Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2B687CD69162C4C9D67B54D1B612864A7C4AF30C.cer
File:                     2B687CD69162C4C9D67B54D1B612864A7C4AF30C.cer (raw, json)
Hash identifier:          v0ghQY4pgRSihFIa94Q1RKvxn7CoNu/lmHbyjLktEAo=
Subject key identifier:   2B:68:7C:D6:91:62:C4:C9:D6:7B:54:D1:B6:12:86:4A:7C:4A:F3:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       713BCDA07F5778BE37478346762CBAC705B28197
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/2B687CD69162C4C9D67B54D1B612864A7C4AF30C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Oct 2023 21:38:39 +0000
Certificate not after:    Fri 04 Oct 2024 21:43:39 +0000
Subordinate resources:    AS: 262436
                          IP: 177.52.32.0/22
                          IP: 177.52.164.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:3b:cd:a0:7f:57:78:be:37:47:83:46:76:2c:ba:c7:05:b2:81:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  6 21:38:39 2023 GMT
            Not After : Oct  4 21:43:39 2024 GMT
        Subject: CN=2B687CD69162C4C9D67B54D1B612864A7C4AF30C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:78:b4:91:17:e5:88:cd:65:bb:eb:0e:0a:da:
                    d4:e6:1d:91:ce:2e:fc:5d:00:30:25:ce:42:94:48:
                    31:7d:7a:05:8e:80:39:98:0b:88:9e:0e:ba:63:0b:
                    ac:44:43:76:9d:21:40:f2:66:9b:50:e9:1b:d7:e0:
                    09:36:3f:fe:2f:cc:84:36:ca:a7:5b:0c:08:92:8a:
                    c9:ba:86:bc:80:6f:ec:eb:39:e0:7e:e6:72:97:c0:
                    f0:b2:46:ca:56:30:82:7d:b1:6e:3f:4e:2d:5e:e2:
                    f7:ee:77:ad:f9:a8:19:3c:e0:48:7e:22:23:2a:70:
                    f8:a5:f5:ca:e5:02:84:ee:58:f9:30:41:06:51:94:
                    14:4b:53:4f:d6:a7:97:7b:44:ec:83:b9:e0:78:ef:
                    23:de:65:6b:6f:b4:ef:1f:dc:aa:98:d2:78:2d:71:
                    54:c0:5f:22:7e:53:dc:87:be:d4:2c:af:a5:07:3e:
                    6b:9b:39:44:0d:7d:a7:8c:14:e4:3f:3b:b0:dc:5b:
                    54:c0:66:98:96:d3:50:2b:f2:02:18:c9:3d:d2:d6:
                    bd:70:94:11:13:dd:0f:53:06:78:0d:93:31:a7:bd:
                    7c:c5:a5:db:a3:5b:5f:85:e6:b6:52:79:84:e6:cc:
                    ed:4f:48:ce:09:7f:d2:d6:14:1c:a7:31:f5:6c:45:
                    96:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:68:7C:D6:91:62:C4:C9:D6:7B:54:D1:B6:12:86:4A:7C:4A:F3:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/2B687CD69162C4C9D67B54D1B612864A7C4AF30C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.32.0/22
                  177.52.164.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262436

    Signature Algorithm: sha256WithRSAEncryption
         38:40:98:12:5a:0e:e7:32:f5:51:df:5f:4c:d5:e1:21:c1:96:
         c7:92:f9:36:a5:ef:e2:38:8e:e2:8e:2e:8f:6f:30:08:30:67:
         4b:a2:bb:41:f7:64:73:f7:4d:f8:9e:fb:b3:bc:b8:55:8e:0a:
         eb:a0:f8:4c:c4:33:3e:ac:ff:86:64:90:6b:63:8a:b3:99:67:
         44:f7:8b:2c:55:e0:d1:3f:9d:1b:77:18:9a:d7:be:88:75:eb:
         58:7f:69:da:83:f6:5e:92:e6:e4:66:a2:9a:24:b0:71:de:ac:
         17:fb:ac:6d:15:23:1e:6e:44:6c:be:91:57:1e:3f:50:c0:48:
         31:49:cc:38:59:0d:08:b8:55:06:3d:86:20:60:72:e9:d9:45:
         be:a0:cf:81:38:e0:1b:73:82:94:01:7a:bf:27:b6:75:3c:e6:
         8d:d4:80:ff:1f:e5:a1:fb:69:c6:4b:d9:69:e8:93:ca:ff:2b:
         b3:94:2a:ea:4b:a7:48:2e:78:4b:f1:93:47:f4:38:27:61:11:
         af:f4:bf:04:7b:b5:a7:ec:f7:f7:d0:b0:37:29:ce:51:64:6d:
         ae:66:ad:8a:9a:05:a0:04:51:ef:04:c2:04:99:7b:91:73:27:
         a0:9d:08:4e:e1:a9:d9:d4:70:a0:4e:24:7f:7f:06:a4:22:9d:
         31:06:70:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org