Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2DF847B4E24E25C4F912265E1F0DA4AA5881CE56.cer
File:                     2DF847B4E24E25C4F912265E1F0DA4AA5881CE56.cer (raw, json)
Hash identifier:          29kYAsSC0t6aVDFBvtPyAI9fwxrcOpy5GaRH4TaazqQ=
Subject key identifier:   2D:F8:47:B4:E2:4E:25:C4:F9:12:26:5E:1F:0D:A4:AA:58:81:CE:56
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       19EF94F598375E12588E92C54B8F2234C844E623
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/2DF847B4E24E25C4F912265E1F0DA4AA5881CE56.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Aug 2023 10:11:42 +0000
Certificate not after:    Mon 19 Aug 2024 10:16:42 +0000
Subordinate resources:    AS: 268878
                          IP: 45.174.16.0/22
                          IP: 2804:5bf0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ef:94:f5:98:37:5e:12:58:8e:92:c5:4b:8f:22:34:c8:44:e6:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 21 10:11:42 2023 GMT
            Not After : Aug 19 10:16:42 2024 GMT
        Subject: CN=2DF847B4E24E25C4F912265E1F0DA4AA5881CE56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:35:dc:99:a5:67:1c:cd:c4:21:9b:00:c4:f4:
                    d7:f7:d2:71:be:bd:53:94:ff:b4:0f:b9:2c:21:f7:
                    f7:28:0b:91:35:fc:96:4b:fb:aa:d1:97:ff:bb:b8:
                    2f:e1:10:a2:d9:7f:ae:62:70:19:b0:32:37:e8:31:
                    b8:4d:6d:d2:6b:06:07:85:15:7a:90:a4:ee:bf:3b:
                    df:1b:31:b9:a4:46:29:01:d1:0a:f6:db:a3:35:51:
                    44:a2:9e:ea:aa:67:24:8c:21:45:e4:df:e1:b4:34:
                    02:35:41:e5:e0:01:5c:df:3c:00:3a:1b:28:aa:af:
                    bc:a3:ea:39:03:1c:db:96:a6:23:43:88:db:80:7b:
                    63:35:d9:15:6b:b4:49:f6:ee:45:87:3b:e2:9f:71:
                    9e:87:8b:42:19:40:b5:7c:47:ef:2e:4c:38:03:23:
                    2f:98:48:4a:10:84:16:a1:4d:9d:2f:de:f0:c6:41:
                    34:89:f4:39:1a:a8:18:ef:25:3a:23:6a:aa:71:58:
                    de:5b:f6:a6:07:bc:fd:96:4d:e6:d5:63:87:22:8f:
                    04:0c:a4:4b:f3:f7:1f:12:23:df:6b:7e:93:99:a8:
                    a0:ea:ad:8c:1a:7a:c4:f6:43:a3:04:df:91:a4:40:
                    bc:1e:f8:bb:d7:02:58:1a:1b:bf:41:72:f7:5e:a0:
                    cd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2D:F8:47:B4:E2:4E:25:C4:F9:12:26:5E:1F:0D:A4:AA:58:81:CE:56
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/2DF847B4E24E25C4F912265E1F0DA4AA5881CE56.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.16.0/22
                IPv6:
                  2804:5bf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268878

    Signature Algorithm: sha256WithRSAEncryption
         ac:cb:23:6c:c5:b7:01:ba:56:cb:5f:6b:cb:dc:b0:22:ff:2d:
         4f:88:4d:84:5a:e2:84:a1:f4:b1:c1:10:f9:4d:7e:be:04:5f:
         bc:1e:66:a9:34:ab:52:57:27:6e:b6:55:f1:34:23:7b:cb:c2:
         a7:fb:85:2b:51:f4:e6:d8:1e:ad:9c:16:86:21:29:87:b0:9f:
         a0:c6:5f:15:57:bf:4a:ca:b3:99:fa:eb:0a:a9:f3:13:b8:f4:
         9a:a5:7e:e8:e0:17:85:74:57:04:7f:2c:59:9e:73:b6:a4:30:
         31:99:e0:da:66:40:33:7f:09:78:3a:e2:7c:f7:3a:1f:39:d3:
         66:46:e8:ad:ef:26:ef:ec:0a:23:f7:52:57:85:2e:da:da:2a:
         86:02:59:d6:90:0b:34:e6:c4:5a:70:5c:42:82:4b:26:b8:0b:
         68:4d:a9:37:1c:d9:92:40:7e:7f:72:59:1d:3b:5b:c6:11:1d:
         bd:5b:0a:ee:38:90:9f:e4:68:42:ec:e5:07:c0:2d:55:e4:65:
         8c:85:15:3e:6c:ab:7d:46:02:21:1f:09:64:ff:33:59:80:32:
         34:aa:bf:d2:7d:84:f8:4e:b2:c6:52:a9:05:4d:ff:34:ee:e9:
         97:75:e4:3d:85:c7:68:32:b5:c1:e0:b9:70:9a:5e:b2:fa:18:
         48:b3:f3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org