Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2B013B207B447C9EE8072B59C2CE81A7C93B4F74.cer
File:                     2B013B207B447C9EE8072B59C2CE81A7C93B4F74.cer (raw, json)
Hash identifier:          M8jArJvhE9Xju17sO7dfF9gvWVJfHfv3k3vfGGTxUVU=
Subject key identifier:   2B:01:3B:20:7B:44:7C:9E:E8:07:2B:59:C2:CE:81:A7:C9:3B:4F:74
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       401404788F6561805A5D45E8EDAF01E248E44618
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/2B013B207B447C9EE8072B59C2CE81A7C93B4F74.mft
caRepository:             rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 16:34:02 +0000
Certificate not after:    Tue 18 Jun 2024 16:39:02 +0000
Subordinate resources:    AS: 268708
                          IP: 45.171.52.0/22
                          IP: 2804:5988::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:14:04:78:8f:65:61:80:5a:5d:45:e8:ed:af:01:e2:48:e4:46:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 20 16:34:02 2023 GMT
            Not After : Jun 18 16:39:02 2024 GMT
        Subject: CN=2B013B207B447C9EE8072B59C2CE81A7C93B4F74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4e:c6:54:f6:fd:88:ce:5a:76:c9:e9:6c:c6:
                    6c:8d:47:75:da:e7:d1:e3:2c:3f:bc:2c:02:18:48:
                    1c:c4:86:55:ab:6e:0f:90:c4:63:0b:d5:5f:2b:37:
                    76:e8:be:c0:96:be:3a:48:52:6b:35:61:98:3c:15:
                    bf:7a:db:ca:51:94:f5:55:7a:8d:28:9c:81:1c:5b:
                    60:c6:fb:e2:d6:93:db:d4:09:50:ce:0d:73:09:9f:
                    af:b0:c1:24:c9:bd:b1:44:26:3c:d1:5f:f2:7c:9c:
                    ab:23:39:4e:9d:29:6d:d1:39:3c:bc:41:f6:32:e5:
                    5c:7e:61:fd:e5:a7:f0:b4:aa:2b:51:35:e5:74:b5:
                    ee:12:7d:f5:fa:63:26:cd:2a:10:68:69:2a:48:36:
                    16:35:98:b5:c0:b5:7a:76:2a:72:bd:25:35:85:cc:
                    29:a5:1c:76:81:ba:0a:d1:da:b9:d3:de:09:65:1d:
                    43:7e:dc:89:c1:21:14:ea:8d:90:ed:2a:15:73:7a:
                    cf:a7:ec:e8:6d:55:8c:46:38:be:d2:0a:6b:57:96:
                    47:50:74:60:e7:7c:0e:3c:a2:38:30:92:95:2c:dd:
                    bc:01:e3:37:c6:24:5a:0e:89:d2:56:5f:a1:89:94:
                    1b:d7:6a:75:d7:7a:a4:72:73:0c:b0:17:6c:0b:30:
                    e1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:01:3B:20:7B:44:7C:9E:E8:07:2B:59:C2:CE:81:A7:C9:3B:4F:74
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/2B013B207B447C9EE8072B59C2CE81A7C93B4F74.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.52.0/22
                IPv6:
                  2804:5988::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268708

    Signature Algorithm: sha256WithRSAEncryption
         26:b6:8d:b6:71:47:5a:76:ca:a2:42:01:1c:ab:ca:a3:4e:c4:
         2a:c6:7c:c2:81:79:be:ac:20:cd:bc:37:a8:d4:56:23:dd:fe:
         aa:69:db:b8:76:10:05:86:d5:df:92:00:19:0e:28:84:e2:ee:
         e8:8b:eb:07:04:65:5c:13:b2:56:7c:0e:d4:05:63:4e:65:c5:
         4f:3c:86:10:39:d7:51:c3:5b:e8:70:28:53:cc:0b:bb:d7:ad:
         32:4f:ac:cf:6c:96:d4:28:1a:eb:7b:45:84:99:d3:b3:a0:f6:
         c0:30:93:34:44:26:f9:ae:bb:99:37:d2:c6:e8:24:bf:1e:9d:
         e3:0d:e4:9f:ea:9a:51:fa:52:e2:74:af:17:88:31:75:68:d9:
         30:e0:b2:36:91:0a:17:d2:50:ee:23:60:f7:27:a5:40:b6:92:
         96:9a:18:15:e4:ee:31:cd:be:4e:48:86:09:ef:21:e9:a4:75:
         87:19:a3:20:da:d5:7c:81:34:60:84:88:e9:2f:43:87:3c:ad:
         1e:e0:31:e8:c4:f7:1c:78:8b:0e:23:28:7b:03:b8:ce:67:85:
         65:85:2e:f7:35:54:28:f0:fa:66:aa:cc:b4:49:d0:47:27:ca:
         77:3b:6c:70:f2:d9:46:55:b3:5e:fe:f8:02:f0:6a:5c:15:59:
         44:b1:eb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org