Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AD30B412FE51DB2B109A7EB7F8931FC45C188D54.cer
File:                     AD30B412FE51DB2B109A7EB7F8931FC45C188D54.cer (raw, json)
Hash identifier:          VeJ6rcnHg1QVFrxP6fYxX0MOSXrtJ85+6g/WajwZHjU=
Subject key identifier:   AD:30:B4:12:FE:51:DB:2B:10:9A:7E:B7:F8:93:1F:C4:5C:18:8D:54
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       05BCFC0BB39330AA047A10DBE78E80F8395E5242
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/AD30B412FE51DB2B109A7EB7F8931FC45C188D54.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Jan 2024 18:15:53 +0000
Certificate not after:    Thu 09 Jan 2025 18:20:53 +0000
Subordinate resources:    AS: 271303
                          IP: 200.36.144.0/22
                          IP: 2804:7968::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:bc:fc:0b:b3:93:30:aa:04:7a:10:db:e7:8e:80:f8:39:5e:52:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 11 18:15:53 2024 GMT
            Not After : Jan  9 18:20:53 2025 GMT
        Subject: CN=AD30B412FE51DB2B109A7EB7F8931FC45C188D54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5d:22:bd:02:8e:b9:0a:a8:71:07:69:89:06:
                    43:fe:39:a8:00:75:c7:5c:b3:73:87:e2:aa:86:68:
                    b9:32:6e:17:ef:c1:af:60:5e:20:b8:9b:56:c3:03:
                    83:1a:f3:ef:a0:9c:8a:78:e8:87:b2:83:58:a5:30:
                    7f:89:b9:7d:12:5b:bd:64:52:f1:e7:65:f1:5a:fd:
                    e0:5c:ec:b1:85:3d:3b:8a:1d:ae:dd:2c:f4:83:dd:
                    11:81:06:86:54:4c:01:a9:6a:68:66:d8:54:c1:a7:
                    13:4e:68:2c:2a:01:b8:31:23:fd:30:b4:d3:e2:5c:
                    d8:5b:09:2b:97:63:93:69:73:e3:e6:79:58:36:88:
                    9e:c0:31:48:29:52:98:eb:d8:ed:6a:5f:3e:bf:f6:
                    50:a1:6d:24:49:07:79:31:86:e4:a8:24:20:cf:51:
                    5c:93:d6:ea:44:87:a6:a2:e3:b4:50:2d:37:35:8b:
                    09:20:a0:1a:bf:c1:12:91:85:09:f2:bb:32:6e:b7:
                    57:b6:f4:62:b8:98:a1:81:dd:6b:e5:6f:68:a0:a2:
                    1e:47:f1:bb:17:cd:89:bd:e2:21:84:a2:ab:2e:21:
                    98:ed:32:b1:5d:77:6b:dc:37:36:37:f9:5f:d1:9d:
                    9c:8e:64:0d:6b:48:4e:cd:0e:62:ab:82:a2:3b:28:
                    3c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:30:B4:12:FE:51:DB:2B:10:9A:7E:B7:F8:93:1F:C4:5C:18:8D:54
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EZZ67s7Xii2wu2dGqf9nqdJ7YkQhXKRBaZtjPEhXTj4K/0/AD30B412FE51DB2B109A7EB7F8931FC45C188D54.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.144.0/22
                IPv6:
