Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CC3908D25E6D6534AEE32700DBFEBEC58D234BD4.cer
File:                     CC3908D25E6D6534AEE32700DBFEBEC58D234BD4.cer (raw, json)
Hash identifier:          +vFSt5MTOz5/y47nJqF2tD+XfiKCST2sQTMcHMRUwls=
Subject key identifier:   CC:39:08:D2:5E:6D:65:34:AE:E3:27:00:DB:FE:BE:C5:8D:23:4B:D4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       076E3E125EBB8C62524D7FE6992172CA71021A97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/CC3908D25E6D6534AEE32700DBFEBEC58D234BD4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 23 Aug 2023 19:46:24 +0000
Certificate not after:    Wed 21 Aug 2024 19:51:24 +0000
Subordinate resources:    AS: 269372
                          IP: 45.185.96.0/22
                          IP: 2804:639c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:6e:3e:12:5e:bb:8c:62:52:4d:7f:e6:99:21:72:ca:71:02:1a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 23 19:46:24 2023 GMT
            Not After : Aug 21 19:51:24 2024 GMT
        Subject: CN=CC3908D25E6D6534AEE32700DBFEBEC58D234BD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6c:d6:d2:be:92:f1:57:c9:86:8e:f3:5c:71:
                    2a:6b:34:66:e1:f4:19:f9:2b:a0:3e:b0:9b:8e:a4:
                    78:cd:c0:81:10:2a:1f:2d:b3:39:b8:06:40:80:d1:
                    c2:e0:72:e6:81:93:1a:9c:3a:a8:42:c1:30:da:7d:
                    d5:87:04:75:1b:12:5f:b9:47:a4:14:1d:14:36:1e:
                    ea:ff:59:8d:dd:75:4c:c4:aa:3b:80:66:0b:e3:73:
                    2a:12:73:09:97:de:01:61:1e:58:be:f3:b8:48:42:
                    4c:71:b0:2f:c3:68:13:d2:45:15:3a:ed:3f:5a:94:
                    8a:61:d8:43:d3:76:a4:f7:b8:0c:ec:33:9f:c4:b5:
                    11:45:f8:28:f5:ad:61:14:4a:18:35:4c:3d:29:7f:
                    fa:08:20:e8:ae:29:09:46:01:cf:e0:d2:03:b2:3d:
                    e2:14:b4:cd:f9:0f:e3:c5:ac:ff:33:9a:8a:99:2f:
                    3f:e9:41:74:e0:9b:a0:ff:27:73:35:3d:7e:b1:04:
                    92:15:38:11:c9:4d:fa:1a:9f:b4:1f:e7:bd:8b:24:
                    65:34:53:c0:3d:d7:9f:37:c4:a5:fc:8c:67:bd:a9:
                    f2:75:ab:6f:ca:64:c3:35:b9:04:cd:02:86:62:aa:
                    e2:8f:e5:00:5c:5e:4d:8a:52:f3:6f:5e:50:b0:96:
                    c6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:39:08:D2:5E:6D:65:34:AE:E3:27:00:DB:FE:BE:C5:8D:23:4B:D4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/CC3908D25E6D6534AEE32700DBFEBEC58D234BD4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.96.0/22
                IPv6:
