Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2AF9755B98B2556A8506D0FD349E195BECDBFDCF.cer
File:                     2AF9755B98B2556A8506D0FD349E195BECDBFDCF.cer (raw, json)
Hash identifier:          nioEq6ykI2CZxlnLJ80lNpG9nN7VakGJqpz0AbakHlY=
Subject key identifier:   2A:F9:75:5B:98:B2:55:6A:85:06:D0:FD:34:9E:19:5B:EC:DB:FD:CF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7C733FF55904D5B81250E90E9236A69421170708
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/0/2AF9755B98B2556A8506D0FD349E195BECDBFDCF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 May 2023 14:33:33 +0000
Certificate not after:    Wed 22 May 2024 14:38:33 +0000
Subordinate resources:    AS: 263926
                          IP: 138.219.112.0/22
                          IP: 2804:27dc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:73:3f:f5:59:04:d5:b8:12:50:e9:0e:92:36:a6:94:21:17:07:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 24 14:33:33 2023 GMT
            Not After : May 22 14:38:33 2024 GMT
        Subject: CN=2AF9755B98B2556A8506D0FD349E195BECDBFDCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:85:9b:50:c9:12:34:1b:f1:4a:4d:db:6e:ac:
                    ec:1e:41:35:23:cc:15:53:8e:f2:ac:1c:43:12:54:
                    62:f4:fc:72:c4:2a:51:80:ae:d9:24:52:47:71:9a:
                    dc:0c:f6:a7:e8:51:10:54:75:a6:f9:a9:11:f4:55:
                    cc:95:83:20:5c:6e:53:b6:bb:8d:f5:f7:de:d8:dc:
                    0b:b4:6f:97:2a:e9:5a:23:c8:3b:76:2f:fd:c6:de:
                    80:82:83:41:13:c3:de:64:52:8e:80:bd:56:14:3d:
                    0d:95:de:d8:e5:a5:62:73:5c:9a:04:83:7a:bd:c0:
                    48:dd:96:e6:65:78:74:93:cc:c5:ca:68:2e:e8:7c:
                    29:d5:cc:d3:ef:2c:03:f4:4d:f6:76:c2:65:fb:5c:
                    14:16:33:7c:80:bc:ee:fc:a3:bf:75:05:35:e7:b6:
                    ee:40:0f:68:47:65:21:39:b2:ef:a7:b4:7a:83:1c:
                    85:7d:af:47:c8:86:3a:af:ea:13:83:29:ab:07:85:
                    05:6d:79:20:c5:69:ed:e3:14:98:62:84:fe:82:63:
                    a6:05:b6:98:55:4a:29:15:92:58:de:9d:45:8c:3b:
                    91:61:f2:fb:5c:8c:c1:b9:89:8d:85:d7:44:aa:5c:
                    98:e1:5f:29:0a:61:09:1e:0e:d3:d8:04:ae:b8:9a:
                    46:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:F9:75:5B:98:B2:55:6A:85:06:D0:FD:34:9E:19:5B:EC:DB:FD:CF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/0/2AF9755B98B2556A8506D0FD349E195BECDBFDCF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.112.0/22
                IPv6:
                  2804:27dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263926

    Signature Algorithm: sha256WithRSAEncryption
         48:29:83:c9:f4:dc:6e:c3:97:0d:5b:ac:84:bd:02:05:ed:50:
         91:fb:12:bc:c2:07:79:ba:0c:e4:b3:f2:a7:44:53:b3:0d:5c:
         a0:0f:b5:e5:42:7d:ff:b0:10:98:d5:8c:ef:39:45:2b:5d:69:
         86:b1:29:40:25:7b:7e:5d:83:10:06:83:44:09:3b:68:51:00:
         7d:81:73:2f:1e:d9:ca:d3:8b:cd:51:2a:8a:20:71:9d:87:de:
         84:f4:40:87:7e:46:ce:75:c4:98:e6:c8:e9:0a:3c:86:04:55:
         86:aa:79:15:d4:9f:cf:ca:14:04:9e:8e:11:2f:4d:d4:bc:41:
         66:d5:de:22:71:cb:6e:75:0a:87:2b:3b:c9:a0:28:20:15:b5:
         df:98:32:d4:51:d1:68:f4:d9:4b:14:fb:34:05:d8:b9:74:e3:
         cf:da:c6:da:cc:a7:70:7f:7d:16:58:88:12:07:db:27:8e:e0:
         16:50:a2:35:7a:27:57:b0:93:dc:97:23:0b:26:16:96:a7:20:
         06:0e:53:09:96:a2:68:e6:c9:0d:67:08:fc:ab:60:4d:72:74:
         4b:73:7f:df:3f:dd:1e:c0:09:b5:2e:8c:f9:33:12:5c:d7:4b:
         45:25:53:8a:3c:03:88:15:ae:41:df:b6:8c:4a:15:85:6d:7d:
         f2:db:26:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:41 2025 by rpki-client