Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E.cer
File:                     2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E.cer (raw, json)
Hash identifier:          MpY5RW08yHzIhqMT6DlxhDH2KSkstqaNpjvtr81HWGw=
Subject key identifier:   2A:0B:42:E6:62:55:DE:DB:DF:5C:2C:8E:C8:F0:A1:F9:FD:66:07:9E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       429C6C69190778E9BEAE4D8156B0F97A81A25CDC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 26 Aug 2023 01:52:16 +0000
Certificate not after:    Sat 24 Aug 2024 01:57:16 +0000
Subordinate resources:    AS: 264205
                          IP: 138.99.152.0/22
                          IP: 2804:2428::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9c:6c:69:19:07:78:e9:be:ae:4d:81:56:b0:f9:7a:81:a2:5c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 26 01:52:16 2023 GMT
            Not After : Aug 24 01:57:16 2024 GMT
        Subject: CN=2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:77:a7:84:4e:5f:e6:c7:65:46:b5:6d:77:
                    aa:de:ef:05:dd:ad:d4:3b:aa:c1:5a:cb:f9:44:05:
                    7f:78:91:8c:45:7f:2a:57:3d:b7:e0:ed:89:ea:de:
                    bb:4e:8d:d7:26:36:a0:d2:6e:96:ff:65:e9:5f:64:
                    51:03:d1:1e:f5:8e:fe:39:f5:ac:7c:c1:da:ab:fc:
                    42:65:e9:cb:49:e5:09:d5:7e:07:1f:a2:4e:8f:22:
                    de:41:ad:55:b2:9b:0d:d7:2f:b8:84:1f:12:eb:c2:
                    64:f8:6a:b4:21:0e:b9:16:68:96:5c:3c:e5:c7:14:
                    c4:8e:84:11:2e:2a:e9:2f:f3:d1:71:55:5b:02:21:
                    5b:92:c9:45:fe:c8:0e:22:1a:4b:55:fc:67:f3:60:
                    f6:ef:e9:3a:ee:40:c3:10:cb:67:d3:f6:64:ca:f6:
                    78:a8:c7:4c:9f:05:f4:2e:1f:e6:49:cf:85:fd:fa:
                    0f:a5:de:6b:e6:5e:b0:92:f7:3a:de:78:51:fd:83:
                    b8:5b:9c:95:76:3a:43:c7:76:af:f3:72:8b:f0:22:
                    74:33:81:7c:9b:9b:0b:14:aa:4e:8d:83:9d:af:7b:
                    39:55:1c:c0:98:b3:9f:52:6b:b9:e2:73:33:d2:f4:
                    82:30:48:fd:2b:24:39:91:a5:dd:7d:74:a6:29:ef:
                    7c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:0B:42:E6:62:55:DE:DB:DF:5C:2C:8E:C8:F0:A1:F9:FD:66:07:9E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/2A0B42E66255DEDBDF5C2C8EC8F0A1F9FD66079E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.152.0/22
                IPv6:
                  2804:2428::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264205

    Signature Algorithm: sha256WithRSAEncryption
         47:70:bf:b7:b6:74:00:88:c2:02:14:5d:d2:15:89:d6:99:16:
         3f:50:30:bd:39:73:96:25:36:48:b4:04:f0:d7:d0:82:35:d2:
         40:36:3b:65:ce:f2:6f:fb:e2:98:8c:5a:b9:96:0e:8b:10:f7:
         cb:41:c6:65:0c:95:5c:57:b1:14:19:b9:c4:72:c9:12:11:eb:
         5e:94:06:1b:0f:9f:d0:83:f5:3e:a1:62:4d:f7:a4:5f:0e:18:
         22:35:52:42:95:39:8e:32:14:76:ee:64:d8:7f:cf:e5:35:dc:
         8e:c0:ca:29:d3:59:ad:ce:22:8d:54:cd:f5:ba:6a:a0:75:ca:
         68:97:60:3b:a2:e3:79:c4:bf:f7:11:91:fc:ab:47:d9:68:2a:
         b7:f0:74:bb:0d:7b:9c:be:f5:01:7e:6e:4b:fd:3f:1f:e2:69:
         d3:96:6e:7d:20:52:33:06:5b:63:80:eb:7f:72:ce:cd:28:4d:
         4b:73:e3:78:ef:c2:85:16:40:1a:47:d0:ea:77:94:ef:60:72:
         1a:23:74:84:a3:24:9d:84:c2:8b:37:e5:bb:32:25:4f:1c:81:
         9d:c8:f4:d8:d3:5b:55:58:53:0c:60:71:94:1d:18:cb:17:69:
         35:c9:8b:a4:22:9e:94:10:cb:f7:4d:c7:d9:6a:7c:39:86:0d:
         42:4d:e6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org