:fa:
                    6c:9e:68:18:16:e8:1d:ae:8e:4a:ea:a0:fd:40:5a:
                    3a:a4:3f:3b:81:71:09:91:36:d0:8c:bf:0a:29:bd:
                    1d:02:9b:65:1b:85:04:da:e4:29:77:8c:51:e4:7f:
                    b6:de:97:74:29:2a:44:77:21:f8:43:27:7e:a9:a5:
                    6a:fa:23:f3:f5:c9:44:6f:a9:47:78:64:d5:89:05:
                    19:1a:1e:04:b5:ca:82:21:65:71:be:69:db:af:3a:
                    fb:8d:aa:b7:67:7e:b2:08:74:ed:ea:a9:54:d7:c7:
                    24:2f:87:29:59:17:2e:95:3d:1c:8c:91:d7:b0:3f:
                    81:54:20:52:9c:a5:3a:de:ef:61:85:19:5c:04:4d:
                    28:98:83:34:0f:1b:46:bc:3d:9d:d9:c6:ce:c5:b3:
                    b4:cf:8e:2c:86:40:e0:b1:98:b8:d1:c9:e8:e6:f5:
                    59:35:d0:67:f4:72:fa:a6:c0:cd:23:e5:27:8c:77:
                    07:5f:ef:af:11:9f:80:0a:56:ef:61:07:93:fc:0d:
                    ba:f3:4c:84:61:39:95:44:2d:ad:0e:43:1d:b7:c1:
                    0f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BE:34:3E:3D:32:BA:67:E5:14:AD:20:10:39:23:67:A6:DF:1F:00:3E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/BE343E3D32BA67E514AD2010392367A6DF1F003E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.180.0/22
                  179.108.44.0/22
                IPv6:
                  2804:2f5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264886

    Signature Algorithm: sha256WithRSAEncryption
         ac:a2:3f:2d:41:5e:2a:a0:13:3c:ba:03:c1:da:6b:34:ee:d7:
         99:08:24:cd:c5:38:d4:e5:81:ff:23:0b:3e:1f:f4:e1:33:95:
         f6:84:af:d4:97:77:da:78:38:99:0d:e9:75:6b:5e:67:8c:43:
         ce:e7:8a:e2:12:93:b0:53:35:c6:73:aa:2e:4d:5d:43:0d:b5:
         c7:e5:29:f4:95:60:a3:53:f8:bd:60:02:df:ab:3c:51:8d:de:
         dc:fc:d8:ab:45:fc:30:cc:7a:b4:33:ea:98:d3:70:8e:af:c4:
         84:02:d4:3c:15:d0:12:f3:42:3f:84:81:9b:cb:4f:7b:27:4d:
         c7:14:28:3f:1f:17:04:ba:bc:17:91:eb:16:d9:4c:eb:9c:33:
         3e:16:bf:e2:00:3d:59:36:40:9b:a2:9f:2a:b5:89:67:de:82:
         0c:5b:59:52:3f:cf:74:78:09:f4:a2:d9:10:9a:ea:ef:cc:96:
         55:67:01:09:d7:ff:09:e4:92:d5:4d:cd:00:99:ac:65:fe:37:
         95:a1:10:c7:03:d2:81:62:31:4d:ce:3c:89:c4:12:9d:c0:72:
         bc:31:07:c6:5a:fa:52:fa:55:b1:bd:79:87:f5:d8:5a:e6:88:
         a4:73:80:e3:09:a1:89:d1:bf:1c:2d:d1:9c:d0:05:ba:ff:43:
         0d:f0:f2:5a
-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgIUDbpFMAsXJKL3A/VjWUfsoLZ5sKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA4MDUwNTUzMDhaFw0yMzA4MDQwNTU4MDhaMDMxMTAvBgNV
BAMTKEJFMzQzRTNEMzJCQTY3RTUxNEFEMjAxMDM5MjM2N0E2REYxRjAwM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqOGs7Vzmx+ZPBNGcPfo5hlRnA
ZGUBbquuiit15LhqcCZwLLoNNc828lzR+myeaBgW6B2ujkrqoP1AWjqkPzuBcQmR
NtCMvwopvR0Cm2UbhQTa5Cl3jFHkf7bel3QpKkR3IfhDJ36ppWr6I/P1yURvqUd4
ZNWJBRkaHgS1yoIhZXG+aduvOvuNqrdnfrIIdO3qqVTXxyQvhylZFy6VPRyMkdew
P4FUIFKcpTre72GFGVwETSiYgzQPG0a8PZ3Zxs7Fs7TPjiyGQOCxmLjRyejm9Vk1
0Gf0cvqmwM0j5SeMdwdf768Rn4AKVu9hB5P8DbrzTIRhOZVELa0OQx23wQ/HAgMB
AAGjggMeMIIDGjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+ND49Mrpn5RSt
IBA5I2em3x8APjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPQYIKwYB
BQUHAQsEggEvMIIBKzBcBggrBgEFBQcwBYZQcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9hZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJO
dTFXNFhFbzNpLzAwgYkGCCsGAQUFBzAKhn1yc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvL2FmWEZNa1F5cEpqYVNhVXp0M0VRUW9KTmNWdXpoaG1kQk51
MVc0WEVvM2kvMC9CRTM0M0UzRDMyQkE2N0U1MTRBRDIwMTAzOTIzNjdBNkRGMUYw
MDNFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u
YnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKo47QDBAKzbCwwDQQCAAIw
BwMFACgEL1wwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAq2MA0GCSqGSIb3DQEB
CwUAA4IBAQCsoj8tQV4qoBM8ugPB2ms07teZCCTNxTjU5YH/Iws+H/ThM5X2hK/U
l3faeDiZDel1a15njEPO54riEpOwUzXGc6ouTV1DDbXH5Sn0lWCjU/i9YALfqzxR
jd7c/NirRfwwzHq0M+qY03COr8SEAtQ8FdAS80I/hIGby097J03HFCg/HxcEurwX
kesW2UzrnDM+Fr/iAD1ZNkCbop8qtYln3oIMW1lSP890eAn0otkQmurvzJZVZwEJ
1/8J5JLVTc0Amaxl/jeVoRDHA9KBYjFNzjyJxBKdwHK8MQfGWvpS+lWxvXmH9dha
5oikc4DjCaGJ0b8cLdGc0AW6/0MN8PJa
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org