Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8C30A2F70197AA88CF9945D744AAD9D2B364C10F.cer
File:                     8C30A2F70197AA88CF9945D744AAD9D2B364C10F.cer (raw, json)
Hash identifier:          duYr3Z3TzrgZpRLlOE7FEyVGZcvaie3WP7im4fKIUNs=
Subject key identifier:   8C:30:A2:F7:01:97:AA:88:CF:99:45:D7:44:AA:D9:D2:B3:64:C1:0F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       28E45D071D9A7B737DA8D2E743F790C9BF6EEBA2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4kiFrMQP6ge1FNbTSgHzQ82ok3q2SgUG3KusZws3dBES/0/8C30A2F70197AA88CF9945D744AAD9D2B364C10F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4kiFrMQP6ge1FNbTSgHzQ82ok3q2SgUG3KusZws3dBES/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 18 Nov 2022 00:48:55 +0000
Certificate not after:    Fri 17 Nov 2023 00:53:55 +0000
Subordinate resources:    AS: 268255
                          IP: 45.236.152.0/22
                          IP: 2804:4e58::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e4:5d:07:1d:9a:7b:73:7d:a8:d2:e7:43:f7:90:c9:bf:6e:eb:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 18 00:48:55 2022 GMT
            Not After : Nov 17 00:53:55 2023 GMT
        Subject: CN=8C30A2F70197AA88CF9945D744AAD9D2B364C10F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:cb:08:dd:0f:17:0e:e4:31:e5:51:9d:15:
                    89:1b:34:84:dd:2a:6f:dd:6f:54:2b:7f:2d:c9:20:
                    9a:e8:c2:4a:48:5c:b1:29:c8:22:39:2a:03:59:34:
                    cc:60:62:f1:ca:45:ea:c6:09:9d:81:92:bb:d2:a0:
                    aa:0b:dc:4a:12:e4:67:bf:0a:f3:c3:57:26:b8:a8:
                    0f:1c:3c:1e:b8:9b:9c:00:ee:05:3c:ec:33:3a:46:
                    a8:6f:6e:1a:10:45:19:93:c8:72:c8:ea:59:70:37:
                    5d:7c:3a:27:67:a8:70:d8:28:ac:ba:31:1f:7b:fa:
                    72:10:3b:1d:c4:8d:69:81:52:12:5c:e2:ec:4e:7c:
                    e6:7d:71:f5:62:f9:2c:8e:83:43:80:2c:38:cf:4d:
                    6e:4c:dc:00:79:50:2e:6f:24:57:81:9f:61:02:d0:
                    2a:e8:40:11:77:80:d2:e9:49:6e:27:94:18:27:77:
                    20:e8:92:61:c2:6b:80:dd:13:26:80:d2:c2:24:b7:
                    1a:c5:2a:f3:12:58:40:2c:cf:0c:f0:54:58:cd:ca:
                    8e:11:35:6e:ac:c6:7d:cc:2b:7b:69:29:c2:75:6e:
                    31:95:d8:20:93:42:ae:cd:f2:a6:bf:ee:e1:3c:ed:
                    f5:66:f0:5a:27:d8:84:6a:b1:54:a0:d8:f1:64:11:
                    71:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:30:A2:F7:01:97:AA:88:CF:99:45:D7:44:AA:D9:D2:B3:64:C1:0F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4kiFrMQP6ge1FNbTSgHzQ82ok3q2SgUG3KusZws3dBES/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4kiFrMQP6ge1FNbTSgHzQ82ok3q2SgUG3KusZws3dBES/0/8C30A2F70197AA88CF9945D744AAD9D2B364C10F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.152.0/22
