Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.cer
File:                     30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.cer (raw, json)
Hash identifier:          hPyD1nFOK75CKZySYuuJ1oglZYfo8q+gBIvs7AR/PwA=
Subject key identifier:   30:BB:88:BC:1F:4F:C8:5B:1F:7A:2E:DB:16:61:7D:87:C2:AB:67:13
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5D4DCC83080B552A5AABEC2D58AB9DDD035F43BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Sep 2023 20:52:38 +0000
Certificate not after:    Tue 24 Sep 2024 20:57:38 +0000
Subordinate resources:    AS: 268788
                          IP: 45.173.24.0/22
                          IP: 2804:5aac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:4d:cc:83:08:0b:55:2a:5a:ab:ec:2d:58:ab:9d:dd:03:5f:43:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 26 20:52:38 2023 GMT
            Not After : Sep 24 20:57:38 2024 GMT
        Subject: CN=30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:6d:12:d6:78:62:28:29:2b:07:ec:0d:f7:
                    65:61:fc:89:58:88:c1:09:19:87:a6:60:2f:b8:e9:
                    77:30:ad:e8:52:6b:56:00:8c:8f:d5:4d:cb:14:d1:
                    3d:aa:9c:ac:9a:84:ae:fa:1a:9d:bd:c6:d4:3f:e1:
                    c8:a3:88:aa:df:1c:0b:3a:9d:02:c4:ee:f4:67:42:
                    6b:8b:e8:28:3e:5f:03:43:85:1f:38:af:a9:98:30:
                    0d:e0:53:56:d7:7a:c1:ba:e5:a6:a9:34:6d:75:c2:
                    cd:8e:aa:49:39:d3:58:18:a6:81:30:ba:a2:4b:15:
                    50:da:a9:ba:91:80:58:0e:80:29:79:e2:03:42:6a:
                    54:4f:a0:20:37:d3:e0:55:94:0a:f4:02:91:68:af:
                    87:6d:d9:db:98:5d:0b:31:97:3f:61:ea:96:7b:9f:
                    92:d2:7a:0a:24:32:20:fe:67:17:5d:1e:63:7a:29:
                    02:bf:2e:3f:07:c2:9f:8a:3d:eb:2e:57:25:ad:a5:
                    fe:66:e2:78:5a:f0:87:5c:e7:97:95:cb:cc:72:91:
                    f2:b8:c5:f0:8a:93:1b:64:d9:4a:87:75:b1:04:00:
                    61:45:50:ca:e5:b0:05:ea:e1:d6:1e:c1:8b:e1:6f:
                    66:9b:6d:ae:a9:91:f0:fc:8d:35:50:63:13:a9:c6:
                    2c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:BB:88:BC:1F:4F:C8:5B:1F:7A:2E:DB:16:61:7D:87:C2:AB:67:13
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/30BB88BC1F4FC85B1F7A2EDB16617D87C2AB6713.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.24.0/22
                IPv6:
                  2804:5aac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268788

    Signature Algorithm: sha256WithRSAEncryption
         55:4e:bb:60:92:92:53:b3:3d:0d:c7:30:d3:4c:0c:62:3f:7d:
         96:ed:3c:98:93:32:ef:27:4c:32:4c:3a:13:d1:f7:3b:67:57:
         d2:5e:ee:46:74:35:75:8f:51:45:1e:7b:f2:b6:03:da:fa:30:
         12:29:36:86:51:b5:0e:e5:81:cb:e6:9d:1b:62:b3:32:80:b3:
         ad:03:fc:09:38:a3:55:7f:29:f5:1f:98:9b:af:b0:01:6a:d4:
         f6:58:27:d0:5b:9a:56:4d:ba:64:60:dc:1d:90:39:56:e7:02:
         c8:c5:d3:1a:53:ca:41:49:23:f2:aa:d8:f0:bf:45:ab:24:ed:
         98:e5:73:27:0c:32:4a:8d:1e:71:44:1d:e4:50:6b:9a:93:26:
         fc:9b:62:bd:0c:53:b5:ab:a1:6c:a9:bf:7b:d1:a4:b3:f8:58:
         d0:dc:e9:1e:ec:cf:88:00:b5:d5:20:24:17:da:b3:00:fd:f4:
         37:6c:a8:75:7b:84:85:4a:f7:6f:e6:a0:db:04:bc:9e:43:5b:
         03:57:6e:01:21:ef:f0:be:bd:77:64:31:55:1b:e1:a2:b8:c4:
         78:7b:e1:41:e8:8a:57:01:20:65:bc:7d:e4:9a:5f:39:c6:90:
         f8:0f:86:f5:74:d2:49:8f:26:fb:24:60:96:3e:b3:7e:4b:ce:
         c8:70:fd:a8
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUXU3MgwgLVSpaq+wtWKud3QNfQ78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MjYyMDUyMzhaFw0yNDA5MjQyMDU3MzhaMDMxMTAvBgNV
BAMTKDMwQkI4OEJDMUY0RkM4NUIxRjdBMkVEQjE2NjE3RDg3QzJBQjY3MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6W0S1nhiKCkrB+wN92Vh/IlY
iMEJGYemYC+46XcwrehSa1YAjI/VTcsU0T2qnKyahK76Gp29xtQ/4cijiKrfHAs6
nQLE7vRnQmuL6Cg+XwNDhR84r6mYMA3gU1bXesG65aapNG11ws2Oqkk501gYpoEw
uqJLFVDaqbqRgFgOgCl54gNCalRPoCA30+BVlAr0ApFor4dt2duYXQsxlz9h6pZ7
n5LSegokMiD+ZxddHmN6KQK/Lj8Hwp+KPesuVyWtpf5m4nha8Idc55eVy8xykfK4
xfCKkxtk2UqHdbEEAGFFUMrlsAXq4dYewYvhb2abba6pkfD8jTVQYxOpxixTAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwu4i8H0/IWx96
LtsWYX2HwqtnEzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IQ1daa3dFVWcyeHNqS0p4blM3cDU4TjhCWENrWGJ6aXNE
d1hwb1A1Z2pCRS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IQ1daa3dFVWcyeHNqS0p4blM3cDU4TjhCWENrWGJ6aXNE
d1hwb1A1Z2pCRS8wLzMwQkI4OEJDMUY0RkM4NUIxRjdBMkVEQjE2NjE3RDg3QzJB
QjY3MTMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2tGDANBAIAAjAHAwUA
KARarDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGfQwDQYJKoZIhvcNAQELBQAD
ggEBAFVOu2CSklOzPQ3HMNNMDGI/fZbtPJiTMu8nTDJMOhPR9ztnV9Je7kZ0NXWP
UUUee/K2A9r6MBIpNoZRtQ7lgcvmnRtiszKAs60D/Ak4o1V/KfUfmJuvsAFq1PZY
J9BbmlZNumRg3B2QOVbnAsjF0xpTykFJI/Kq2PC/Rask7ZjlcycMMkqNHnFEHeRQ
a5qTJvybYr0MU7WroWypv3vRpLP4WNDc6R7sz4gAtdUgJBfaswD99DdsqHV7hIVK
92/moNsEvJ5DWwNXbgEh7/C+vXdkMVUb4aK4xHh74UHoilcBIGW8feSaXznGkPgP
hvV00kmPJvskYJY+s35Lzshw/ag=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org