Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2A5011451F0E97D5C76B27823EA7E896246FCC89.cer
File:                     2A5011451F0E97D5C76B27823EA7E896246FCC89.cer (raw, json)
Hash identifier:          T882QORzSDQOXHCxgvhyVM4l9uyobJKuP1EbKNJbGhY=
Subject key identifier:   2A:50:11:45:1F:0E:97:D5:C7:6B:27:82:3E:A7:E8:96:24:6F:CC:89
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1EB94D7FCB5B216422E827119D732B45CEBCB838
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/2A5011451F0E97D5C76B27823EA7E896246FCC89.mft
caRepository:             rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Jan 2024 19:31:34 +0000
Certificate not after:    Mon 06 Jan 2025 19:36:34 +0000
Subordinate resources:    AS: 267429
                          IP: 181.191.168.0/22
                          IP: 2804:4160::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b9:4d:7f:cb:5b:21:64:22:e8:27:11:9d:73:2b:45:ce:bc:b8:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  8 19:31:34 2024 GMT
            Not After : Jan  6 19:36:34 2025 GMT
        Subject: CN=2A5011451F0E97D5C76B27823EA7E896246FCC89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cc:1e:a6:93:f7:f9:8e:c0:de:6b:3f:2c:da:
                    c1:f6:60:5b:f4:5f:4f:5f:c2:c3:22:af:99:d0:49:
                    cd:6e:15:74:2d:39:71:23:2a:74:b6:77:85:fd:63:
                    cb:6f:6f:92:90:64:1b:dc:0c:0b:04:25:4d:31:6d:
                    4c:56:18:4f:76:51:6c:e8:bf:e4:98:20:ec:5b:20:
                    4d:72:a8:24:1c:59:35:c1:5a:06:d3:df:a1:60:20:
                    40:5b:ff:e4:ae:24:00:df:6a:cd:48:b9:6c:9e:21:
                    12:6d:cc:b9:84:f0:d4:2c:29:25:1b:f7:54:36:ac:
                    f8:59:e2:48:ee:5d:d6:df:2d:15:35:8b:43:09:7f:
                    59:92:10:e3:08:b1:3d:0e:0c:15:43:5a:19:32:5d:
                    c8:29:f8:b4:a2:1b:07:24:ef:ab:05:2d:8a:9f:71:
                    b9:fb:cd:c2:92:ee:4d:e0:e2:1c:30:0f:a2:41:2e:
                    8d:a8:6a:c3:a8:f7:9b:28:32:4a:76:ab:b7:52:81:
                    8b:9b:72:18:bc:a5:17:e1:92:b5:ac:5f:06:61:d9:
                    17:a4:f6:08:1d:c8:7d:83:65:0a:89:ab:83:53:83:
                    81:78:6d:c1:d5:fc:9f:64:c1:d8:db:6e:0d:00:71:
                    c6:b5:72:00:8d:c5:4e:32:f5:cc:3f:91:a3:7c:d2:
                    ff:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:50:11:45:1F:0E:97:D5:C7:6B:27:82:3E:A7:E8:96:24:6F:CC:89
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/2A5011451F0E97D5C76B27823EA7E896246FCC89.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.168.0/22
                IPv6:
                  2804:4160::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267429

    Signature Algorithm: sha256WithRSAEncryption
         a2:cc:80:57:8c:12:09:30:52:c8:7a:8a:61:f0:82:18:27:fd:
         09:1c:cb:cf:22:b6:6c:04:33:16:9f:38:c9:b7:7f:55:85:c4:
         29:b5:0c:5a:32:e7:93:b9:03:00:61:d7:9c:09:03:24:08:ce:
         4c:a4:ce:7a:3d:0a:ec:7f:9a:0b:96:0c:da:09:fc:40:40:de:
         96:4a:31:3c:d4:4b:19:e2:e1:79:30:df:c7:7a:55:81:24:af:
         5c:39:e4:b9:89:2a:66:fa:a7:97:6f:ad:50:47:69:9d:3c:27:
         9a:ec:e9:08:51:27:fe:b3:40:e6:4b:f2:36:5f:a3:9c:57:86:
         8c:c0:9c:28:91:35:aa:ec:43:d4:5d:02:75:a8:12:7e:c6:fa:
         1c:b9:2e:c4:07:7b:de:53:46:95:c6:4a:0c:f9:96:f5:4e:a6:
         3e:e3:17:1e:0d:ac:82:90:2c:28:9a:96:cd:a2:23:2a:c3:75:
         f4:24:5b:8b:6c:46:1b:ae:68:22:b1:c3:76:e2:81:18:f9:e1:
         24:21:e2:a8:96:e3:e7:d4:21:0e:04:55:2b:98:d4:24:c2:c7:
         73:9a:2f:9d:10:dc:13:4a:a5:1e:62:49:2b:ab:8e:92:46:a7:
         6b:bb:66:cf:d5:c0:43:57:58:1a:f4:d8:63:b0:d1:01:14:49:
         76:5f:92:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org