                  2804:639c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269372

    Signature Algorithm: sha256WithRSAEncryption
         95:5b:5b:7b:5d:c0:dd:54:88:87:d0:e7:ad:4a:31:48:e6:6d:
         fd:0a:72:8b:08:12:69:be:4d:3c:7b:5f:fb:87:39:59:1d:7a:
         c4:48:2c:a8:9e:ca:f4:e6:6d:5a:a9:cf:71:ed:f8:dc:67:b7:
         57:29:7b:b0:17:44:ca:5e:50:b2:2a:5e:d7:19:79:95:a9:9c:
         12:1b:9b:9f:8a:5d:41:58:90:00:2e:e4:3f:0c:d7:f6:7f:73:
         4a:c3:5f:92:eb:55:51:4b:47:76:78:61:fc:4a:49:c8:bb:b7:
         e5:29:8c:81:4f:18:ed:0a:38:28:c0:a6:0c:c0:4a:9b:f7:4f:
         bc:84:28:0f:51:80:69:c3:e0:9e:90:52:23:6f:f5:b6:31:0d:
         c8:2c:03:97:e1:4b:bd:f4:bc:ff:1b:a7:86:36:0c:52:a8:f9:
         0a:b6:b5:b4:20:11:28:3d:04:fc:0f:01:9a:ea:18:f2:a0:dc:
         1c:08:12:28:12:8c:6a:7f:49:5e:11:08:39:4a:de:aa:a4:ab:
         0c:74:4c:4e:a2:63:13:ee:70:40:30:bd:88:c2:9f:cc:31:ae:
         ec:92:5b:e2:58:e7:f1:6f:4d:7d:8b:a6:6e:17:34:df:75:1a:
         76:ef:8b:02:32:b8:0a:e3:1d:4b:90:8d:58:a0:06:8a:8f:00:
         8d:a8:ec:19
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUB24+El67jGJSTX/mmSFyynECGpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MjMxOTQ2MjRaFw0yNDA4MjExOTUxMjRaMDMxMTAvBgNV
BAMTKENDMzkwOEQyNUU2RDY1MzRBRUUzMjcwMERCRkVCRUM1OEQyMzRCRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmbNbSvpLxV8mGjvNccSprNGbh
9Bn5K6A+sJuOpHjNwIEQKh8tszm4BkCA0cLgcuaBkxqcOqhCwTDafdWHBHUbEl+5
R6QUHRQ2Hur/WY3ddUzEqjuAZgvjcyoScwmX3gFhHli+87hIQkxxsC/DaBPSRRU6
7T9alIph2EPTdqT3uAzsM5/EtRFF+Cj1rWEUShg1TD0pf/oIIOiuKQlGAc/g0gOy
PeIUtM35D+PFrP8zmoqZLz/pQXTgm6D/J3M1PX6xBJIVOBHJTfoan7Qf572LJGU0
U8A91583xKX8jGe9qfJ1q2/KZMM1uQTNAoZiquKP5QBcXk2KUvNvXlCwlsZhAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTMOQjSXm1lNK7j
JwDb/r7FjSNL1DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Ebjc4Y1Q3d3h6Y0I5N0tkajhCblg3ZjRRVnF2VDZlVXB0
SGJGdzlud29yWS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRG43OGNUN3d4emNCOTdLZGo4Qm5YN2Y0UVZxdlQ2ZVVw
dEhiRnc5bndvclkvMC9DQzM5MDhEMjVFNkQ2NTM0QUVFMzI3MDBEQkZFQkVDNThE
MjM0QkQ0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItuWAwDQQCAAIwBwMF
ACgEY5wwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBw8MA0GCSqGSIb3DQEBCwUA
A4IBAQCVW1t7XcDdVIiH0OetSjFI5m39CnKLCBJpvk08e1/7hzlZHXrESCyonsr0
5m1aqc9x7fjcZ7dXKXuwF0TKXlCyKl7XGXmVqZwSG5ufil1BWJAALuQ/DNf2f3NK
w1+S61VRS0d2eGH8SknIu7flKYyBTxjtCjgowKYMwEqb90+8hCgPUYBpw+CekFIj
b/W2MQ3ILAOX4Uu99Lz/G6eGNgxSqPkKtrW0IBEoPQT8DwGa6hjyoNwcCBIoEoxq
f0leEQg5St6qpKsMdExOomMT7nBAML2Iwp/MMa7sklviWOfxb019i6ZuFzTfdRp2
74sCMrgK4x1LkI1YoAaKjwCNqOwZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org