Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2B04BBF97246BDE2FB53B000FBFDE50502C74549.cer
File:                     2B04BBF97246BDE2FB53B000FBFDE50502C74549.cer (raw, json)
Hash identifier:          hQrkD4Bp9yyyH5USktESao4o5VYUP5ZLT1yuQx9m2+A=
Subject key identifier:   2B:04:BB:F9:72:46:BD:E2:FB:53:B0:00:FB:FD:E5:05:02:C7:45:49
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3BA0A78419321F686EF51916EEA2CCC492F4C010
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/2B04BBF97246BDE2FB53B000FBFDE50502C74549.mft
caRepository:             rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Dec 2021 19:57:01 +0000
Certificate not after:    Fri 09 Dec 2022 20:02:01 +0000
Subordinate resources:    AS: 28665
                          IP: 177.12.0.0/18
                          IP: 177.136.128.0/19
                          IP: 189.1.128.0/20
                          IP: 2804:f88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a0:a7:84:19:32:1f:68:6e:f5:19:16:ee:a2:cc:c4:92:f4:c0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 10 19:57:01 2021 GMT
            Not After : Dec  9 20:02:01 2022 GMT
        Subject: CN=2B04BBF97246BDE2FB53B000FBFDE50502C74549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:81:f3:9f:ed:87:77:70:90:2d:ac:f6:48:
                    99:55:cc:01:64:4d:1b:8b:a2:62:be:e2:34:a1:c1:
                    28:e5:3a:5a:8d:1a:c2:03:a7:b2:a5:15:f3:8e:61:
                    ee:f9:33:fb:65:42:77:84:74:73:45:55:dd:5c:3a:
                    ca:d1:cc:81:97:c7:cd:1b:a5:b3:4c:e7:2f:63:6b:
                    a2:dc:a3:33:5a:e7:89:f2:c5:fc:0e:5b:f1:07:21:
                    d4:47:44:c8:cb:c6:ec:63:4f:c1:1e:5f:92:62:b3:
                    85:f8:bf:de:32:57:50:2d:ba:56:86:3b:10:5a:78:
                    ec:c2:b9:60:d1:67:61:6c:3a:47:60:52:c8:dd:a8:
                    92:fe:30:a9:3b:b1:1b:bd:6c:75:fd:c8:24:b9:4e:
                    b2:27:27:b6:d9:0d:f4:70:77:bf:f8:64:6d:4c:fd:
                    13:9f:f4:61:d9:14:09:ae:3c:24:2b:d7:d8:81:22:
                    6b:f0:ea:85:65:bc:cf:64:2a:40:a8:e9:d1:ec:08:
                    9b:80:e3:f4:ae:fc:b5:49:b7:89:ab:e2:86:78:59:
                    84:ec:e4:17:48:28:85:20:46:81:fd:3c:2e:cc:87:
                    bb:26:01:f5:20:e0:20:b5:f9:04:34:45:3a:63:7a:
                    d7:be:35:6e:83:e6:1c:37:d8:5b:c2:7d:43:09:89:
                    d8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:04:BB:F9:72:46:BD:E2:FB:53:B0:00:FB:FD:E5:05:02:C7:45:49
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/2B04BBF97246BDE2FB53B000FBFDE50502C74549.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.0.0/18
                  177.136.128.0/19
                  189.1.128.0/20
                IPv6:
                  2804:f88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28665

    Signature Algorithm: sha256WithRSAEncryption
         1b:36:ca:77:8d:c4:97:5e:04:91:56:df:d2:20:d9:ca:9e:14:
         ee:ff:be:91:e6:e6:54:72:6c:60:27:a7:68:4b:8a:27:00:4c:
         e2:cf:10:f2:5a:89:08:0b:e0:fe:7f:6b:a8:ef:28:1a:8a:e0:
         84:e7:f2:1b:74:d3:16:bb:89:c9:4f:01:09:b1:77:ec:ed:ea:
         ad:e5:b1:c5:93:05:02:bf:d4:26:25:92:29:06:25:10:0c:b1:
         3a:03:f0:3d:65:d3:e7:f8:b3:30:42:75:e9:32:d3:73:73:49:
         bd:f2:89:48:b9:8b:1b:b5:50:0f:e5:4a:4e:bb:26:fa:dd:e7:
         10:51:65:db:35:4a:47:10:3a:d9:6f:b9:27:d3:45:8c:71:9b:
         a7:02:54:77:56:18:af:c4:d8:d1:65:28:5d:b0:da:2f:4e:39:
         ba:46:2a:7a:91:0a:eb:dc:7d:33:63:4d:c2:56:7a:29:f0:95:
         b6:db:41:e0:ea:fb:69:f0:ac:e6:26:98:52:4c:a2:ad:f3:cc:
         a5:7c:86:44:a1:75:08:b9:9e:8a:69:20:00:77:78:2c:4f:3f:
         16:67:19:e5:92:6a:df:10:a4:32:fd:22:41:38:f4:8b:c7:30:
         af:ad:97:1b:dc:d6:9e:4c:96:ec:2c:be:bd:db:42:3c:19:49:
         2c:47:7c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org