Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/30F57650A239663B223900F83E41258B2F2D5DA7.cer
File:                     30F57650A239663B223900F83E41258B2F2D5DA7.cer (raw, json)
Hash identifier:          ezN+mx/14gqDipWRed1LosZOb5bx/LNu2zHPSOcZj34=
Subject key identifier:   30:F5:76:50:A2:39:66:3B:22:39:00:F8:3E:41:25:8B:2F:2D:5D:A7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0FA357F4B181A287FF49748929C32336AEF51B19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/30F57650A239663B223900F83E41258B2F2D5DA7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 May 2023 19:14:00 +0000
Certificate not after:    Thu 09 May 2024 19:19:00 +0000
Subordinate resources:    AS: 262424
                          IP: 177.44.128.0/20
                          IP: 2804:6164::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a3:57:f4:b1:81:a2:87:ff:49:74:89:29:c3:23:36:ae:f5:1b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 11 19:14:00 2023 GMT
            Not After : May  9 19:19:00 2024 GMT
        Subject: CN=30F57650A239663B223900F83E41258B2F2D5DA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ef:21:3b:46:7c:7c:37:94:96:63:39:57:3b:
                    5b:22:92:ab:b7:0b:96:47:48:5f:89:78:80:72:46:
                    ef:1f:9b:05:12:54:37:4c:e2:22:64:59:fa:af:da:
                    54:c2:4e:c8:2a:40:38:2b:a4:44:c5:df:6c:1a:ea:
                    22:3b:77:8c:36:06:c8:05:58:44:19:d3:fc:a3:f7:
                    35:e2:39:0d:03:21:8e:f4:13:9a:54:95:3a:ca:b8:
                    d1:70:d8:ba:7a:6b:9c:4e:74:08:e9:60:6d:95:69:
                    58:3e:78:ab:0e:d7:90:b9:ea:c5:90:63:2f:22:24:
                    f1:49:20:65:93:f3:61:48:21:7c:8f:17:b2:56:f0:
                    f8:de:b3:ba:10:94:2f:4e:ef:79:fb:2c:a3:1a:06:
                    d2:93:ba:92:03:4d:06:ac:c7:7e:18:b4:ad:f2:fa:
                    10:f8:37:39:34:08:01:9e:f7:5b:e7:8f:97:7c:f3:
                    e0:b3:bb:8e:63:a1:12:3d:ea:fa:51:7f:c2:16:d8:
                    d8:50:d1:f4:72:a9:ce:24:60:10:bc:3c:45:b9:d0:
                    68:44:8c:55:da:c5:44:26:fc:54:15:00:71:8c:3f:
                    3e:ef:48:17:7e:e4:03:21:5d:b0:7b:32:23:15:9a:
                    8b:22:81:40:86:7f:d1:51:ee:47:36:3e:b4:1f:2b:
                    f8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:F5:76:50:A2:39:66:3B:22:39:00:F8:3E:41:25:8B:2F:2D:5D:A7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/30F57650A239663B223900F83E41258B2F2D5DA7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.128.0/20
                IPv6:
                  2804:6164::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262424

    Signature Algorithm: sha256WithRSAEncryption
         33:b7:df:33:9e:46:f9:cf:14:41:cb:e3:22:7f:71:7c:30:b0:
         18:d5:2d:d6:d6:46:2e:1b:15:0d:02:14:4f:56:87:2c:3e:60:
         29:69:88:74:ed:e5:1a:20:67:c4:c8:1e:47:da:07:69:ae:ee:
         b6:d2:fc:a8:51:21:ac:05:f1:3e:48:f1:fc:32:69:eb:db:56:
         86:1c:b2:6d:42:05:5c:bc:93:42:48:0d:8f:a7:7f:be:56:f4:
         e0:87:8a:3e:b3:30:d4:02:ad:e6:11:e2:27:b0:fa:d9:3b:a6:
         aa:be:37:02:e2:e7:7f:35:39:e9:ff:e5:41:da:35:62:4e:6b:
         5d:33:1d:5a:79:22:85:1d:69:4d:b4:cd:f5:08:2f:32:5b:bf:
         38:60:26:6e:f3:5c:5b:78:53:0d:5c:52:71:a3:7f:71:74:62:
         87:d5:0b:79:85:44:fe:84:87:8d:48:f0:c2:10:f1:30:59:1b:
         52:f6:e3:fc:fd:59:0f:f5:5e:f6:06:d3:7c:aa:a6:a9:1e:43:
         fa:83:45:1f:d4:87:4a:a2:39:d5:0c:5a:c8:9d:b8:d4:48:80:
         38:c5:8b:72:81:d3:35:b9:14:21:b3:a8:cc:00:cf:aa:c2:ae:
         d2:77:97:6b:f9:29:b5:08:56:5c:c9:ca:a3:7e:ec:ec:4d:a9:
         24:76:c4:17
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUD6NX9LGBoof/SXSJKcMjNq71GxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MTExOTE0MDBaFw0yNDA1MDkxOTE5MDBaMDMxMTAvBgNV
BAMTKDMwRjU3NjUwQTIzOTY2M0IyMjM5MDBGODNFNDEyNThCMkYyRDVEQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi7yE7Rnx8N5SWYzlXO1sikqu3
C5ZHSF+JeIByRu8fmwUSVDdM4iJkWfqv2lTCTsgqQDgrpETF32wa6iI7d4w2BsgF
WEQZ0/yj9zXiOQ0DIY70E5pUlTrKuNFw2Lp6a5xOdAjpYG2VaVg+eKsO15C56sWQ
Yy8iJPFJIGWT82FIIXyPF7JW8Pjes7oQlC9O73n7LKMaBtKTupIDTQasx34YtK3y
+hD4Nzk0CAGe91vnj5d88+Czu45joRI96vpRf8IW2NhQ0fRyqc4kYBC8PEW50GhE
jFXaxUQm/FQVAHGMPz7vSBd+5AMhXbB7MiMVmosigUCGf9FR7kc2PrQfK/h5AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQw9XZQojlmOyI5
APg+QSWLLy1dpzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81dXVEa3FLeGVTNHZheXJSeHBWUGlmb2NtWlZWeG5WeVJV
akZhdU5WUlRCQi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81dXVEa3FLeGVTNHZheXJSeHBWUGlmb2NtWlZWeG5WeVJV
akZhdU5WUlRCQi8wLzMwRjU3NjUwQTIzOTY2M0IyMjM5MDBGODNFNDEyNThCMkYy
RDVEQTcubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBLEsgDANBAIAAjAHAwUA
KARhZDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEARgwDQYJKoZIhvcNAQELBQAD
ggEBADO33zOeRvnPFEHL4yJ/cXwwsBjVLdbWRi4bFQ0CFE9Whyw+YClpiHTt5Rog
Z8TIHkfaB2mu7rbS/KhRIawF8T5I8fwyaevbVoYcsm1CBVy8k0JIDY+nf75W9OCH
ij6zMNQCreYR4iew+tk7pqq+NwLi5381Oen/5UHaNWJOa10zHVp5IoUdaU20zfUI
LzJbvzhgJm7zXFt4Uw1cUnGjf3F0YofVC3mFRP6Eh41I8MIQ8TBZG1L24/z9WQ/1
XvYG03yqpqkeQ/qDRR/Uh0qiOdUMWsiduNRIgDjFi3KB0zW5FCGzqMwAz6rCrtJ3
l2v5KbUIVlzJyqN+7OxNqSR2xBc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org