Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/30927BB169705D61DFE4973ACED55565431260B1.cer
File:                     30927BB169705D61DFE4973ACED55565431260B1.cer (raw, json)
Hash identifier:          0dKCMnpfxyICYkvFV69/IfP/zzpic1eiTIGD2uSDHCQ=
Subject key identifier:   30:92:7B:B1:69:70:5D:61:DF:E4:97:3A:CE:D5:55:65:43:12:60:B1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       43D5B3AB1C838570548BAA23575318DF237A141D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/0/30927BB169705D61DFE4973ACED55565431260B1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Dec 2023 02:56:12 +0000
Certificate not after:    Fri 29 Nov 2024 03:01:12 +0000
Subordinate resources:    AS: 270259
                          IP: 200.107.220.0/22
                          IP: 2804:6944::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d5:b3:ab:1c:83:85:70:54:8b:aa:23:57:53:18:df:23:7a:14:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  1 02:56:12 2023 GMT
            Not After : Nov 29 03:01:12 2024 GMT
        Subject: CN=30927BB169705D61DFE4973ACED55565431260B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:bf:70:ee:1b:55:a7:ce:3b:71:a3:36:cd:
                    ba:ab:12:cf:c3:9b:77:ef:b9:ce:85:98:bc:3d:4f:
                    bb:da:e9:8c:7a:e3:49:06:36:74:14:83:20:89:57:
                    49:00:48:95:14:d7:fd:ce:b7:cb:6a:89:ac:ef:0c:
                    08:04:7b:54:51:2e:1a:78:5d:36:c9:73:ea:02:f8:
                    64:42:0c:6c:ed:5e:a5:7f:29:a5:fa:09:0d:8b:27:
                    61:53:04:ef:39:a3:1f:88:ed:af:83:eb:98:74:9f:
                    18:b7:5a:24:d3:7b:fc:fb:3d:73:29:1b:d0:be:de:
                    b9:63:68:69:8e:f5:ce:eb:cc:0b:02:6e:6b:a5:5b:
                    86:97:ca:87:4c:33:ed:9b:7e:56:fc:cd:ae:ef:39:
                    42:9e:ef:86:04:a9:eb:1c:fa:5f:38:ac:3e:78:61:
                    d9:58:7e:b9:b0:a3:95:e5:ff:8e:5b:73:f6:01:17:
                    eb:86:05:08:0f:00:25:49:b3:ca:9d:10:d1:b7:43:
                    bc:6d:29:f4:10:71:2f:cc:7f:5b:57:76:04:3a:d8:
                    8e:3a:39:22:c6:38:e6:e1:ee:27:51:36:b3:70:07:
                    95:38:7e:bb:be:63:55:ba:77:5b:30:8c:02:79:c7:
                    7f:cb:64:19:11:82:ea:c7:f9:23:d8:3f:b9:8d:c2:
                    70:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:92:7B:B1:69:70:5D:61:DF:E4:97:3A:CE:D5:55:65:43:12:60:B1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/0/30927BB169705D61DFE4973ACED55565431260B1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.220.0/22
                IPv6:
                  2804:6944::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270259

    Signature Algorithm: sha256WithRSAEncryption
         63:f1:8c:fc:35:85:b8:a7:ea:ee:6c:b5:db:20:ec:fc:89:33:
         95:90:df:64:9b:38:2f:4d:d6:ba:c2:bb:c2:00:e1:b7:61:c7:
         9a:ef:7a:cd:ed:b4:df:18:df:e7:26:83:95:fb:b8:24:ef:9a:
         5e:b8:0a:30:da:fb:e2:81:1a:fe:02:d9:05:83:5f:33:96:4b:
         9b:4f:d5:ac:08:7e:cd:60:ac:e5:c2:98:10:2e:06:8c:4d:84:
         84:3e:27:f7:87:ea:8b:cd:28:29:3c:0d:7a:99:50:4c:8c:bb:
         c9:30:52:60:63:b3:91:27:7b:cd:c8:11:46:ff:10:3e:6f:a9:
         f3:60:93:60:ec:a4:0d:47:47:31:11:19:94:38:55:00:ad:a8:
         d3:24:98:bb:0b:0d:fb:2b:f0:10:f9:c5:ef:5d:c8:85:c7:00:
         8d:e5:1b:ee:09:68:b0:38:4f:d9:80:8e:f3:7c:15:f0:1d:7f:
         c5:18:55:29:b9:f5:61:50:55:b8:6f:0e:4b:72:69:1c:87:5f:
         97:e0:0a:b5:eb:14:de:4f:9f:e1:05:b3:96:d5:26:cb:23:f6:
         6d:9a:e5:30:95:62:88:11:10:d7:aa:0e:06:18:e9:36:17:46:
         4a:fa:7b:05:6a:cb:cf:58:99:f4:0e:4a:ca:2c:19:92:28:0d:
         c3:66:4c:19
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUQ9WzqxyDhXBUi6ojV1MY3yN6FB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMDEwMjU2MTJaFw0yNDExMjkwMzAxMTJaMDMxMTAvBgNV
BAMTKDMwOTI3QkIxNjk3MDVENjFERkU0OTczQUNFRDU1NTY1NDMxMjYwQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxDL9w7htVp847caM2zbqrEs/D
m3fvuc6FmLw9T7va6Yx640kGNnQUgyCJV0kASJUU1/3Ot8tqiazvDAgEe1RRLhp4
XTbJc+oC+GRCDGztXqV/KaX6CQ2LJ2FTBO85ox+I7a+D65h0nxi3WiTTe/z7PXMp
G9C+3rljaGmO9c7rzAsCbmulW4aXyodMM+2bflb8za7vOUKe74YEqesc+l84rD54
YdlYfrmwo5Xl/45bc/YBF+uGBQgPACVJs8qdENG3Q7xtKfQQcS/Mf1tXdgQ62I46
OSLGOObh7idRNrNwB5U4fru+Y1W6d1swjAJ5x3/LZBkRgurH+SPYP7mNwnBrAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwknuxaXBdYd/k
lzrO1VVlQxJgsTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yWmY0N3N4MWpUTW11aHRiRkJ5aHJpVkJxd01ia0JjUmdH
ZU1LSDhIY3hXVC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yWmY0N3N4MWpUTW11aHRiRkJ5aHJpVkJxd01ia0JjUmdH
ZU1LSDhIY3hXVC8wLzMwOTI3QkIxNjk3MDVENjFERkU0OTczQUNFRDU1NTY1NDMx
MjYwQjEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAshr3DANBAIAAjAHAwUA
KARpRDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEH7MwDQYJKoZIhvcNAQELBQAD
ggEBAGPxjPw1hbin6u5stdsg7PyJM5WQ32SbOC9N1rrCu8IA4bdhx5rves3ttN8Y
3+cmg5X7uCTvml64CjDa++KBGv4C2QWDXzOWS5tP1awIfs1grOXCmBAuBoxNhIQ+
J/eH6ovNKCk8DXqZUEyMu8kwUmBjs5Ene83IEUb/ED5vqfNgk2DspA1HRzERGZQ4
VQCtqNMkmLsLDfsr8BD5xe9dyIXHAI3lG+4JaLA4T9mAjvN8FfAdf8UYVSm59WFQ
VbhvDktyaRyHX5fgCrXrFN5Pn+EFs5bVJssj9m2a5TCVYogRENeqDgYY6TYXRkr6
ewVqy89YmfQOSsosGZIoDcNmTBk=
-----END CERTIFICATE-----