Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.cer
File:                     2A65AC623D9D47A4820DB0612905F233C2AD6E46.cer (raw, json)
Hash identifier:          a0wmFdtc9d1gbUVliCpeenwFaE1sBhQN8eW+/g/RKyw=
Subject key identifier:   2A:65:AC:62:3D:9D:47:A4:82:0D:B0:61:29:05:F2:33:C2:AD:6E:46
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       209F328FADEBE3B22490B04F28AE458B6CA0A85F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Jan 2023 17:08:02 +0000
Certificate not after:    Mon 08 Jan 2024 17:13:02 +0000
Subordinate resources:    AS: 267593
                          IP: 45.70.84.0/22
                          IP: 2804:43d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9f:32:8f:ad:eb:e3:b2:24:90:b0:4f:28:ae:45:8b:6c:a0:a8:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  9 17:08:02 2023 GMT
            Not After : Jan  8 17:13:02 2024 GMT
        Subject: CN=2A65AC623D9D47A4820DB0612905F233C2AD6E46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:0e:f4:5b:93:e1:a3:40:ee:69:20:ef:a1:
                    17:d8:c1:80:72:03:c1:b0:54:f3:46:45:90:53:4a:
                    7a:98:2c:c1:01:09:12:32:97:5f:08:7b:04:a5:5e:
                    fc:b0:94:76:b9:9e:a4:46:fe:f9:95:a6:db:88:ba:
                    5a:95:74:82:7f:79:61:b1:4e:b0:93:2d:96:0a:7d:
                    af:64:e2:ea:11:09:8c:0e:ec:d7:e3:b8:e3:0b:c6:
                    c6:16:b3:ef:00:b1:a8:e9:8a:08:d2:86:5a:49:1a:
                    24:8b:15:85:6c:b0:93:cb:e6:66:0c:9a:3f:99:19:
                    b5:ea:a6:9f:a6:88:1a:c6:09:80:4b:46:3d:68:aa:
                    4f:ba:f6:d1:b2:10:58:7e:b2:3e:25:43:7c:3c:7a:
                    2a:18:77:00:5c:27:82:f2:28:20:3a:49:62:a2:dd:
                    13:03:c7:96:58:9a:dc:d3:3b:36:59:9a:b2:29:64:
                    f4:d0:c7:2a:5b:a4:ea:40:d9:df:8c:28:1a:cd:6c:
                    80:0d:55:62:af:f3:8a:24:86:46:0d:e4:95:62:fe:
                    60:07:53:81:44:31:94:72:b0:81:03:bb:66:06:49:
                    e0:fe:04:53:a8:5d:13:de:63:a6:fd:11:0e:ca:1a:
                    17:71:25:ae:23:69:08:11:72:01:88:ac:25:5a:e7:
                    35:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:65:AC:62:3D:9D:47:A4:82:0D:B0:61:29:05:F2:33:C2:AD:6E:46
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.84.0/22
                IPv6:
                  2804:43d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267593

    Signature Algorithm: sha256WithRSAEncryption
         2c:88:2f:0b:a5:83:1c:9c:57:47:3e:82:1c:61:45:00:2c:03:
         7d:b9:d9:6c:67:15:b5:e3:7c:db:51:49:8d:24:13:aa:73:27:
         ce:71:67:d5:2b:9b:e7:d0:cd:5c:d1:ee:30:38:d7:cd:0a:95:
         88:ef:68:19:df:ad:bd:a6:bf:1f:a7:e2:e2:51:6e:6c:dc:e0:
         ac:dc:00:13:c2:bb:1b:7e:a4:13:b7:59:a0:65:21:1e:8b:aa:
         2f:99:0e:00:97:71:2a:80:b3:d0:d9:0c:92:17:31:dd:06:01:
         67:c8:f8:1f:7c:90:19:db:07:44:40:c9:bf:24:3f:55:36:80:
         7a:be:e9:5c:65:54:28:a6:b2:25:0f:3a:2c:c1:0d:10:5e:ad:
         d4:02:f5:81:27:ae:82:0d:8e:58:eb:f5:44:f6:de:2f:53:d9:
         e4:3d:f6:a0:2a:53:47:47:74:fa:9b:86:37:d0:6f:64:db:ef:
         e4:78:6e:71:6d:86:8c:87:1f:77:49:3e:2b:69:f5:e6:84:3c:
         e2:19:b1:d5:9f:33:03:fb:6b:f9:d9:69:d7:62:e7:21:d6:94:
         5a:16:b7:41:ee:01:a3:ae:ac:4f:90:80:39:91:58:59:7f:c5:
         1e:8f:2b:23:58:3f:ab:dc:9a:40:4d:12:0a:91:ac:c5:30:04:
         3a:5b:37:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org