Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/002BDE8206BAD81B66C1D4594F9D7BCF512D8E2A.cer
File:                     002BDE8206BAD81B66C1D4594F9D7BCF512D8E2A.cer (raw, json)
Hash identifier:          imeN2ZNTUbzvjZ47U3C6gh/U8J+AE7vq0dLqSjw3BzA=
Subject key identifier:   00:2B:DE:82:06:BA:D8:1B:66:C1:D4:59:4F:9D:7B:CF:51:2D:8E:2A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       14260D595D2AA2979B35508B7DB2A84CC01FA0FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/0/002BDE8206BAD81B66C1D4594F9D7BCF512D8E2A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Nov 2023 09:46:09 +0000
Certificate not after:    Fri 08 Nov 2024 09:51:09 +0000
Subordinate resources:    AS: 270376
                          IP: 190.89.160.0/22
                          IP: 2804:6b14::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:26:0d:59:5d:2a:a2:97:9b:35:50:8b:7d:b2:a8:4c:c0:1f:a0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 10 09:46:09 2023 GMT
            Not After : Nov  8 09:51:09 2024 GMT
        Subject: CN=002BDE8206BAD81B66C1D4594F9D7BCF512D8E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:84:ae:e1:9b:1c:8e:71:b0:2e:d2:86:f4:e7:
                    c6:cf:31:9e:75:78:d9:de:a4:d4:6d:b2:6d:d8:1b:
                    87:40:81:a7:47:ce:14:dc:82:a6:b7:8d:03:08:4b:
                    8e:ca:c7:03:61:40:29:79:33:17:3e:58:f2:41:9c:
                    1d:6f:aa:f8:af:1b:10:77:17:f7:5a:4a:ac:14:da:
                    9d:90:02:d4:91:31:55:48:43:1f:03:0f:86:24:3e:
                    46:2b:8f:21:69:c5:fd:0b:53:e0:29:38:e7:cd:39:
                    b9:e8:50:9b:f4:fa:b3:f4:77:3f:e1:ef:9d:2a:cb:
                    19:5c:d0:df:f0:55:75:f0:b6:db:2c:c6:3a:46:dc:
                    b2:97:0f:c1:ba:40:e4:ba:cd:3c:0f:26:94:65:14:
                    1a:f7:f1:b0:22:e6:bc:8d:22:8a:9b:e5:ed:87:df:
                    dc:44:a6:34:3e:43:0a:02:8c:19:98:bd:cd:ed:0f:
                    49:1d:ad:2e:93:9f:1a:91:47:d7:cd:04:c6:ab:81:
                    d5:5f:66:36:63:f0:db:06:59:bf:26:41:99:28:8a:
                    64:65:69:01:9f:dc:3a:b6:a7:fc:18:80:c8:39:29:
                    80:1e:2d:05:cb:02:9f:4a:c6:88:ff:8a:47:1c:67:
                    8d:d8:23:75:bb:75:9d:a5:e1:85:8d:f6:ba:b3:65:
                    88:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:2B:DE:82:06:BA:D8:1B:66:C1:D4:59:4F:9D:7B:CF:51:2D:8E:2A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/0/002BDE8206BAD81B66C1D4594F9D7BCF512D8E2A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.160.0/22
                IPv6:
                  2804:6b14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270376

    Signature Algorithm: sha256WithRSAEncryption
         b5:c3:e2:3c:e1:19:26:47:3a:41:01:24:19:1e:aa:64:3f:03:
         c6:fd:d0:dd:f4:9a:68:1f:f3:13:21:4a:1d:a8:f1:71:7c:76:
         7a:e4:b5:53:de:2f:0f:2a:16:27:34:87:f8:a0:59:d2:5e:b9:
         6e:8f:c2:0d:9d:99:84:4c:9f:c3:6f:06:07:76:0b:43:e0:17:
         cf:4e:dc:73:4a:a4:1c:d0:7e:12:7b:c8:11:3e:f7:df:67:39:
         3b:7d:26:bc:b5:a5:4a:b2:2d:eb:02:66:e1:8c:5b:12:81:06:
         ed:a3:df:3e:c4:ac:07:a4:1f:a1:30:d5:31:a1:a8:ca:81:4b:
         1d:64:c9:e9:37:a4:f7:cf:84:ba:fa:7e:ec:a8:78:76:ab:87:
         1c:12:24:83:7f:a0:4b:12:c6:86:40:3d:94:80:91:98:cb:58:
         ef:9a:87:2b:77:79:e1:2a:53:dc:8e:20:64:ac:a7:03:82:6a:
         3c:04:7f:85:3f:65:ff:02:48:2d:fc:d7:65:be:76:35:9f:80:
         02:7b:3c:2c:e1:ba:5c:cd:69:92:c0:9e:29:f6:03:c5:3b:fd:
         65:0d:d7:7c:34:12:2d:ec:80:a3:e0:9a:19:05:91:2a:91:b4:
         30:0c:c3:54:6f:4f:f2:26:8a:55:78:80:f7:05:c5:0a:6f:e9:
         71:3c:77:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org