Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2A876EB3D8C19EC441483201BDB5CEB1C0C6640A.cer
File:                     2A876EB3D8C19EC441483201BDB5CEB1C0C6640A.cer (raw, json)
Hash identifier:          1G5ru6M0FkhqmCGBOweePkDmztVhwSdXcdhzA/RTsFo=
Subject key identifier:   2A:87:6E:B3:D8:C1:9E:C4:41:48:32:01:BD:B5:CE:B1:C0:C6:64:0A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       266C5C28C7846E355CBBA89C6E4EF50821D1546D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/2A876EB3D8C19EC441483201BDB5CEB1C0C6640A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Oct 2023 20:03:26 +0000
Certificate not after:    Tue 15 Oct 2024 20:08:26 +0000
Subordinate resources:    AS: 266287
                          IP: 170.79.60.0/22
                          IP: 2804:3574::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6c:5c:28:c7:84:6e:35:5c:bb:a8:9c:6e:4e:f5:08:21:d1:54:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 17 20:03:26 2023 GMT
            Not After : Oct 15 20:08:26 2024 GMT
        Subject: CN=2A876EB3D8C19EC441483201BDB5CEB1C0C6640A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6f:07:a5:ab:06:cd:a6:f1:50:03:6b:6a:23:
                    e9:60:bc:92:20:a5:06:60:33:05:df:19:42:a4:5f:
                    fc:46:ff:da:9c:a1:98:43:a8:7d:94:0b:ae:04:90:
                    34:9f:76:11:f5:dc:7c:a5:79:f7:19:ac:02:46:30:
                    fe:87:39:0d:1b:6c:ef:8e:ef:21:f9:96:a6:d4:37:
                    c6:18:6b:51:96:61:1f:b0:00:1e:3c:7d:b4:2d:fd:
                    7b:ad:7c:92:29:02:33:20:fb:b1:f1:d2:2d:1d:56:
                    a4:25:61:e5:0d:ae:d2:be:28:0e:c2:b7:dd:0f:56:
                    a0:5f:21:f8:b1:9c:c7:e7:0a:2b:4d:2b:c5:47:c1:
                    4c:7d:9e:5f:c4:32:f8:d1:51:8e:5c:70:a3:37:a5:
                    68:b4:5d:d4:85:60:e2:75:c4:6b:28:f7:18:ff:48:
                    52:8b:60:01:0d:18:6b:8a:66:57:51:e0:62:2c:36:
                    35:58:44:83:90:2c:2d:56:d4:63:7c:9e:43:f4:c1:
                    b3:38:5d:9e:0a:10:15:0c:54:21:0c:3a:83:14:5d:
                    3e:4c:37:d6:3b:81:a5:94:e8:61:58:cf:77:1d:86:
                    94:37:f9:77:7b:af:e1:2c:68:7f:f6:54:e9:9d:a6:
                    33:1f:d2:7f:37:9e:ed:27:96:3c:f9:f9:c9:2f:a2:
                    49:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:87:6E:B3:D8:C1:9E:C4:41:48:32:01:BD:B5:CE:B1:C0:C6:64:0A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/2A876EB3D8C19EC441483201BDB5CEB1C0C6640A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.60.0/22
                IPv6:
                  2804:3574::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266287

    Signature Algorithm: sha256WithRSAEncryption
         22:60:be:5d:63:d6:5d:b8:a8:cd:c2:ac:38:78:c7:c7:c6:9f:
         cb:ab:a8:de:cc:65:1f:9e:8a:11:ed:61:8a:fe:08:84:41:46:
         c3:72:bd:f0:96:e1:43:6b:93:4d:50:a6:32:b0:e8:6f:c6:3f:
         91:3e:1e:f6:aa:92:24:75:b2:5e:48:2b:32:ee:1c:e2:64:36:
         fe:bd:80:ff:9c:5a:be:67:4a:cd:75:8c:e6:04:01:58:c4:01:
         c1:79:c5:3d:9f:c4:46:54:d3:07:4d:b5:9e:b4:01:03:27:82:
         22:5a:cd:e6:a6:2f:31:33:a7:39:82:fc:33:5b:f6:16:95:a7:
         f9:9d:70:0b:98:d9:15:68:2b:fc:e9:8c:d4:da:75:b8:bb:2b:
         ff:3d:e8:d3:06:af:ef:9f:4d:86:8e:c9:9f:ad:b2:45:c7:8e:
         2f:14:f7:17:a0:25:64:9b:1c:5e:e8:33:fd:c8:57:38:5e:86:
         8f:eb:8e:9d:00:6b:35:64:af:ae:41:8b:f1:03:f5:16:5a:fc:
         c7:e1:ed:7b:9d:ce:b4:0a:04:bf:41:11:3e:b0:59:1c:01:87:
         e1:d1:69:ad:03:8a:52:1d:ac:48:4e:95:6c:25:92:62:db:80:
         1b:05:6a:05:f6:74:ad:eb:04:ed:15:6f:37:2c:d0:3f:f1:cc:
         bf:36:82:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org