Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F3626EE3ECEF483BEEBCF2F3E9C71412AE813688.cer
File:                     F3626EE3ECEF483BEEBCF2F3E9C71412AE813688.cer (raw, json)
Hash identifier:          LMHZ3tCb6Ejm4JfSlsdsEhTHeNL4jHsE6a88CuGfuDg=
Subject key identifier:   F3:62:6E:E3:EC:EF:48:3B:EE:BC:F2:F3:E9:C7:14:12:AE:81:36:88
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       01A2EEDF2BD05067A379C6780F9AAEC3F96AC92D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/F3626EE3ECEF483BEEBCF2F3E9C71412AE813688.mft
caRepository:             rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Jul 2023 13:27:53 +0000
Certificate not after:    Mon 22 Jul 2024 13:32:53 +0000
Subordinate resources:    AS: 263143
                          IP: 191.242.196.0/22
                          IP: 2804:1764::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a2:ee:df:2b:d0:50:67:a3:79:c6:78:0f:9a:ae:c3:f9:6a:c9:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 24 13:27:53 2023 GMT
            Not After : Jul 22 13:32:53 2024 GMT
        Subject: CN=F3626EE3ECEF483BEEBCF2F3E9C71412AE813688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:10:9d:d3:7e:5e:10:2e:30:ad:5e:37:c5:ea:
                    60:83:8d:0a:c6:b5:41:80:26:27:e0:7b:54:f9:72:
                    3d:23:f9:2c:38:66:45:17:0a:37:11:a0:d1:d7:ca:
                    0d:c2:4c:94:79:30:37:94:79:eb:ed:c9:ae:6b:89:
                    85:22:8a:6c:80:09:40:47:6d:e5:b2:8f:1c:60:df:
                    50:7e:30:c8:3e:ca:ec:e2:fc:4d:11:13:5f:c2:19:
                    ba:12:b1:93:0b:34:48:77:72:9d:2f:8e:a2:b5:03:
                    8b:fd:35:94:1f:2a:be:eb:2a:1a:04:7c:ba:3e:78:
                    2d:8c:e0:3e:26:71:18:ad:4a:2a:e9:9c:a4:3c:01:
                    94:f6:2a:ed:f7:14:e9:6c:06:dc:23:b1:f4:67:dc:
                    4f:e6:eb:ae:f4:b9:8c:40:45:4a:e9:8e:22:58:59:
                    d8:60:f3:b2:15:44:4f:ca:92:cb:ba:f8:b0:68:bc:
                    0f:e6:63:ca:54:b2:2d:0c:34:25:c4:9c:2d:b1:ad:
                    1f:53:ce:6b:42:af:2e:1d:e8:c3:a6:71:a8:f9:c5:
                    64:75:ed:54:f2:c4:89:ba:a3:7f:7d:32:d6:46:46:
                    16:da:0a:ec:c7:ed:33:50:06:17:8a:a5:f9:76:ff:
                    c5:21:ba:2a:be:a5:1e:47:95:5c:16:f3:72:f5:1c:
                    85:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:62:6E:E3:EC:EF:48:3B:EE:BC:F2:F3:E9:C7:14:12:AE:81:36:88
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/F3626EE3ECEF483BEEBCF2F3E9C71412AE813688.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.196.0/22
                IPv6:
