Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/302FCF4E086DAF68B193D30F358CC8B5E29E9F4A.cer
File:                     302FCF4E086DAF68B193D30F358CC8B5E29E9F4A.cer (raw, json)
Hash identifier:          ocpYK7lhej7AAr74L8DI45J2bxydZ0bfHzH4AyaCDPI=
Subject key identifier:   30:2F:CF:4E:08:6D:AF:68:B1:93:D3:0F:35:8C:C8:B5:E2:9E:9F:4A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       12989E04292C8ECBF45BE4DFC85CA4E967D00B7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/1/302FCF4E086DAF68B193D30F358CC8B5E29E9F4A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Mar 2023 14:57:20 +0000
Certificate not after:    Tue 19 Mar 2024 15:02:20 +0000
Subordinate resources:    AS: 266492
                          IP: 170.244.64.0/22
                          IP: 2804:38a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:98:9e:04:29:2c:8e:cb:f4:5b:e4:df:c8:5c:a4:e9:67:d0:0b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 21 14:57:20 2023 GMT
            Not After : Mar 19 15:02:20 2024 GMT
        Subject: CN=302FCF4E086DAF68B193D30F358CC8B5E29E9F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:97:6f:c1:75:51:bd:33:7a:16:62:87:77:83:
                    73:53:7b:96:6e:b1:af:58:6a:f4:63:37:6a:61:b6:
                    7d:a3:ef:c3:8a:58:42:95:eb:16:52:00:01:54:db:
                    a8:8f:9a:0b:38:43:22:6d:53:1c:01:9e:b4:d8:91:
                    de:19:8e:21:85:e8:44:85:a0:14:4b:b2:f8:2a:61:
                    dc:22:4a:50:23:cc:a3:a6:ad:7c:4c:63:e8:5e:e7:
                    df:ee:34:2e:ca:24:5b:c0:a1:d9:ab:89:7e:2f:98:
                    c1:9d:80:af:be:be:73:22:d4:40:31:57:b6:c7:c7:
                    1b:29:71:2f:e5:52:a0:12:2c:8a:db:49:7e:53:46:
                    f2:3a:57:3b:01:b3:80:f1:66:86:d1:74:23:ac:3a:
                    d6:5f:fa:d0:11:e3:25:8e:30:9a:8b:5b:44:ae:fa:
                    4a:33:de:16:81:3c:a1:23:23:85:88:c0:a1:8a:2f:
                    42:c9:5f:6c:9b:89:95:fe:a1:16:bc:f1:80:29:35:
                    95:4a:2c:b3:19:32:b9:99:88:68:7f:a7:2e:74:1f:
                    8d:c1:f4:56:c8:55:fe:62:ea:80:a0:ff:4c:c4:a3:
                    39:40:3c:d1:67:4d:04:d4:e3:f8:0f:53:20:89:34:
                    82:aa:c2:8f:0e:1b:76:29:35:14:1c:da:99:7f:d5:
                    b0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:2F:CF:4E:08:6D:AF:68:B1:93:D3:0F:35:8C:C8:B5:E2:9E:9F:4A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8QDFxKG6T9teiuypCHVq9qgxaonEoKU8WbrEtVJH6nir/1/302FCF4E086DAF68B193D30F358CC8B5E29E9F4A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.64.0/22
                IPv6:
