Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2A6CA127604E6E591F99AF4B48C15BCC747F3831.cer
File:                     2A6CA127604E6E591F99AF4B48C15BCC747F3831.cer (raw, json)
Hash identifier:          mW0bE1Jus1naKFvQhi+90CBmThrnlQpESj8tzidMXho=
Subject key identifier:   2A:6C:A1:27:60:4E:6E:59:1F:99:AF:4B:48:C1:5B:CC:74:7F:38:31
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2D2CA634939D28132C42177AC45A146D8A801DB1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/0/2A6CA127604E6E591F99AF4B48C15BCC747F3831.mft
caRepository:             rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Oct 2023 00:36:11 +0000
Certificate not after:    Mon 14 Oct 2024 00:41:11 +0000
Subordinate resources:    AS: 267389
                          IP: 45.234.252.0/22
                          IP: 2804:4cc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:2c:a6:34:93:9d:28:13:2c:42:17:7a:c4:5a:14:6d:8a:80:1d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 16 00:36:11 2023 GMT
            Not After : Oct 14 00:41:11 2024 GMT
        Subject: CN=2A6CA127604E6E591F99AF4B48C15BCC747F3831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:42:db:b4:f4:07:d7:a0:44:d8:54:d1:18:d7:
                    04:3a:ba:80:b7:4f:34:99:3d:50:f0:29:29:b5:d3:
                    52:81:1d:3b:06:4f:4b:e9:79:ff:57:04:66:e4:dc:
                    6f:92:da:e3:50:eb:d6:4c:eb:c0:7f:0c:6f:ee:14:
                    48:be:cb:74:1f:48:65:cc:3b:cf:1e:73:fe:9b:ed:
                    af:fd:7b:ce:83:f4:4f:8a:12:34:f8:f1:9a:54:3d:
                    f5:e5:54:3f:7f:1f:22:c7:b8:17:cc:48:32:47:c9:
                    1b:9e:c7:5d:61:b5:19:8f:7d:bb:08:b2:1a:75:9d:
                    20:fa:fd:34:d5:ec:fa:2d:33:ad:f2:15:a6:f8:f8:
                    94:88:c7:6a:03:9d:34:04:6d:0f:e1:25:b8:fd:13:
                    a7:80:97:e1:12:c0:8d:89:89:dd:e3:b4:0a:28:6f:
                    7c:2b:83:25:e4:63:e6:e3:34:d8:43:49:d2:6e:3e:
                    47:9d:91:3c:fd:3c:d2:c1:f6:ff:dc:13:89:95:b0:
                    ce:05:be:55:26:f3:77:0b:1d:ba:4e:ea:7b:6e:ce:
                    61:e0:9c:d7:3c:4e:8d:da:ae:c3:7b:00:57:e8:f9:
                    3f:9a:0c:ab:75:a3:b7:95:b7:50:b5:7e:f5:10:a5:
                    f7:3f:91:f0:d8:95:c2:41:07:d3:f0:e9:12:d7:8f:
                    44:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:6C:A1:27:60:4E:6E:59:1F:99:AF:4B:48:C1:5B:CC:74:7F:38:31
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/0/2A6CA127604E6E591F99AF4B48C15BCC747F3831.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.252.0/22
                IPv6:
                  2804:4cc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267389

    Signature Algorithm: sha256WithRSAEncryption
         a0:8a:a1:2e:20:b1:9d:7c:cc:12:ca:9f:fc:43:f2:83:df:5d:
         98:26:66:fd:a2:64:59:f1:a1:6c:c8:b2:34:56:ad:63:cf:59:
         96:31:6c:55:db:d5:10:1a:ad:53:b1:a9:c6:0d:54:13:c0:04:
         af:84:d3:00:42:a2:34:59:97:a3:d4:28:8d:ec:b9:cf:29:bc:
         8a:e7:fc:e8:bf:f1:49:fe:2c:2d:b7:ea:cf:0a:92:84:17:63:
         ee:b5:ef:f0:32:76:00:e7:70:96:61:45:a9:a8:28:1c:62:f8:
         3f:86:51:b0:4f:3d:e5:3b:d6:92:85:27:6d:e3:59:f5:cb:ce:
         09:a3:42:0e:b1:ca:07:e4:bb:4b:c3:e2:29:44:75:39:08:7e:
         db:4b:4e:a3:d4:71:48:4a:d5:3d:40:77:d9:6c:5c:b3:83:cc:
         5b:63:0d:ac:da:bb:ea:4d:a5:82:9b:4b:b0:20:b9:57:62:db:
         db:7b:c1:d7:a3:7d:f6:41:f9:e9:1b:aa:08:a5:02:d7:39:39:
         e1:9e:95:1e:7a:d8:28:18:b4:6f:49:b1:4d:4e:fa:11:0a:76:
         bb:ae:5f:51:2e:34:58:a2:da:b3:b5:a3:31:df:f5:17:82:d5:
         81:9e:54:b1:94:6a:99:94:ab:50:9e:dd:c8:b1:c9:0c:c2:7c:
         88:79:73:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org