Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2B641BA562D931C2091D5EE5F2C0F2BD19D9ED2C.cer
File:                     2B641BA562D931C2091D5EE5F2C0F2BD19D9ED2C.cer (raw, json)
Hash identifier:          UqtD6jHwwl1+jORMBcGinwnwKZ0BI/Z2u7uw8W8pMMk=
Subject key identifier:   2B:64:1B:A5:62:D9:31:C2:09:1D:5E:E5:F2:C0:F2:BD:19:D9:ED:2C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E0773AA3354FA8B380B38451A2793263732869B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/0/2B641BA562D931C2091D5EE5F2C0F2BD19D9ED2C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Sep 2023 15:46:21 +0000
Certificate not after:    Thu 05 Sep 2024 15:51:21 +0000
Subordinate resources:    AS: 52652
                          IP: 177.66.156.0/23
                          IP: 2801:80:510::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:07:73:aa:33:54:fa:8b:38:0b:38:45:1a:27:93:26:37:32:86:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  7 15:46:21 2023 GMT
            Not After : Sep  5 15:51:21 2024 GMT
        Subject: CN=2B641BA562D931C2091D5EE5F2C0F2BD19D9ED2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:82:1c:b8:7d:e6:ed:ed:f9:25:3a:fa:53:37:
                    49:c1:54:d3:07:d7:0c:32:0c:24:5f:84:8d:94:0f:
                    9a:23:bc:a6:13:bc:08:0c:43:5a:f5:47:40:60:de:
                    42:00:4c:df:64:4f:64:63:2f:83:44:cb:9b:6e:42:
                    36:a6:bf:55:9d:38:c9:11:52:38:57:2d:64:81:18:
                    7b:9c:eb:3a:09:71:8e:91:26:44:ad:58:d8:a7:15:
                    f7:45:ff:37:af:6e:11:d9:41:e9:50:f1:a2:20:aa:
                    ba:a7:b5:2c:9e:a3:ea:af:24:df:02:d6:2d:79:3b:
                    ce:e5:b6:e3:b8:b9:81:8c:44:f4:48:ad:99:81:5e:
                    58:fd:91:12:ab:bd:73:72:21:fb:a8:c8:c2:ab:34:
                    b6:45:f0:e4:eb:fb:ba:9e:02:5d:93:a1:60:6b:f6:
                    b9:41:76:5d:c2:fd:4a:8c:2d:34:f4:fa:06:75:4a:
                    dc:26:1c:c7:52:3d:fa:23:9d:65:3e:8f:57:49:77:
                    97:e6:6a:0c:8a:1a:dc:cb:cf:db:1f:20:62:ab:74:
                    28:d6:2b:cb:8f:51:b3:2e:14:4c:b8:24:34:f0:7f:
                    a9:e9:6a:f8:6f:66:3b:06:83:d5:8f:c5:d9:53:3f:
                    c4:a3:ba:c2:fc:92:8d:fa:b1:2f:a4:43:34:72:69:
                    d1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:64:1B:A5:62:D9:31:C2:09:1D:5E:E5:F2:C0:F2:BD:19:D9:ED:2C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dk83qqzMNzXUzJdD1Ne4hLbne1K8WS6Rpi5xBykRFZ14/0/2B641BA562D931C2091D5EE5F2C0F2BD19D9ED2C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.156.0/23
                IPv6:
                  2801:80:510::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52652

    Signature Algorithm: sha256WithRSAEncryption
         30:41:47:66:bb:e2:f5:e2:1c:06:69:1a:78:fa:43:7f:1c:4d:
         40:fc:dd:74:29:6f:2a:60:8a:f8:8c:f6:04:1a:74:28:6b:f3:
         af:4a:d3:e5:69:6b:d2:37:62:19:f8:00:73:9c:f0:0d:ea:4a:
         50:0a:28:09:de:4f:5d:a7:6b:9f:b7:d9:fa:bb:50:75:0c:cd:
         d4:c4:af:66:56:89:e8:8f:6d:a3:49:fd:96:61:35:fb:10:1c:
         3f:c4:34:2f:f8:dd:8c:16:92:ff:db:cd:bf:19:1b:13:41:ca:
         25:cd:41:6c:fa:24:b7:1b:95:ea:e9:2e:ef:13:cf:e8:96:cb:
         99:87:eb:4e:cb:f2:4c:06:7b:70:3e:54:e6:00:6c:96:7b:e8:
         65:5e:26:f9:da:df:1e:b4:dd:0f:24:7e:61:f5:4b:2b:cc:b7:
         ee:5f:de:18:76:7e:67:39:04:11:64:e4:b2:d4:3f:88:18:13:
         68:40:21:9f:27:0e:90:0d:96:73:bf:8e:11:14:f3:3e:e8:70:
         7b:bb:bd:be:06:3e:b4:eb:08:1d:a0:5a:67:6a:86:88:34:c8:
         92:e0:df:fa:ce:33:9a:88:99:18:6b:f4:10:f5:40:73:ad:b6:
         22:59:82:0e:d1:6f:42:f4:61:c7:da:ec:68:66:90:6f:af:d6:
         10:49:e0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org