Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2A5D4DDF4FA41D020B22B8CD6ACF66FBABA31A51.cer
File:                     2A5D4DDF4FA41D020B22B8CD6ACF66FBABA31A51.cer (raw, json)
Hash identifier:          SBvnX6ikG1Y7qKQ1j2aVXJJAWPVVkd1+8W1ltUYfhJg=
Subject key identifier:   2A:5D:4D:DF:4F:A4:1D:02:0B:22:B8:CD:6A:CF:66:FB:AB:A3:1A:51
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6AF807EDFBF949779CACD239239620238B2579F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/0/2A5D4DDF4FA41D020B22B8CD6ACF66FBABA31A51.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 27 Aug 2023 15:37:15 +0000
Certificate not after:    Sun 25 Aug 2024 15:42:15 +0000
Subordinate resources:    AS: 267136
                          IP: 45.229.232.0/22
                          IP: 2804:48a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f8:07:ed:fb:f9:49:77:9c:ac:d2:39:23:96:20:23:8b:25:79:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 27 15:37:15 2023 GMT
            Not After : Aug 25 15:42:15 2024 GMT
        Subject: CN=2A5D4DDF4FA41D020B22B8CD6ACF66FBABA31A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:08:f2:17:a5:ad:39:98:46:8c:22:2f:0d:84:
                    21:67:52:88:a7:5b:ab:46:17:0e:93:40:ea:62:23:
                    fb:30:ac:27:fb:7e:e6:bd:c9:8a:e1:32:ee:94:7b:
                    f8:31:85:2f:76:02:70:ad:7d:ff:a6:60:5f:48:43:
                    34:63:86:0e:de:e8:49:6c:84:0b:4e:1d:72:36:b4:
                    30:53:0c:08:1b:b8:ba:6d:ef:f6:4e:08:f0:2b:7f:
                    bc:22:60:ba:ef:24:00:63:47:8c:60:88:0e:b0:cb:
                    b2:b0:40:96:04:d1:f9:90:05:6b:6d:c3:b3:e5:4e:
                    66:13:f7:83:df:b6:dc:a7:55:99:bc:3a:95:20:be:
                    85:27:aa:2e:bf:16:57:10:cf:c0:9a:45:35:d5:8d:
                    ed:3b:28:bf:97:a3:25:6e:48:2a:b5:6d:15:3c:6b:
                    1a:b6:9c:78:1a:5c:3e:de:e4:e8:1c:95:30:ff:b7:
                    5c:77:af:7b:28:f7:3c:5c:2f:1f:19:fa:e2:98:b0:
                    ab:e5:96:90:05:9d:40:e6:58:18:8d:69:da:13:71:
                    07:01:39:ba:c5:8a:f1:ee:53:43:4d:7e:5e:2a:ef:
                    cf:2d:95:65:c8:50:b4:46:73:fe:20:e7:47:d8:44:
                    0e:06:55:24:08:61:76:36:84:6c:9d:0c:e7:d8:f8:
                    1e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:5D:4D:DF:4F:A4:1D:02:0B:22:B8:CD:6A:CF:66:FB:AB:A3:1A:51
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/0/2A5D4DDF4FA41D020B22B8CD6ACF66FBABA31A51.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.232.0/22
                IPv6:
                  2804:48a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267136

    Signature Algorithm: sha256WithRSAEncryption
         6e:78:78:80:63:69:b1:be:40:d9:10:58:37:c5:c4:ec:60:0e:
         9e:d9:48:ae:60:40:34:21:92:75:8f:68:45:59:e0:79:98:08:
         12:82:30:e1:12:b0:ce:43:73:ca:fd:dd:dd:9a:18:e0:a1:f2:
         ab:67:48:15:e4:d6:19:70:7c:71:37:7a:ae:8a:0c:f5:6c:37:
         12:10:75:3c:7c:b9:cd:23:f1:2b:18:97:12:36:e8:8b:f7:15:
         9c:23:13:e6:8d:11:50:82:a1:b2:f1:50:67:90:e2:66:0c:14:
         7b:ad:d6:bb:71:44:ed:04:fa:9e:47:a8:7a:46:46:79:f4:24:
         cc:34:2b:53:aa:84:0c:7f:0d:2c:fc:ca:1a:0e:db:48:05:bf:
         57:bd:be:7a:8e:38:70:cf:85:6f:dd:1a:bf:00:41:18:90:da:
         d8:ba:b3:2f:6b:02:e0:f3:a4:67:47:f4:5e:ad:3d:ed:60:30:
         b7:d1:17:8e:c4:c8:3d:a4:24:5c:47:9a:54:dd:36:56:69:90:
         50:04:0d:00:3e:16:1b:d2:37:ff:f2:8f:1a:ac:e3:89:2d:57:
         df:3f:58:e0:49:b7:88:15:d1:55:2b:66:de:26:7c:91:39:40:
         45:8a:27:28:70:82:e5:5f:94:08:81:7d:9e:6e:68:c1:44:14:
         2a:0b:6a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org