Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2B794919B4A2E704922E74889B320C6984D8D996.cer
File:                     2B794919B4A2E704922E74889B320C6984D8D996.cer (raw, json)
Hash identifier:          AFHPBnYCq8GPmWaVXc4WgPG54opOhOtKdDYqwD4ARhY=
Subject key identifier:   2B:79:49:19:B4:A2:E7:04:92:2E:74:88:9B:32:0C:69:84:D8:D9:96
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       11D71A75EF7861060871F5B50B987E47E25EE76E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/2B794919B4A2E704922E74889B320C6984D8D996.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Oct 2022 21:05:13 +0000
Certificate not after:    Tue 24 Oct 2023 21:10:13 +0000
Subordinate resources:    AS: 53195
                          IP: 187.121.144.0/21
                          IP: 201.87.240.0/20
                          IP: 2804:3a8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d7:1a:75:ef:78:61:06:08:71:f5:b5:0b:98:7e:47:e2:5e:e7:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 21:05:13 2022 GMT
            Not After : Oct 24 21:10:13 2023 GMT
        Subject: CN=2B794919B4A2E704922E74889B320C6984D8D996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:1e:e5:e2:40:e1:33:ee:3e:d5:07:54:44:
                    a3:ea:f5:18:6e:c1:99:6b:eb:8d:69:77:fd:74:fd:
                    61:af:60:1f:b2:d3:00:a1:b4:de:e0:76:48:f3:bf:
                    78:d0:56:87:b0:9e:c8:f9:77:a6:24:f3:24:ab:0c:
                    d7:ca:92:fa:4a:cd:92:63:5c:eb:c0:6a:54:72:7f:
                    74:db:ff:e0:34:15:e8:66:1f:3b:64:58:13:ac:03:
                    9d:cb:ea:f9:5d:3d:5a:ef:da:44:90:8f:9e:de:bb:
                    fd:99:bd:a8:41:7c:3f:eb:f1:77:91:a2:a7:0b:18:
                    71:03:a2:f6:fa:49:59:86:85:bd:16:72:6f:aa:e1:
                    f9:78:e0:19:bd:4b:84:56:2a:3a:ba:c7:02:3f:d8:
                    23:37:08:19:30:9f:73:42:99:66:20:fd:3a:54:49:
                    8c:c4:2b:03:00:96:d1:55:e6:10:1f:66:98:9e:4a:
                    71:62:62:bc:02:df:e3:0c:e6:cf:2a:45:42:82:58:
                    ab:0d:06:f2:99:cd:b4:6e:1a:57:dc:6f:23:8d:84:
                    02:b2:9b:09:71:a1:ee:3c:21:8a:ae:31:ff:96:a0:
                    2f:43:f7:7e:a8:54:b8:e2:fb:b9:70:fe:ba:b3:97:
                    cc:09:4b:76:38:00:7a:01:8c:28:fb:b8:b3:fd:98:
                    e6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:79:49:19:B4:A2:E7:04:92:2E:74:88:9B:32:0C:69:84:D8:D9:96
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/2B794919B4A2E704922E74889B320C6984D8D996.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.144.0/21
                  201.87.240.0/20
                IPv6:
                  2804:3a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53195

    Signature Algorithm: sha256WithRSAEncryption
         9f:eb:27:7f:64:7d:5c:24:bd:21:27:eb:0c:0d:c7:41:ea:4b:
         85:0d:dc:91:c4:7c:40:8a:97:70:23:3a:b7:70:e1:7f:8e:1c:
         cd:f1:32:d5:af:b2:40:b7:39:23:10:64:ab:3b:96:2e:7a:e3:
         e3:86:ec:59:50:e3:af:11:89:f3:38:92:aa:6b:c5:54:3c:b9:
         fc:8f:a2:7c:75:c6:99:44:f8:8a:70:22:fe:d2:68:68:33:b8:
         1f:bc:1c:a1:cf:3a:2d:37:6f:9e:eb:a5:a6:15:c5:f1:62:32:
         26:62:5d:98:de:91:b5:70:d4:72:1e:3b:5f:a7:fb:87:ce:71:
         fc:44:b9:31:7d:ab:24:bb:47:ec:06:11:27:23:8f:30:ee:ed:
         df:cc:ed:5e:f9:17:8d:86:91:8b:e8:71:0e:f6:22:6c:87:46:
         66:e1:be:07:c2:4c:94:c4:49:08:83:ba:6a:e8:48:92:4e:ed:
         e2:39:1d:3d:65:8a:bb:df:73:a8:ff:e3:c9:a4:38:05:db:98:
         a4:c0:5f:2c:3f:0b:e0:ff:2c:c1:41:55:ce:cf:93:45:04:fb:
         5b:93:6a:e2:21:7a:05:e5:fe:f1:77:e0:18:92:39:da:61:f5:
         66:f3:84:6f:02:d2:46:82:0f:d1:1e:f8:d3:34:f3:8e:f4:4e:
         14:68:a4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:15 2025 by rpki-client