Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/30C664F11477DA38A38072BEC7DCD39D253551F5.cer
File:                     30C664F11477DA38A38072BEC7DCD39D253551F5.cer (raw, json)
Hash identifier:          nXX33CPi6cto37EgpToM4VEsR388XrQGuYxSUeAkBRs=
Subject key identifier:   30:C6:64:F1:14:77:DA:38:A3:80:72:BE:C7:DC:D3:9D:25:35:51:F5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7037FE79BFE33B52CABE57677EEDBABF8757E066
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/30C664F11477DA38A38072BEC7DCD39D253551F5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Feb 2024 14:21:07 +0000
Certificate not after:    Tue 11 Feb 2025 14:26:07 +0000
Subordinate resources:    AS: 265158
                          IP: 167.249.16.0/22
                          IP: 2804:2b88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:37:fe:79:bf:e3:3b:52:ca:be:57:67:7e:ed:ba:bf:87:57:e0:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 13 14:21:07 2024 GMT
            Not After : Feb 11 14:26:07 2025 GMT
        Subject: CN=30C664F11477DA38A38072BEC7DCD39D253551F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c0:44:50:30:1a:73:85:7f:0a:be:73:1c:de:
                    ec:14:6e:ef:3a:8e:9f:e2:cf:f4:db:b1:2a:c4:57:
                    05:8f:f2:c0:6c:d3:4c:e0:9b:87:5c:af:2c:f1:a1:
                    00:b1:13:27:61:87:87:81:94:af:d5:ae:c7:d3:2b:
                    22:8a:58:90:2d:65:d0:53:f5:ef:60:04:bf:53:98:
                    08:fa:35:5d:07:f4:53:e9:1c:52:66:1d:10:27:d0:
                    8a:80:e1:dc:18:e0:72:2e:24:7c:6d:2b:bc:87:13:
                    84:2c:c1:af:59:a7:6c:b4:f3:e7:19:25:30:63:3d:
                    08:5c:ba:ee:bd:46:45:79:e6:24:e7:f0:0e:e5:36:
                    98:fc:d7:cb:24:6e:eb:80:3c:ff:30:b6:75:09:f9:
                    68:39:ba:78:82:5a:28:9f:df:99:f0:be:29:75:67:
                    a1:b3:6e:20:cb:d0:cd:20:e4:84:fb:19:9d:98:c6:
                    2a:86:40:58:5f:e3:fc:24:a9:1d:ee:b9:7a:40:13:
                    f9:c9:94:16:8c:c0:5a:c6:22:f3:2b:0a:70:b6:90:
                    d5:42:b4:94:60:bf:a7:7c:84:f7:84:c3:92:d1:27:
                    b5:80:bb:53:24:d8:b6:9c:7a:76:0d:bd:69:b5:02:
                    52:68:70:d4:1c:69:69:ab:fe:34:ac:ef:80:61:c6:
                    09:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:C6:64:F1:14:77:DA:38:A3:80:72:BE:C7:DC:D3:9D:25:35:51:F5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/30C664F11477DA38A38072BEC7DCD39D253551F5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.16.0/22
                IPv6:
                  2804:2b88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265158

    Signature Algorithm: sha256WithRSAEncryption
         ad:55:14:f5:ab:10:3c:29:00:4a:46:e9:5b:ba:2f:92:99:b2:
         e9:c7:b5:94:6a:a4:db:54:20:e3:b8:76:5c:2a:b5:aa:7a:2b:
         96:e2:1b:89:df:ad:be:91:cd:92:23:5b:4e:7d:6e:92:23:36:
         39:21:80:ab:a5:12:88:a8:68:a2:91:ef:20:00:ef:83:99:c5:
         d2:25:16:92:0a:f9:b8:05:93:e2:00:d6:16:29:63:1d:5b:05:
         3c:bb:28:50:1f:59:aa:a0:eb:ab:92:45:5f:93:d0:b2:f3:4d:
         be:7d:dc:93:93:80:97:14:64:77:c8:ea:d5:8e:46:12:8b:1c:
         fd:58:8e:5b:9c:0c:f4:7a:f2:d9:03:b9:40:3f:48:31:bc:14:
         d2:ae:f1:24:ae:36:d4:e5:eb:54:23:92:a7:67:da:d3:fa:f7:
         be:a2:cc:3e:3c:bb:3b:9d:b8:1d:78:47:3a:6f:ee:dd:5e:2b:
         0e:a3:72:75:be:d1:0a:19:41:92:23:96:b4:3b:4d:e8:c6:1e:
         5a:b9:b3:b0:ce:c6:e4:3d:e6:2c:97:a8:7b:d5:44:13:8e:13:
         28:54:31:4b:b1:a3:fb:9d:30:74:4e:3b:d8:9d:82:6e:b4:16:
         f9:07:0b:8a:cd:a5:21:35:37:4a:90:d6:7d:d1:7a:63:35:95:
         a1:b1:bb:d5
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUcDf+eb/jO1LKvldnfu26v4dX4GYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTMxNDIxMDdaFw0yNTAyMTExNDI2MDdaMDMxMTAvBgNV
BAMTKDMwQzY2NEYxMTQ3N0RBMzhBMzgwNzJCRUM3RENEMzlEMjUzNTUxRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClwERQMBpzhX8KvnMc3uwUbu86
jp/iz/TbsSrEVwWP8sBs00zgm4dcryzxoQCxEydhh4eBlK/VrsfTKyKKWJAtZdBT
9e9gBL9TmAj6NV0H9FPpHFJmHRAn0IqA4dwY4HIuJHxtK7yHE4Qswa9Zp2y08+cZ
JTBjPQhcuu69RkV55iTn8A7lNpj818skbuuAPP8wtnUJ+Wg5uniCWiif35nwvil1
Z6GzbiDL0M0g5IT7GZ2YxiqGQFhf4/wkqR3uuXpAE/nJlBaMwFrGIvMrCnC2kNVC
tJRgv6d8hPeEw5LRJ7WAu1Mk2LacenYNvWm1AlJocNQcaWmr/jSs74BhxgkfAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwxmTxFHfaOKOA
cr7H3NOdJTVR9TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84a1NITFVXY3I5RTZiUmlxbUt1QW1IZE1hZFV1eDRhVjFL
Uk1ERVR2UDZuZS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOGtTSExVV2NyOUU2YlJpcW1LdUFtSGRNYWRVdXg0YVYx
S1JNREVUdlA2bmUvMC8zMEM2NjRGMTE0NzdEQTM4QTM4MDcyQkVDN0RDRDM5RDI1
MzU1MUY1Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKn+RAwDQQCAAIwBwMF
ACgEK4gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAvGMA0GCSqGSIb3DQEBCwUA
A4IBAQCtVRT1qxA8KQBKRulbui+SmbLpx7WUaqTbVCDjuHZcKrWqeiuW4huJ362+
kc2SI1tOfW6SIzY5IYCrpRKIqGiike8gAO+DmcXSJRaSCvm4BZPiANYWKWMdWwU8
uyhQH1mqoOurkkVfk9Cy802+fdyTk4CXFGR3yOrVjkYSixz9WI5bnAz0evLZA7lA
P0gxvBTSrvEkrjbU5etUI5KnZ9rT+ve+osw+PLs7nbgdeEc6b+7dXisOo3J1vtEK
GUGSI5a0O03oxh5aubOwzsbkPeYsl6h71UQTjhMoVDFLsaP7nTB0TjvYnYJutBb5
BwuKzaUhNTdKkNZ90XpjNZWhsbvV
-----END CERTIFICATE-----