                  2804:7968::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271303

    Signature Algorithm: sha256WithRSAEncryption
         b5:79:a7:e2:21:75:b1:d4:26:c7:66:44:5e:6a:ed:c3:63:65:
         21:8a:15:7e:4d:2c:d5:5a:ff:63:b5:7b:47:e8:6e:aa:9c:76:
         d0:17:34:5e:9c:d2:39:85:17:09:a0:d5:94:cc:9f:04:e2:53:
         42:ae:d3:f3:e4:c4:6d:a9:b9:a9:d2:63:2c:cc:9c:a4:79:8d:
         9e:6e:66:7c:71:2f:b4:ec:3e:d6:f3:64:c9:ef:a1:9e:59:c8:
         0b:a7:84:57:fa:eb:ab:2d:4b:1a:58:7d:39:3f:f4:01:5c:38:
         73:0c:90:35:d7:64:8e:46:42:fd:0f:70:c3:65:29:c1:49:d3:
         a9:e5:86:19:37:ec:c7:44:ac:b9:0b:bb:b8:57:4f:95:55:a7:
         77:92:f6:16:45:5e:c3:c6:4f:c3:52:a5:43:74:04:be:6e:52:
         16:3d:c0:47:1e:e9:39:66:3b:4d:07:93:80:75:69:f3:19:a5:
         12:d6:1e:78:29:0a:c2:18:db:d6:14:de:3c:96:27:9a:f6:ba:
         8d:b8:41:51:ec:bd:41:9e:39:c4:92:eb:87:7d:6b:77:be:63:
         58:d6:da:dc:e7:31:fb:fd:c9:98:53:4f:62:2c:9f:1a:55:1b:
         f0:c4:1c:6b:9d:a4:42:b5:1a:ee:0b:60:2f:4d:4f:ba:b5:4b:
         7e:21:2f:10
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUBbz8C7OTMKoEehDb546A+DleUkIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMTExODE1NTNaFw0yNTAxMDkxODIwNTNaMDMxMTAvBgNV
BAMTKEFEMzBCNDEyRkU1MURCMkIxMDlBN0VCN0Y4OTMxRkM0NUMxODhENTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYXSK9Ao65CqhxB2mJBkP+OagA
dcdcs3OH4qqGaLkybhfvwa9gXiC4m1bDA4Ma8++gnIp46Ieyg1ilMH+JuX0SW71k
UvHnZfFa/eBc7LGFPTuKHa7dLPSD3RGBBoZUTAGpamhm2FTBpxNOaCwqAbgxI/0w
tNPiXNhbCSuXY5Npc+PmeVg2iJ7AMUgpUpjr2O1qXz6/9lChbSRJB3kxhuSoJCDP
UVyT1upEh6ai47RQLTc1iwkgoBq/wRKRhQnyuzJut1e29GK4mKGB3Wvlb2igoh5H
8bsXzYm94iGEoqsuIZjtMrFdd2vcNzY3+V/RnZyOZA1rSE7NDmKrgqI7KDzpAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBStMLQS/lHbKxCa
frf4kx/EXBiNVDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FWlo2N3M3WGlpMnd1MmRHcWY5bnFkSjdZa1FoWEtSQmFa
dGpQRWhYVGo0Sy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRVpaNjdzN1hpaTJ3dTJkR3FmOW5xZEo3WWtRaFhLUkJh
WnRqUEVoWFRqNEsvMC9BRDMwQjQxMkZFNTFEQjJCMTA5QTdFQjdGODkzMUZDNDVD
MTg4RDU0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALIJJAwDQQCAAIwBwMF
ACgEeWgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCPHMA0GCSqGSIb3DQEBCwUA
A4IBAQC1eafiIXWx1CbHZkReau3DY2UhihV+TSzVWv9jtXtH6G6qnHbQFzRenNI5
hRcJoNWUzJ8E4lNCrtPz5MRtqbmp0mMszJykeY2ebmZ8cS+07D7W82TJ76GeWcgL
p4RX+uurLUsaWH05P/QBXDhzDJA112SORkL9D3DDZSnBSdOp5YYZN+zHRKy5C7u4
V0+VVad3kvYWRV7Dxk/DUqVDdAS+blIWPcBHHuk5ZjtNB5OAdWnzGaUS1h54KQrC
GNvWFN48liea9rqNuEFR7L1BnjnEkuuHfWt3vmNY1trc5zH7/cmYU09iLJ8aVRvw
xBxrnaRCtRruC2AvTU+6tUt+IS8Q
-----END CERTIFICATE-----