                  2804:1764::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263143

    Signature Algorithm: sha256WithRSAEncryption
         30:2c:45:89:42:aa:50:1f:e0:88:46:83:16:26:b8:9d:22:25:
         67:36:65:be:1e:69:69:a7:59:1a:04:7e:8d:7d:73:8a:f0:5b:
         c4:07:fd:52:de:8a:3f:d2:00:4a:11:22:5c:84:3d:44:95:06:
         7e:5b:13:87:fc:a0:3c:df:e5:1e:d2:00:01:c3:67:dc:16:51:
         23:38:57:1d:19:ef:da:23:77:b3:c2:ce:d8:09:19:3a:a6:75:
         48:e7:d7:7b:17:21:00:2c:84:4b:46:38:29:1c:4f:3e:00:c5:
         4c:29:49:c6:7f:bf:d2:bf:dd:61:0d:5e:b5:1e:9e:da:34:3e:
         82:cc:48:30:c0:c9:8b:b4:37:c3:25:e8:ac:0c:f7:fc:6a:19:
         f8:de:6e:35:0a:e9:3f:64:ae:e2:bd:d1:da:54:da:60:97:29:
         92:b8:8b:9f:24:85:30:4e:11:a8:b5:ad:7c:2f:84:6d:fa:ac:
         c7:ff:08:6e:49:9b:8b:9b:6b:da:fd:19:12:5d:89:99:fe:76:
         2c:72:95:6f:54:f0:b3:c7:5a:ef:31:82:8d:30:39:6c:e4:cc:
         9c:8f:f2:4d:d2:f2:f8:85:c8:ee:00:a4:07:33:5d:55:9c:64:
         dd:04:8e:ee:ba:0a:32:dd:cb:29:98:9f:db:5f:9e:2d:f6:82:
         01:07:f2:1b
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUAaLu3yvQUGejecZ4D5quw/lqyS0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MjQxMzI3NTNaFw0yNDA3MjIxMzMyNTNaMDMxMTAvBgNV
BAMTKEYzNjI2RUUzRUNFRjQ4M0JFRUJDRjJGM0U5QzcxNDEyQUU4MTM2ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8EJ3Tfl4QLjCtXjfF6mCDjQrG
tUGAJifge1T5cj0j+Sw4ZkUXCjcRoNHXyg3CTJR5MDeUeevtya5riYUiimyACUBH
beWyjxxg31B+MMg+yuzi/E0RE1/CGboSsZMLNEh3cp0vjqK1A4v9NZQfKr7rKhoE
fLo+eC2M4D4mcRitSirpnKQ8AZT2Ku33FOlsBtwjsfRn3E/m6670uYxARUrpjiJY
Wdhg87IVRE/Kksu6+LBovA/mY8pUsi0MNCXEnC2xrR9TzmtCry4d6MOmcaj5xWR1
7VTyxIm6o399MtZGRhbaCuzH7TNQBheKpfl2/8Uhuiq+pR5HlVwW83L1HIU5AgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTzYm7j7O9IO+68
8vPpxxQSroE2iDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby94cFF1Z1U2WVdXWFN3N2JINDZRbnhvcTVIaTlQSHJIMWhB
WUdVMmVyalJ3LzEvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby94cFF1Z1U2WVdXWFN3N2JINDZRbnhvcTVIaTlQSHJIMWhB
WUdVMmVyalJ3LzEvRjM2MjZFRTNFQ0VGNDgzQkVFQkNGMkYzRTlDNzE0MTJBRTgx
MzY4OC5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCv/LEMA0EAgACMAcDBQAo
BBdkMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQD5zANBgkqhkiG9w0BAQsFAAOC
AQEAMCxFiUKqUB/giEaDFia4nSIlZzZlvh5paadZGgR+jX1zivBbxAf9Ut6KP9IA
ShEiXIQ9RJUGflsTh/ygPN/lHtIAAcNn3BZRIzhXHRnv2iN3s8LO2AkZOqZ1SOfX
exchACyES0Y4KRxPPgDFTClJxn+/0r/dYQ1etR6e2jQ+gsxIMMDJi7Q3wyXorAz3
/GoZ+N5uNQrpP2Su4r3R2lTaYJcpkriLnySFME4RqLWtfC+Ebfqsx/8Ibkmbi5tr
2v0ZEl2Jmf52LHKVb1Tws8da7zGCjTA5bOTMnI/yTdLy+IXI7gCkBzNdVZxk3QSO
7roKMt3LKZif21+eLfaCAQfyGw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-ams.rpki-client.org