Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2B824C0913CF71BF98C43B15F88AD1598E1E47DE.cer
File:                     2B824C0913CF71BF98C43B15F88AD1598E1E47DE.cer (raw, json)
Hash identifier:          qLDn7JCQHj4oMlJ5e+Rzphd8mSudVMRIfrEUX8Cz6b0=
Subject key identifier:   2B:82:4C:09:13:CF:71:BF:98:C4:3B:15:F8:8A:D1:59:8E:1E:47:DE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       638284D2AAD11F380F33D7A2D16B394125EDE620
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/2B824C0913CF71BF98C43B15F88AD1598E1E47DE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Jun 2023 07:48:09 +0000
Certificate not after:    Wed 05 Jun 2024 07:53:09 +0000
Subordinate resources:    AS: 267665
                          IP: 45.224.204.0/22
                          IP: 2804:44fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:82:84:d2:aa:d1:1f:38:0f:33:d7:a2:d1:6b:39:41:25:ed:e6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  7 07:48:09 2023 GMT
            Not After : Jun  5 07:53:09 2024 GMT
        Subject: CN=2B824C0913CF71BF98C43B15F88AD1598E1E47DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2a:b3:5f:56:ac:b0:8a:75:d6:f4:05:99:8f:
                    b2:6a:f5:a8:32:de:8f:58:05:7d:63:40:bb:00:62:
                    50:81:1c:9d:ba:0f:77:23:57:e3:0b:d9:1a:57:6e:
                    3f:34:69:66:79:04:5d:7f:fe:33:23:77:33:d1:6f:
                    fa:d0:23:17:3c:48:ec:0d:cd:f3:bb:f9:3f:0c:ba:
                    ed:56:04:74:a4:54:e7:47:4c:94:8b:ee:4a:f8:10:
                    14:84:ec:af:ca:10:de:45:04:0a:ee:fe:c5:57:b0:
                    43:69:60:14:8d:2d:ae:a1:82:06:42:a5:dc:2d:dc:
                    3f:9f:fa:bf:96:13:b6:e4:46:14:a6:b8:6e:ff:55:
                    a8:7d:68:41:c4:8a:17:23:c3:d9:1c:8b:7e:dc:73:
                    3a:9f:62:7f:6d:7a:8f:84:e0:d0:c2:ce:12:1c:7d:
                    7a:e4:46:19:40:db:51:8e:64:ec:07:50:61:cb:21:
                    9c:e6:95:cb:a6:74:18:9f:87:69:02:7f:28:78:e1:
                    1c:41:0c:10:8a:07:35:c5:a3:b0:46:ac:95:63:6f:
                    a9:95:5a:b5:e0:95:fb:72:2f:ae:1b:aa:35:41:ac:
                    7c:c9:6a:be:80:d4:3f:b9:89:9c:89:32:ca:9a:40:
                    79:4f:30:fe:f5:f0:9a:b9:ae:46:a0:9c:77:4b:af:
                    0a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:82:4C:09:13:CF:71:BF:98:C4:3B:15:F8:8A:D1:59:8E:1E:47:DE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/2B824C0913CF71BF98C43B15F88AD1598E1E47DE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.204.0/22
                IPv6:
                  2804:44fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267665

    Signature Algorithm: sha256WithRSAEncryption
         1a:ed:9e:ca:7e:3a:1c:d1:0c:d2:35:81:d1:27:47:6f:56:e9:
         51:05:ee:18:9a:94:56:4a:6d:82:ab:37:c5:d7:d9:79:c8:28:
         6f:44:cf:f1:80:37:74:e9:e8:39:45:d0:0a:4d:b1:0d:ff:94:
         b4:29:17:d7:b1:7c:7c:bb:ce:a1:8a:1c:89:b1:91:36:1c:b4:
         69:d6:ce:4c:b9:80:3a:43:5d:3f:60:38:c3:4b:ef:f7:58:4d:
         75:4f:6c:04:f8:95:87:89:62:f7:31:cc:6a:21:11:ee:0a:e0:
         9e:c5:c5:ba:5d:57:aa:07:19:68:6d:d5:72:b6:24:21:1b:6b:
         83:1f:cc:cc:b4:ed:1b:44:ff:c0:f5:6c:fa:37:cb:0f:82:54:
         56:7f:3c:fa:08:18:6d:a2:fb:22:a1:12:74:29:2e:10:00:b7:
         ed:76:92:2e:62:8d:e4:7b:81:d1:82:db:19:10:9e:cc:19:2b:
         eb:86:5b:74:3c:21:40:94:87:8f:b1:bf:32:1f:0b:39:80:38:
         16:96:00:c3:a1:c8:f2:55:c6:48:cb:12:5e:f3:46:30:02:e5:
         02:a2:db:c4:d3:fd:8d:a9:07:d0:de:17:e6:0e:40:87:cd:18:
         0f:7d:d2:02:40:65:91:42:7e:5f:70:83:29:1c:f3:12:21:52:
         90:57:98:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org