Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2A0C4065352FA29FE69D81683D46C7FAE700B8B0.cer
File:                     2A0C4065352FA29FE69D81683D46C7FAE700B8B0.cer (raw, json)
Hash identifier:          zf8yRguOvPTxCjgP04KAl8fAoYx2gx3fploVg/sFtLI=
Subject key identifier:   2A:0C:40:65:35:2F:A2:9F:E6:9D:81:68:3D:46:C7:FA:E7:00:B8:B0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       45ECF41B61B9FCB136D8D450949C91E168D96D22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/2A0C4065352FA29FE69D81683D46C7FAE700B8B0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Nov 2023 12:01:57 +0000
Certificate not after:    Mon 25 Nov 2024 12:06:57 +0000
Subordinate resources:    AS: 264014
                          IP: 143.0.164.0/22
                          IP: 2804:296c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ec:f4:1b:61:b9:fc:b1:36:d8:d4:50:94:9c:91:e1:68:d9:6d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 27 12:01:57 2023 GMT
            Not After : Nov 25 12:06:57 2024 GMT
        Subject: CN=2A0C4065352FA29FE69D81683D46C7FAE700B8B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:52:db:35:6f:cc:84:9b:e5:c8:b7:b7:23:b8:
                    18:51:9f:bf:b4:85:de:5e:6c:16:c5:c2:a0:0f:cd:
                    c2:8f:98:8e:7f:3a:f6:c2:48:30:46:ee:7a:b1:c9:
                    6a:ba:1c:ad:27:ef:0e:fe:b6:fc:6f:49:3f:5b:b6:
                    b3:44:84:fb:0b:e5:94:07:ba:2d:a4:48:c1:2c:bd:
                    55:94:2a:98:e1:d9:7b:87:32:e6:79:a4:8f:e5:3e:
                    12:60:cd:62:fc:b1:8b:f9:b8:1b:f0:16:a5:81:2c:
                    3a:50:cb:63:88:30:77:5a:e8:fc:18:60:f1:f6:85:
                    88:46:62:13:14:77:d4:5b:c9:00:67:21:41:1e:ca:
                    2d:cb:62:93:7a:27:b6:21:19:69:79:19:7f:71:b3:
                    d8:bf:60:89:95:ce:fd:1a:4f:c6:5f:be:6e:6b:f5:
                    d5:8d:a1:31:20:2f:ee:ef:ba:42:3d:3b:18:58:d2:
                    1e:f3:7c:88:ea:62:ed:70:7f:f5:48:80:71:c0:c8:
                    d0:08:bb:01:e7:f8:24:8b:02:4a:7a:ef:2d:41:95:
                    f4:f3:00:e7:23:25:3a:7b:7f:4a:40:06:41:bb:56:
                    f7:a7:77:94:eb:e7:bc:50:55:18:77:5e:46:52:ee:
                    71:f0:23:28:c9:1c:9b:0d:7d:84:9c:8b:07:e0:85:
                    34:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:0C:40:65:35:2F:A2:9F:E6:9D:81:68:3D:46:C7:FA:E7:00:B8:B0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/2A0C4065352FA29FE69D81683D46C7FAE700B8B0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.164.0/22
                IPv6:
                  2804:296c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264014

    Signature Algorithm: sha256WithRSAEncryption
         48:90:44:c2:5f:ce:7e:4d:f3:b4:a7:b0:91:a6:cf:da:b5:5f:
         bd:8f:be:76:eb:b8:0b:98:75:8b:89:3e:01:19:cf:8d:69:00:
         33:97:31:43:51:dc:e4:f6:af:0a:f0:b9:91:6f:c5:94:12:cb:
         2a:10:be:05:d8:6e:87:50:26:2f:ff:71:fd:e1:f5:20:d1:78:
         0c:10:cf:d5:ef:f7:8b:58:50:e3:db:e0:11:74:c0:84:92:b5:
         b1:48:62:69:9c:2f:fd:02:10:78:fd:25:6b:5c:6a:14:d8:48:
         bb:4c:38:60:ea:e6:3b:be:e1:f3:d7:86:2d:9e:60:84:76:1d:
         87:22:11:fe:61:d4:5f:d4:13:fe:7a:94:1d:e4:9d:07:95:c7:
         6a:57:ab:bd:fc:95:84:c2:80:86:b3:fd:cb:b9:58:73:28:a5:
         93:b0:44:c8:0c:63:b3:25:fc:a1:c4:e1:f3:4b:20:fa:ce:76:
         5a:15:2b:46:fb:49:d4:d6:e2:a6:94:f3:1b:b9:b0:d7:89:31:
         1a:f7:60:f7:a7:bb:83:be:71:77:66:02:57:a0:75:0c:aa:48:
         fc:d1:16:cb:b7:ed:91:b4:d2:2b:fd:ec:53:e9:eb:4d:e2:85:
         aa:1f:ef:e4:a1:64:91:24:e1:37:f1:ad:9e:79:24:73:8a:4b:
         2e:bf:57:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org