                  2804:38a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266492

    Signature Algorithm: sha256WithRSAEncryption
         7a:92:9c:9a:51:5a:94:a4:bd:57:5f:e9:20:6e:2a:79:17:35:
         2d:3e:52:e1:13:2b:5b:0d:55:5b:f0:65:01:2d:73:58:f6:d7:
         37:46:0b:44:ac:87:0a:9c:eb:0f:50:01:18:f9:80:fc:7d:e9:
         46:33:19:3d:36:7b:d7:f1:e0:97:09:69:9a:55:ea:67:51:6c:
         74:2d:68:02:e8:21:04:36:8d:83:83:91:60:35:12:27:76:8f:
         89:cc:92:db:27:e1:5a:49:99:2c:f7:90:f1:85:a2:72:14:26:
         2b:5b:95:af:4d:34:63:af:5c:97:59:5c:b4:34:38:0e:e5:a5:
         35:b8:67:2c:96:c2:e9:c7:7d:a9:63:0a:28:1b:dc:2e:13:00:
         f3:02:17:e2:1d:e3:32:31:a0:17:b7:bd:d8:a0:4b:4d:a6:7d:
         e7:74:6c:bb:26:8e:0a:03:6f:c4:e5:02:b3:93:3b:20:d9:90:
         22:59:1e:62:2e:1f:ef:31:41:bc:f4:48:55:ef:90:37:08:99:
         2f:6f:c5:c3:9f:c8:79:84:e1:50:b3:50:5d:ce:ab:3c:f1:57:
         c0:fc:13:3b:ca:a7:7a:c1:e5:ea:00:34:0f:dd:80:2b:22:a5:
         ba:7e:a7:aa:e4:57:ef:80:e5:39:1d:ae:8a:5e:98:6c:e4:2a:
         4a:0b:57:5e
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUEpieBCksjsv0W+TfyFyk6WfQC3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMjExNDU3MjBaFw0yNDAzMTkxNTAyMjBaMDMxMTAvBgNV
BAMTKDMwMkZDRjRFMDg2REFGNjhCMTkzRDMwRjM1OENDOEI1RTI5RTlGNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCll2/BdVG9M3oWYod3g3NTe5Zu
sa9YavRjN2phtn2j78OKWEKV6xZSAAFU26iPmgs4QyJtUxwBnrTYkd4ZjiGF6ESF
oBRLsvgqYdwiSlAjzKOmrXxMY+he59/uNC7KJFvAodmriX4vmMGdgK++vnMi1EAx
V7bHxxspcS/lUqASLIrbSX5TRvI6VzsBs4DxZobRdCOsOtZf+tAR4yWOMJqLW0Su
+koz3haBPKEjI4WIwKGKL0LJX2ybiZX+oRa88YApNZVKLLMZMrmZiGh/py50H43B
9FbIVf5i6oCg/0zEozlAPNFnTQTU4/gPUyCJNIKqwo8OG3YpNRQc2pl/1bCFAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwL89OCG2vaLGT
0w81jMi14p6fSjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84UURGeEtHNlQ5dGVpdXlwQ0hWcTlxZ3hhb25Fb0tVOFdi
ckV0VkpINm5pci8xMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84UURGeEtHNlQ5dGVpdXlwQ0hWcTlxZ3hhb25Fb0tVOFdi
ckV0VkpINm5pci8xLzMwMkZDRjRFMDg2REFGNjhCMTkzRDMwRjM1OENDOEI1RTI5
RTlGNEEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqr0QDANBAIAAjAHAwUA
KAQ4qDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEPwwDQYJKoZIhvcNAQELBQAD
ggEBAHqSnJpRWpSkvVdf6SBuKnkXNS0+UuETK1sNVVvwZQEtc1j21zdGC0Sshwqc
6w9QARj5gPx96UYzGT02e9fx4JcJaZpV6mdRbHQtaALoIQQ2jYODkWA1Eid2j4nM
ktsn4VpJmSz3kPGFonIUJitbla9NNGOvXJdZXLQ0OA7lpTW4ZyyWwunHfaljCigb
3C4TAPMCF+Id4zIxoBe3vdigS02mfed0bLsmjgoDb8TlArOTOyDZkCJZHmIuH+8x
Qbz0SFXvkDcImS9vxcOfyHmE4VCzUF3OqzzxV8D8EzvKp3rB5eoANA/dgCsipbp+
p6rkV++A5TkdropemGzkKkoLV14=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org