                IPv6:
                  2804:4e58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268255

    Signature Algorithm: sha256WithRSAEncryption
         59:5f:9a:21:a7:3d:83:15:bc:ee:f1:0a:e2:f7:ab:03:f8:49:
         90:b2:db:52:50:d4:bb:87:3a:85:1f:13:f8:46:79:ef:1a:42:
         de:ac:fa:42:c8:30:98:bc:86:f3:4b:7e:78:e6:8b:7f:e9:dd:
         7a:f5:55:f0:d3:bd:7f:87:7c:cb:be:54:3d:bf:56:4d:70:62:
         e6:3d:eb:a2:59:25:1a:f9:60:ef:20:04:37:09:68:d1:b2:34:
         5c:a5:06:dc:96:c2:79:da:8e:d5:bb:f5:68:ee:6c:df:d3:fc:
         28:d4:9b:2b:c5:61:79:7e:da:20:b4:d2:6f:06:db:c0:14:ef:
         db:e9:5d:9f:bb:fd:7e:25:54:04:76:68:07:8c:06:2b:7b:3c:
         84:8c:7d:45:fa:40:67:47:7a:0c:f8:79:ef:17:d6:0f:fc:86:
         48:ca:b4:e7:35:18:5a:67:51:6e:c2:bc:af:d7:3d:b7:e7:c8:
         03:5e:46:cd:03:a6:6e:9b:a3:25:f4:6b:93:e3:7a:6a:64:08:
         9f:79:80:35:77:19:8d:19:98:18:ec:e1:4c:5b:40:f2:a2:84:
         c0:af:fd:e3:ce:ff:07:7d:93:5d:a8:02:08:f6:9d:9d:8b:45:
         ce:7a:93:a3:a9:67:5d:0f:22:2c:0b:1e:81:33:d6:5f:fe:90:
         41:ec:62:9b
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUKORdBx2ae3N9qNLnQ/eQyb9u66IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjExMTgwMDQ4NTVaFw0yMzExMTcwMDUzNTVaMDMxMTAvBgNV
BAMTKDhDMzBBMkY3MDE5N0FBODhDRjk5NDVENzQ0QUFEOUQyQjM2NEMxMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC798sI3Q8XDuQx5VGdFYkbNITd
Km/db1Qrfy3JIJrowkpIXLEpyCI5KgNZNMxgYvHKRerGCZ2BkrvSoKoL3EoS5Ge/
CvPDVya4qA8cPB64m5wA7gU87DM6RqhvbhoQRRmTyHLI6llwN118OidnqHDYKKy6
MR97+nIQOx3EjWmBUhJc4uxOfOZ9cfVi+SyOg0OALDjPTW5M3AB5UC5vJFeBn2EC
0CroQBF3gNLpSW4nlBgndyDokmHCa4DdEyaA0sIktxrFKvMSWEAszwzwVFjNyo4R
NW6sxn3MK3tpKcJ1bjGV2CCTQq7N8qa/7uE87fVm8Fon2IRqsVSg2PFkEXHrAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSMMKL3AZeqiM+Z
RddEqtnSs2TBDzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80a2lGck1RUDZnZTFGTmJUU2dIelE4Mm9rM3EyU2dVRzNL
dXNad3MzZEJFUy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80a2lGck1RUDZnZTFGTmJUU2dIelE4Mm9rM3EyU2dVRzNL
dXNad3MzZEJFUy8wLzhDMzBBMkY3MDE5N0FBODhDRjk5NDVENzQ0QUFEOUQyQjM2
NEMxMEYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3smDANBAIAAjAHAwUA
KAROWDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEF98wDQYJKoZIhvcNAQELBQAD
ggEBAFlfmiGnPYMVvO7xCuL3qwP4SZCy21JQ1LuHOoUfE/hGee8aQt6s+kLIMJi8
hvNLfnjmi3/p3Xr1VfDTvX+HfMu+VD2/Vk1wYuY966JZJRr5YO8gBDcJaNGyNFyl
BtyWwnnajtW79WjubN/T/CjUmyvFYXl+2iC00m8G28AU79vpXZ+7/X4lVAR2aAeM
Bit7PISMfUX6QGdHegz4ee8X1g/8hkjKtOc1GFpnUW7CvK/XPbfnyANeRs0Dpm6b
oyX0a5PjempkCJ95gDV3GY0ZmBjs4UxbQPKihMCv/ePO/wd9k12oAgj2nZ2LRc56
k6OpZ10PIiwLHoEz1l/+kEHsYps=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org