Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2B7EDF5732432D3B4B5D7B6FD15C5041E8A04D31.cer
File:                     2B7EDF5732432D3B4B5D7B6FD15C5041E8A04D31.cer (raw, json)
Hash identifier:          6+HmVrR2fRrPrUSnryr2MlxB7SOZ5AJ963Rf08yBLnM=
Subject key identifier:   2B:7E:DF:57:32:43:2D:3B:4B:5D:7B:6F:D1:5C:50:41:E8:A0:4D:31
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2C686C48BD80CA5B91EE108BD4C5A216B3EBBA28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/0/2B7EDF5732432D3B4B5D7B6FD15C5041E8A04D31.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Dec 2022 21:30:56 +0000
Certificate not after:    Wed 27 Dec 2023 21:35:56 +0000
Subordinate resources:    AS: 272193
                          IP: 2804:835c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:68:6c:48:bd:80:ca:5b:91:ee:10:8b:d4:c5:a2:16:b3:eb:ba:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 28 21:30:56 2022 GMT
            Not After : Dec 27 21:35:56 2023 GMT
        Subject: CN=2B7EDF5732432D3B4B5D7B6FD15C5041E8A04D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:98:45:35:e8:e9:34:5b:83:61:39:72:84:
                    d0:f7:dd:71:1e:a9:ce:8f:1a:47:89:c0:a0:54:b6:
                    93:c1:65:6b:5c:ab:aa:86:5d:5e:3f:50:a4:e5:90:
                    fc:8d:ec:ae:61:98:e7:b5:ed:0a:18:af:95:78:13:
                    9b:10:41:23:20:bb:48:98:9f:55:7d:1f:bd:43:5d:
                    b6:71:d4:0e:bb:a1:b1:92:b5:ac:b9:09:a9:a8:96:
                    cf:ec:ed:f4:9e:8b:10:e4:d5:49:a6:ad:1e:aa:02:
                    a7:b0:60:13:91:92:09:44:c2:cc:49:44:5a:b9:e5:
                    20:92:fb:3d:8b:ed:f9:b0:9a:cc:fd:83:32:96:e1:
                    4c:d7:dc:ab:a1:e3:27:e8:30:19:a5:7f:51:c9:f1:
                    29:c3:4a:ca:ab:f2:ea:96:0c:2e:57:3a:2c:31:0d:
                    fe:8b:a1:6a:36:69:c1:6f:d6:ca:a5:fc:4d:6b:8f:
                    1b:5d:22:f4:0d:7d:d4:d5:30:ee:f0:cc:01:67:e2:
                    1d:77:7a:29:7d:77:8b:79:70:76:e5:38:59:fa:b5:
                    fe:71:87:ec:98:9d:fa:dc:7a:84:80:92:79:3c:20:
                    ac:2e:e6:42:55:54:d5:53:7e:6d:7b:5c:2b:dc:6f:
                    d3:b2:3e:8e:95:5b:ee:6f:05:58:eb:59:7f:af:1e:
                    4a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:7E:DF:57:32:43:2D:3B:4B:5D:7B:6F:D1:5C:50:41:E8:A0:4D:31
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/0/2B7EDF5732432D3B4B5D7B6FD15C5041E8A04D31.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:835c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272193

    Signature Algorithm: sha256WithRSAEncryption
         87:fe:ff:87:fd:96:84:3c:d7:0b:97:1d:d8:c0:03:03:c5:09:
         e4:28:ce:1a:d2:88:97:57:34:9d:e5:d8:9a:5d:de:2b:a2:7b:
         ad:19:10:88:18:93:cf:8f:bd:18:53:b4:4b:79:f3:a6:e6:13:
         e2:02:c0:00:5b:b5:ba:12:da:7b:f5:5c:ca:6e:0d:76:2f:34:
         fe:7d:c9:ac:91:d6:6e:d2:e9:66:b2:72:22:d8:2f:63:b2:81:
         39:7c:8f:97:6b:f0:42:e3:1f:59:9f:3b:33:dd:de:77:a5:2c:
         f8:dc:39:e4:d8:b2:fa:94:fa:01:71:96:c6:da:7c:38:ad:8b:
         22:6a:cc:7a:ce:12:33:c7:ad:a8:81:df:2d:37:ed:e4:ab:15:
         bf:8e:07:fa:f4:5b:ef:81:79:b7:1f:6a:f4:ec:24:0a:f9:fb:
         17:f7:97:29:02:46:64:2a:3f:bf:66:61:40:10:d3:d3:ba:11:
         1a:1b:5f:d8:e7:73:4c:08:33:17:a2:9c:b2:22:14:db:ec:5e:
         70:c6:6d:0f:22:5f:75:15:00:aa:e8:3d:d0:c9:23:f3:42:0c:
         64:6c:5b:7f:f8:79:ac:44:ac:5f:77:25:b2:e9:c3:bd:1a:6d:
         fb:ac:30:39:07:b4:ce:23:5b:6f:ba:a6:23:57:64:0a:e3:9d:
         40:12:44:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org