Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/303AE09FFD23B1162E3AF84CB43D7FCE33DF016F.cer
File:                     303AE09FFD23B1162E3AF84CB43D7FCE33DF016F.cer (raw, json)
Hash identifier:          BOY/ynWvqcW4ePaDVJKydoPc1qFzm1RuLqytYLG79ts=
Subject key identifier:   30:3A:E0:9F:FD:23:B1:16:2E:3A:F8:4C:B4:3D:7F:CE:33:DF:01:6F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       664F8C8C6228426ADBF0CE432F93961976AB899B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/303AE09FFD23B1162E3AF84CB43D7FCE33DF016F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Feb 2024 21:36:34 +0000
Certificate not after:    Thu 27 Feb 2025 21:41:34 +0000
Subordinate resources:    AS: 52677
                          IP: 177.66.204.0/22
                          IP: 2804:c18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4f:8c:8c:62:28:42:6a:db:f0:ce:43:2f:93:96:19:76:ab:89:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 29 21:36:34 2024 GMT
            Not After : Feb 27 21:41:34 2025 GMT
        Subject: CN=303AE09FFD23B1162E3AF84CB43D7FCE33DF016F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:00:f7:95:44:07:fc:3e:6f:1f:98:15:16:09:
                    1c:31:00:32:de:d0:a9:a4:a8:96:db:98:1b:90:30:
                    4a:74:ae:a7:1e:06:6d:82:b1:a3:1b:0f:a5:61:e7:
                    f8:e0:fd:75:cc:25:79:b9:bd:45:3a:8f:86:f9:e1:
                    c1:b1:b3:4a:35:fc:50:7e:5e:aa:17:fe:c9:2a:81:
                    c2:38:70:6b:5b:1c:8c:f2:53:13:3d:e6:8e:52:38:
                    fd:d7:51:f5:c1:db:92:ac:c5:c1:19:f2:f2:d4:52:
                    be:91:8c:8c:2f:71:33:60:68:86:0c:2f:02:80:e4:
                    4a:29:ae:21:ee:dc:e2:30:7d:9b:77:a8:f6:31:b2:
                    71:5e:b2:53:30:88:b3:52:05:25:36:62:03:d0:a6:
                    06:0a:ec:9e:e4:2c:bd:28:99:75:fb:67:3a:7f:79:
                    c2:aa:82:64:2d:29:b6:e0:23:4f:ca:3c:f8:be:7b:
                    bf:cf:4a:82:87:9b:46:9c:e4:3b:ed:a7:ea:e8:25:
                    9d:2c:23:ec:e1:58:71:74:33:13:02:6d:85:1e:3c:
                    56:10:b6:7e:47:3c:3f:98:e4:b3:f5:23:8a:99:25:
                    7a:e1:38:29:c7:4e:79:8f:bc:e1:83:c2:a1:c5:7e:
                    09:cd:a9:82:1b:a3:3c:22:c4:87:6b:55:cb:f7:23:
                    93:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:3A:E0:9F:FD:23:B1:16:2E:3A:F8:4C:B4:3D:7F:CE:33:DF:01:6F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/303AE09FFD23B1162E3AF84CB43D7FCE33DF016F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.204.0/22
                IPv6:
                  2804:c18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52677

    Signature Algorithm: sha256WithRSAEncryption
         90:64:e2:35:f1:10:49:ee:b8:5f:a7:e3:38:86:2b:e2:15:2b:
         08:c7:cf:16:1c:18:bf:57:8e:32:a1:fd:f4:b7:f4:8a:ad:5d:
         30:ec:d6:5e:14:22:2c:a8:e6:da:5c:f9:fd:78:92:0d:82:a2:
         69:b3:32:89:88:a5:8a:06:df:7e:a7:92:c3:79:47:1d:9d:c7:
         7a:ab:4d:01:c1:05:54:50:25:83:b9:50:cd:3d:04:05:1e:5d:
         23:44:ad:8b:44:e4:d7:0d:7d:d0:19:1b:de:92:5f:36:7d:8a:
         28:e5:e3:3c:69:b6:79:6a:27:f7:f8:5d:db:9f:28:3c:76:84:
         61:7e:29:62:94:3c:cc:ce:eb:04:f1:75:53:3b:96:40:5f:4d:
         04:79:63:db:27:8c:5a:a6:db:58:db:81:58:50:e5:32:87:11:
         55:83:16:60:91:ef:b3:70:f6:2f:06:aa:35:9c:c4:dc:1d:cf:
         eb:53:5c:09:94:eb:c2:51:2b:dd:45:c6:ee:1a:2f:26:9d:78:
         f2:a0:c9:0d:37:4c:86:89:e6:31:c6:d7:ab:13:c9:0c:93:b0:
         4b:e7:1a:a9:10:69:19:c5:48:6b:79:8f:ce:87:b6:3b:87:5f:
         af:8a:da:af:3a:31:ca:5d:86:a0:34:a7:79:36:14:a4:ca:16:
         4c:60:d1:a8
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUZk+MjGIoQmrb8M5DL5OWGXariZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjkyMTM2MzRaFw0yNTAyMjcyMTQxMzRaMDMxMTAvBgNV
BAMTKDMwM0FFMDlGRkQyM0IxMTYyRTNBRjg0Q0I0M0Q3RkNFMzNERjAxNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0APeVRAf8Pm8fmBUWCRwxADLe
0KmkqJbbmBuQMEp0rqceBm2CsaMbD6Vh5/jg/XXMJXm5vUU6j4b54cGxs0o1/FB+
XqoX/skqgcI4cGtbHIzyUxM95o5SOP3XUfXB25KsxcEZ8vLUUr6RjIwvcTNgaIYM
LwKA5EopriHu3OIwfZt3qPYxsnFeslMwiLNSBSU2YgPQpgYK7J7kLL0omXX7Zzp/
ecKqgmQtKbbgI0/KPPi+e7/PSoKHm0ac5Dvtp+roJZ0sI+zhWHF0MxMCbYUePFYQ
tn5HPD+Y5LP1I4qZJXrhOCnHTnmPvOGDwqHFfgnNqYIbozwixIdrVcv3I5NjAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwOuCf/SOxFi46
+Ey0PX/OM98BbzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zclJXNEE4Rmtvb2ZwUkVjazJBYzVUVGZYZDV2NUE2Q0ZR
c0tCcXlVOTNDaS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zclJXNEE4Rmtvb2ZwUkVjazJBYzVUVGZYZDV2NUE2Q0ZR
c0tCcXlVOTNDaS8wLzMwM0FFMDlGRkQyM0IxMTYyRTNBRjg0Q0I0M0Q3RkNFMzNE
RjAxNkYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArFCzDANBAIAAjAHAwUA
KAQMGDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzcUwDQYJKoZIhvcNAQELBQAD
ggEBAJBk4jXxEEnuuF+n4ziGK+IVKwjHzxYcGL9XjjKh/fS39IqtXTDs1l4UIiyo
5tpc+f14kg2CommzMomIpYoG336nksN5Rx2dx3qrTQHBBVRQJYO5UM09BAUeXSNE
rYtE5NcNfdAZG96SXzZ9iijl4zxptnlqJ/f4XdufKDx2hGF+KWKUPMzO6wTxdVM7
lkBfTQR5Y9snjFqm21jbgVhQ5TKHEVWDFmCR77Nw9i8GqjWcxNwdz+tTXAmU68JR
K91Fxu4aLyadePKgyQ03TIaJ5jHG16sTyQyTsEvnGqkQaRnFSGt5j86HtjuHX6+K
2q86McpdhqA0p3k2FKTKFkxg0ag=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org