Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A30A0ECD0FEC9199E60A341F06C27680368DCE09.cer
File:                     A30A0ECD0FEC9199E60A341F06C27680368DCE09.cer (raw, json)
Hash identifier:          xosGKWnk1UFRBYkpOLI3p0DI6UuiCLdVBBQ2Jp9GSP0=
Subject key identifier:   A3:0A:0E:CD:0F:EC:91:99:E6:0A:34:1F:06:C2:76:80:36:8D:CE:09
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       19BB096BF6D007DFD2D435877F739EC94C85BDF1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/A30A0ECD0FEC9199E60A341F06C27680368DCE09.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Jul 2023 17:34:34 +0000
Certificate not after:    Wed 03 Jul 2024 17:39:34 +0000
Subordinate resources:    AS: 266327
                          IP: 170.238.160.0/22
                          IP: 2804:361c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:bb:09:6b:f6:d0:07:df:d2:d4:35:87:7f:73:9e:c9:4c:85:bd:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  5 17:34:34 2023 GMT
            Not After : Jul  3 17:39:34 2024 GMT
        Subject: CN=A30A0ECD0FEC9199E60A341F06C27680368DCE09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c6:f9:94:32:83:85:00:37:c1:de:3f:dd:87:
                    e5:63:61:0e:00:47:aa:b9:7b:8a:e0:53:0f:66:64:
                    b2:8a:9d:3d:62:9b:3b:c3:6e:0f:19:fc:67:c3:1f:
                    53:0d:ec:da:c4:3b:87:4a:aa:3a:30:f0:02:d2:6f:
                    1e:a2:8b:d1:c5:c7:d3:7c:df:03:9e:f0:e6:7f:3d:
                    d0:02:4d:59:fb:0d:c4:82:a4:7c:0d:83:a5:41:49:
                    3d:19:86:e8:3f:62:fd:8e:a0:01:20:3b:77:8e:83:
                    70:58:a6:3e:64:74:c6:d0:82:e8:46:70:85:c7:f9:
                    62:c7:e0:26:d5:21:39:db:01:a2:fb:98:90:6d:58:
                    5b:93:26:24:eb:0f:25:96:c8:a2:89:45:03:00:01:
                    b9:b7:c1:6a:20:88:8f:f3:2d:d6:68:c1:af:bc:92:
                    a9:07:25:0e:45:87:69:3d:05:4b:ca:9a:b2:39:06:
                    91:20:67:d1:0e:92:15:8b:be:d0:5a:c9:50:72:15:
                    0e:2a:9c:2c:1b:08:fd:69:a8:16:ad:ef:46:20:66:
                    77:71:e7:a4:94:5d:f3:32:f3:e9:f9:07:80:e2:48:
                    07:52:26:57:6e:a8:fa:80:ad:cb:45:23:36:72:55:
                    5b:56:0f:19:57:58:a7:94:e9:b6:61:15:fc:25:a1:
                    d9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:0A:0E:CD:0F:EC:91:99:E6:0A:34:1F:06:C2:76:80:36:8D:CE:09
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/A30A0ECD0FEC9199E60A341F06C27680368DCE09.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.160.0/22
                IPv6:
                  2804:361c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266327

    Signature Algorithm: sha256WithRSAEncryption
         28:04:e2:fc:ae:2b:26:db:54:e8:d4:91:f6:01:30:0f:cc:a3:
         5c:27:1b:e8:f1:1f:8e:e7:61:17:7e:e0:1d:16:16:9b:05:0c:
         7a:b7:a0:5c:ea:68:a1:46:93:c2:ae:ad:7a:fd:ab:14:f7:f9:
         dd:94:b4:e6:ca:65:d5:8c:b9:4f:89:3b:15:1f:8c:3b:0a:dc:
         2d:c8:e4:13:d6:e0:e2:8f:51:22:73:71:f7:7c:a7:53:f1:72:
         c2:b9:d2:d8:ec:ff:3b:59:70:39:4c:98:3d:63:d6:fe:9d:71:
         f9:a2:f3:f2:60:f8:c3:5d:fd:4d:14:7b:6b:72:b1:7f:8e:8e:
         0a:61:87:2d:91:8e:e9:19:4d:0e:cb:d6:8c:2d:5d:7e:d3:94:
         0a:0e:94:0c:9c:ae:3e:fe:ac:b2:6b:4f:4f:14:4f:85:61:3a:
         6e:07:60:67:cd:22:2d:df:fb:43:a5:05:65:b1:a9:22:c4:fe:
         5e:ca:72:1b:eb:c9:1a:13:e6:eb:8e:13:eb:33:6d:fd:a7:57:
         1b:fe:1d:9b:20:6c:96:2c:3c:c1:91:54:a9:aa:91:b6:27:14:
         d5:97:bb:ec:2a:e4:b9:fa:fc:69:19:66:3e:13:d1:a8:e9:2b:
         78:fb:5c:11:ae:fa:14:bc:c7:2c:f4:0b:2d:08:cd:3d:cf:f8:
         ec:15:58:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org