Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2B426FB576C44D9F52DCA86B26EE5A1CB7EBD1A8.cer
File:                     2B426FB576C44D9F52DCA86B26EE5A1CB7EBD1A8.cer (raw, json)
Hash identifier:          /LievvOSm+cpFSCHPjCJN8evgclxjfRTkKJINXIsMyo=
Subject key identifier:   2B:42:6F:B5:76:C4:4D:9F:52:DC:A8:6B:26:EE:5A:1C:B7:EB:D1:A8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       27BA7003EEEC8C6675100E6BE4DC460EFA214947
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/2B426FB576C44D9F52DCA86B26EE5A1CB7EBD1A8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Sep 2023 14:01:15 +0000
Certificate not after:    Tue 03 Sep 2024 14:06:15 +0000
Subordinate resources:    AS: 265337
                          IP: 168.181.140.0/22
                          IP: 2804:2e4c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ba:70:03:ee:ec:8c:66:75:10:0e:6b:e4:dc:46:0e:fa:21:49:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  5 14:01:15 2023 GMT
            Not After : Sep  3 14:06:15 2024 GMT
        Subject: CN=2B426FB576C44D9F52DCA86B26EE5A1CB7EBD1A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e9:87:c6:ad:d0:74:db:75:e2:a8:67:79:25:
                    57:bb:96:2b:cf:08:08:4d:54:a4:74:1b:8f:47:70:
                    16:d5:89:c6:5d:3c:0f:4e:78:58:79:c8:12:65:15:
                    0d:c7:65:11:5d:d6:bd:f6:07:5a:dc:be:b3:cb:a1:
                    6e:b4:14:54:95:6a:ba:20:79:a4:27:56:a0:8e:32:
                    ed:cd:5b:cc:5d:20:c8:41:49:b4:00:d8:ab:73:4e:
                    8b:35:14:80:a7:29:86:f1:fe:bb:5d:95:01:13:60:
                    05:2d:7e:7e:2e:d7:ba:bc:f8:44:bd:8a:69:72:6d:
                    02:39:96:d1:e5:2e:75:0c:82:e9:a7:e7:51:ec:03:
                    62:66:7b:b8:ef:fa:3c:42:f8:8c:63:5a:46:65:26:
                    cd:12:e9:8c:15:c6:2f:06:f2:ab:71:c2:15:22:47:
                    58:57:8e:c7:d4:0f:df:5b:b7:b8:94:6d:52:35:0e:
                    90:6c:17:74:d5:56:7c:c5:25:64:d2:9e:bd:a8:be:
                    96:6b:6c:af:cd:2c:d1:36:6e:13:c1:5f:39:4b:da:
                    e1:e4:4d:e7:d5:58:b8:1e:94:55:46:04:41:3e:5f:
                    38:c0:a1:c2:b4:c5:97:1b:e0:ea:cf:41:aa:e4:b9:
                    fa:da:f2:46:02:a7:e2:a5:09:5c:7d:0d:14:dc:46:
                    2c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:42:6F:B5:76:C4:4D:9F:52:DC:A8:6B:26:EE:5A:1C:B7:EB:D1:A8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/2B426FB576C44D9F52DCA86B26EE5A1CB7EBD1A8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.140.0/22
                IPv6:
                  2804:2e4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265337

    Signature Algorithm: sha256WithRSAEncryption
         70:1a:27:e6:49:68:4a:b2:35:43:45:5f:c5:b1:8d:ee:a0:df:
         57:1b:f0:0a:53:fa:df:ec:c2:b0:d1:e8:6a:b3:56:aa:6b:80:
         61:89:5f:65:b7:50:7c:e3:6b:f1:86:10:78:7f:53:3b:be:ab:
         01:77:cf:04:fb:fa:dc:3f:6b:11:27:99:4f:e8:7c:2c:51:95:
         36:15:a9:f1:a3:b2:fc:d4:ab:39:02:f9:e0:53:3b:ab:62:ac:
         6c:5a:4d:e2:74:c9:44:14:3e:be:9a:a6:85:b0:4c:29:41:c4:
         8f:75:ee:e3:7a:63:9e:9c:b7:ef:df:1b:69:89:97:d7:92:82:
         e6:61:f1:63:f9:f8:bc:21:2b:19:56:ca:b3:74:d6:7c:81:b8:
         bf:e8:41:98:5f:60:bf:fa:3a:91:88:88:26:97:fd:31:cb:94:
         c6:80:49:66:3e:e7:43:6f:cf:53:6f:46:f2:27:19:bc:dd:b2:
         2b:52:f2:4c:5a:60:df:88:1f:63:43:ed:e2:3a:44:a6:92:4f:
         dd:ab:9a:3e:22:c4:ed:bf:9c:7f:6e:99:32:c0:bd:a1:0f:2a:
         42:e4:1f:e8:fe:fc:6a:43:9c:79:12:d9:91:ad:0e:19:59:c6:
         97:cb:ff:55:91:dd:66:9e:ca:0a:07:de:5b:e6:27:a3:b1:a4:
         21:8c:d7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org