Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/30EC14818870F287A0496328742C6ECE8AD0FA82.cer
File:                     30EC14818870F287A0496328742C6ECE8AD0FA82.cer (raw, json)
Hash identifier:          eWe0onMtcdNpAYW/voyHJ1WREGxKwH1pAAOu/3NZb6U=
Subject key identifier:   30:EC:14:81:88:70:F2:87:A0:49:63:28:74:2C:6E:CE:8A:D0:FA:82
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6B6BA02CF5B0ED04576B1F585569528C099E52CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/30EC14818870F287A0496328742C6ECE8AD0FA82.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 Jan 2024 13:12:05 +0000
Certificate not after:    Wed 29 Jan 2025 13:17:05 +0000
Subordinate resources:    AS: 262989
                          IP: 186.216.208.0/21
                          IP: 189.84.136.0/21
                          IP: 190.103.160.0/20
                          IP: 2804:9c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6b:a0:2c:f5:b0:ed:04:57:6b:1f:58:55:69:52:8c:09:9e:52:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 31 13:12:05 2024 GMT
            Not After : Jan 29 13:17:05 2025 GMT
        Subject: CN=30EC14818870F287A0496328742C6ECE8AD0FA82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:28:32:3a:66:4c:6d:1b:c1:99:25:e6:33:
                    a3:d7:45:fa:c5:b7:53:34:6a:d1:31:df:e6:f8:c8:
                    22:f3:f0:bc:9b:e7:a3:f5:f4:a0:3b:0d:5a:70:9c:
                    b9:3c:0b:7a:a7:c6:3c:ee:cd:31:86:15:a6:3d:21:
                    4b:2f:d3:e1:c6:c9:49:4f:5b:d9:a6:87:23:35:0f:
                    f7:ad:fb:94:65:99:cc:19:11:d2:66:70:93:63:b7:
                    af:a4:f3:ca:71:29:76:cc:2f:89:e5:29:53:89:ed:
                    67:ed:29:5c:a9:7a:25:16:0e:20:44:3f:ee:16:24:
                    e9:7c:f8:ef:ea:1d:78:ce:b2:d5:5a:8c:ca:29:54:
                    ca:ba:8d:e7:49:ba:ce:35:46:13:91:9a:58:be:f9:
                    2e:c1:b1:41:27:f1:ba:15:09:50:a9:f1:57:2b:3e:
                    fe:ba:6d:c5:3f:9f:f1:91:07:c3:41:2b:3a:b2:23:
                    7a:75:19:ad:8d:c5:36:75:58:59:82:c6:c6:57:61:
                    47:16:9a:b2:5a:ed:a2:3b:e7:0c:b9:23:d3:05:74:
                    b5:e8:6b:ad:51:95:e5:7a:97:46:a0:30:f1:0a:fd:
                    8b:c8:69:e7:aa:9d:d1:ae:92:75:43:57:54:ee:21:
                    af:69:ca:2f:58:1c:c3:15:74:d7:76:79:76:f6:83:
                    e5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:EC:14:81:88:70:F2:87:A0:49:63:28:74:2C:6E:CE:8A:D0:FA:82
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/30EC14818870F287A0496328742C6ECE8AD0FA82.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.208.0/21
                  189.84.136.0/21
                  190.103.160.0/20
                IPv6:
                  2804:9c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262989

    Signature Algorithm: sha256WithRSAEncryption
         87:1a:51:54:87:bc:cd:ee:04:c7:9c:78:f0:24:4c:54:4f:53:
         42:61:71:88:4c:d4:d3:e7:e6:1b:19:50:3b:c2:ba:e0:36:eb:
         13:7f:e4:32:c2:7c:19:5e:33:7c:3a:fe:e3:97:d6:1c:a1:ea:
         a8:a4:78:69:3f:61:5c:71:c0:a8:a3:84:93:19:30:ef:ce:46:
         f6:b3:22:7d:3d:af:53:21:7a:2e:ec:9b:0a:d2:ba:3d:5c:f0:
         27:ee:76:48:f6:61:fa:e3:90:13:d9:c8:e3:c2:21:af:3b:89:
         55:53:b5:cf:f1:d6:70:47:d4:1d:15:66:38:27:1f:46:4e:be:
         0e:a5:dc:91:24:5e:47:5f:db:2d:f6:5b:d1:d3:a5:20:4f:70:
         80:ee:6e:10:62:1a:7e:7b:c4:02:2f:28:bf:42:42:36:94:40:
         7f:c4:4f:f9:c4:17:70:07:e9:ba:f8:04:78:25:8b:40:3c:ee:
         55:ba:5d:9d:bb:f8:b0:23:06:ca:b9:d1:fb:a5:00:8f:db:7f:
         b5:b7:99:2f:9b:c1:80:62:f5:07:58:d5:ee:ac:78:ad:39:ea:
         89:5f:3e:50:4c:ee:80:77:60:26:59:ad:9f:1f:bb:4d:43:0d:
         27:2a:65:d6:f5:49:94:e6:6c:bf:a8:ca:cc:58:ce:fe:88:1d:
         b0:a7:f5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org