Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CB3B7616863B2F05AD85E6493F4FEA0906E4A07A.cer
File:                     CB3B7616863B2F05AD85E6493F4FEA0906E4A07A.cer (raw, json)
Hash identifier:          NfWZsOSEF7LoBOl63EwXtDXbMIU01oHzZR0fLiE+9U0=
Subject key identifier:   CB:3B:76:16:86:3B:2F:05:AD:85:E6:49:3F:4F:EA:09:06:E4:A0:7A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       48550AB6881110DA38E6D84DA4CCB044743F701D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/CB3B7616863B2F05AD85E6493F4FEA0906E4A07A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Oct 2023 03:58:44 +0000
Certificate not after:    Fri 11 Oct 2024 04:03:44 +0000
Subordinate resources:    AS: 264929
                          IP: 168.228.216.0/22
                          IP: 2804:3014::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:55:0a:b6:88:11:10:da:38:e6:d8:4d:a4:cc:b0:44:74:3f:70:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 13 03:58:44 2023 GMT
            Not After : Oct 11 04:03:44 2024 GMT
        Subject: CN=CB3B7616863B2F05AD85E6493F4FEA0906E4A07A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:f3:77:d5:ec:a3:bb:7c:2f:7b:aa:e7:5c:
                    8b:2c:51:a4:3c:69:d1:99:50:bb:ef:9d:0d:c1:72:
                    b8:9a:06:77:03:35:63:3d:76:dd:b0:53:e4:9f:ec:
                    4f:cb:b2:56:80:56:4b:f2:55:15:02:9b:f6:69:ea:
                    31:5d:df:b3:ed:25:6d:1b:b7:dd:86:32:d0:01:dc:
                    cc:6a:3c:3d:5a:10:9a:0f:bc:68:bf:74:66:0c:2a:
                    e8:f0:8d:b6:68:12:93:83:38:05:a3:49:77:16:c1:
                    f2:ad:b0:67:3e:93:68:c1:51:ff:de:1f:f7:26:c1:
                    c0:64:be:13:29:45:9f:87:b4:fa:ff:cd:d6:cd:bd:
                    57:c5:44:b9:0d:ac:28:b5:a6:6b:53:81:e3:87:39:
                    63:9e:10:9e:11:a1:a0:89:4b:13:40:f6:37:c9:0b:
                    2f:a5:04:4c:15:fa:4a:32:9a:89:78:32:97:2a:5c:
                    c0:df:51:e9:34:0c:d3:67:36:6e:fa:67:d8:7f:3b:
                    d1:18:f0:d5:b5:8d:c0:c5:48:3a:1d:cc:62:fb:12:
                    ee:81:57:1f:40:43:1d:ac:54:0a:ea:69:10:c7:20:
                    12:6f:cb:bc:35:54:87:d4:da:1c:07:bf:c8:2b:0b:
                    90:28:df:63:e0:18:24:8b:4b:aa:4e:d9:d2:38:64:
                    97:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:3B:76:16:86:3B:2F:05:AD:85:E6:49:3F:4F:EA:09:06:E4:A0:7A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/CB3B7616863B2F05AD85E6493F4FEA0906E4A07A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.216.0/22
                IPv6:
                  2804:3014::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264929

    Signature Algorithm: sha256WithRSAEncryption
         14:19:f1:b6:ef:78:70:1a:70:e4:55:56:54:c5:b9:c9:7b:72:
         fd:e3:30:4e:74:22:a1:3b:7e:2c:f9:dc:0c:3f:aa:57:86:37:
         1e:2a:4c:b2:b8:22:34:de:6f:b0:33:d1:67:ab:44:83:52:9c:
         cf:16:e0:42:94:95:92:63:38:29:84:56:2d:9c:91:9c:2c:28:
         d1:cb:12:b6:44:42:61:66:5e:34:4b:e1:92:92:21:bf:e9:a4:
         b2:87:77:64:83:9e:96:af:49:7d:75:3e:22:93:7d:0b:93:1e:
         02:ec:db:c8:1b:95:67:c3:f2:c2:1c:72:ca:a6:51:09:af:bb:
         60:11:6b:5b:b5:40:1b:31:28:4e:e6:06:13:21:96:5a:d2:70:
         29:e9:6e:66:80:7c:1e:a8:f0:b4:63:fe:f5:35:92:cb:f6:dc:
         2c:25:7a:16:fb:9b:ec:62:21:fa:27:c0:2f:9c:f6:03:23:be:
         c9:1b:e4:90:f2:5c:ac:ca:ff:f8:a1:32:61:7f:07:3c:d4:20:
         0e:f0:ba:cc:43:0e:85:2b:84:b0:8c:49:ae:c6:88:ca:63:34:
         f3:2e:d0:11:71:e2:40:1a:a4:08:07:ed:ee:39:89:e4:d8:65:
         24:8d:3c:b0:aa:c4:20:a0:80:25:d1:3d:08:c6:1a:dc:45:6d:
         c6:50:b4:fb
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUSFUKtogRENo45thNpMywRHQ/cB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMTMwMzU4NDRaFw0yNDEwMTEwNDAzNDRaMDMxMTAvBgNV
BAMTKENCM0I3NjE2ODYzQjJGMDVBRDg1RTY0OTNGNEZFQTA5MDZFNEEwN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+afN31eyju3wve6rnXIssUaQ8
adGZULvvnQ3BcriaBncDNWM9dt2wU+Sf7E/LslaAVkvyVRUCm/Zp6jFd37PtJW0b
t92GMtAB3MxqPD1aEJoPvGi/dGYMKujwjbZoEpODOAWjSXcWwfKtsGc+k2jBUf/e
H/cmwcBkvhMpRZ+HtPr/zdbNvVfFRLkNrCi1pmtTgeOHOWOeEJ4RoaCJSxNA9jfJ
Cy+lBEwV+koymol4MpcqXMDfUek0DNNnNm76Z9h/O9EY8NW1jcDFSDodzGL7Eu6B
Vx9AQx2sVArqaRDHIBJvy7w1VIfU2hwHv8grC5Ao32PgGCSLS6pO2dI4ZJdXAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTLO3YWhjsvBa2F
5kk/T+oJBuSgejAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83OU45S1BQZ1M0M0FSVUxCQ2phM1pGNnJvRkF6ZTdFU3Q1
dTRreGd0UDJtaS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNzlOOUtQUGdTNDNBUlVMQkNqYTNaRjZyb0ZBemU3RVN0
NXU0a3hndFAybWkvMC9DQjNCNzYxNjg2M0IyRjA1QUQ4NUU2NDkzRjRGRUEwOTA2
RTRBMDdBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKo5NgwDQQCAAIwBwMF
ACgEMBQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBArhMA0GCSqGSIb3DQEBCwUA
A4IBAQAUGfG273hwGnDkVVZUxbnJe3L94zBOdCKhO34s+dwMP6pXhjceKkyyuCI0
3m+wM9Fnq0SDUpzPFuBClJWSYzgphFYtnJGcLCjRyxK2REJhZl40S+GSkiG/6aSy
h3dkg56Wr0l9dT4ik30Lkx4C7NvIG5Vnw/LCHHLKplEJr7tgEWtbtUAbMShO5gYT
IZZa0nAp6W5mgHweqPC0Y/71NZLL9twsJXoW+5vsYiH6J8AvnPYDI77JG+SQ8lys
yv/4oTJhfwc81CAO8LrMQw6FK4SwjEmuxojKYzTzLtARceJAGqQIB+3uOYnk2GUk
jTywqsQgoIAl0T0IxhrcRW3GULT7
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org