Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2B9940D968C1B623E26643DE1361C10DB3EB7A8A.cer
File:                     2B9940D968C1B623E26643DE1361C10DB3EB7A8A.cer (raw, json)
Hash identifier:          5SGf5IgUSE1o7KHlmozw5+nyS/yEDp/uJZ7KIOvTQB0=
Subject key identifier:   2B:99:40:D9:68:C1:B6:23:E2:66:43:DE:13:61:C1:0D:B3:EB:7A:8A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F36BD1BEC9FFDFBFE60A79C4B33E708B3D5E770
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/2B9940D968C1B623E26643DE1361C10DB3EB7A8A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Dec 2022 18:28:36 +0000
Certificate not after:    Thu 14 Dec 2023 18:33:36 +0000
Subordinate resources:    AS: 265184
                          IP: 167.249.160.0/22
                          IP: 2804:2bec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:36:bd:1b:ec:9f:fd:fb:fe:60:a7:9c:4b:33:e7:08:b3:d5:e7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 15 18:28:36 2022 GMT
            Not After : Dec 14 18:33:36 2023 GMT
        Subject: CN=2B9940D968C1B623E26643DE1361C10DB3EB7A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dc:f4:8c:19:91:0c:16:57:a1:9e:25:52:50:
                    19:65:4c:88:7c:c8:f5:07:7a:de:2d:9d:56:a0:f2:
                    84:0b:a6:be:52:7d:d2:30:e1:93:b7:44:b5:28:d7:
                    6a:16:83:81:0f:c1:e3:c6:c6:80:bd:85:09:d9:21:
                    6c:96:f9:f0:04:21:54:7a:5c:ba:86:b9:f6:9a:6a:
                    4e:df:72:9e:27:64:ba:07:b4:15:7f:fd:63:34:58:
                    e1:98:db:9e:d8:b3:f0:b5:f0:2f:49:dc:17:09:11:
                    59:52:8c:5c:67:b5:cb:e8:46:5b:64:51:e0:9d:a4:
                    ef:d3:66:0c:d6:7f:4b:c5:8e:4d:d6:fd:12:65:c1:
                    81:cb:1b:cc:b3:e0:2c:4a:b1:d0:20:e5:d7:ae:da:
                    b5:97:91:06:24:a1:9e:17:cc:52:ad:9b:18:73:5f:
                    8a:cd:fa:47:5c:40:95:26:f1:d9:29:fc:95:2b:d8:
                    4b:cb:b8:d0:67:ef:ec:f6:66:1d:96:f9:f5:f9:ca:
                    36:52:b8:68:6e:51:45:97:7c:92:77:da:02:07:28:
                    1a:39:58:c7:31:7c:9d:81:53:41:37:f7:13:ee:eb:
                    81:b2:5b:ed:5f:c0:c4:b0:66:ce:b8:70:e2:91:91:
                    f0:45:8d:ef:db:bf:61:0d:1e:5e:47:d5:a8:dc:8d:
                    e7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:99:40:D9:68:C1:B6:23:E2:66:43:DE:13:61:C1:0D:B3:EB:7A:8A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/2B9940D968C1B623E26643DE1361C10DB3EB7A8A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.160.0/22
                IPv6:
                  2804:2bec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265184

    Signature Algorithm: sha256WithRSAEncryption
         89:b9:35:d6:c8:df:a6:62:e7:81:c0:5a:4f:88:a5:ac:18:bb:
         25:e2:77:3e:14:31:36:b9:12:b3:6d:ab:39:63:cb:52:f6:a4:
         94:17:33:e3:0c:cc:41:29:be:11:fe:b2:e1:d8:cf:43:07:c4:
         1b:48:b2:06:c2:5c:44:9c:49:65:e4:f7:62:01:1b:88:49:9a:
         5e:5d:e9:3d:b6:07:50:ef:96:2d:13:cb:eb:7e:5b:65:70:38:
         1e:dd:6a:1f:ce:9d:3d:dc:75:7e:ca:7e:18:5a:b9:b1:02:91:
         18:7a:e7:4a:25:59:5c:f6:87:3f:23:d0:6a:7f:bf:a8:19:67:
         a4:bb:73:c4:d4:28:e7:12:92:2b:9a:86:89:9f:5f:24:e1:df:
         f5:56:23:25:03:4d:ca:6c:67:a5:1a:29:b0:32:de:89:6b:3f:
         4f:51:97:4c:43:2d:23:cc:2c:7b:e1:a0:e1:29:f0:4e:4e:4e:
         b8:c7:24:4a:4a:f3:94:b1:6b:ad:9d:c8:64:cf:f3:14:6e:8e:
         cc:4b:ec:c0:06:d4:60:e9:0b:34:42:77:e5:9f:5c:96:fa:a8:
         d6:bf:02:e1:13:a0:e5:5b:d4:db:44:35:bd:9d:bf:fe:a9:bd:
         e5:bd:9c:97:26:7c:dc:a8:ba:ca:83:5c:2d:50:f5:57:3c:c4:
         29:14:42:4f
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUfza9G+yf/fv+YKecSzPnCLPV53AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjEyMTUxODI4MzZaFw0yMzEyMTQxODMzMzZaMDMxMTAvBgNV
BAMTKDJCOTk0MEQ5NjhDMUI2MjNFMjY2NDNERTEzNjFDMTBEQjNFQjdBOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK3PSMGZEMFlehniVSUBllTIh8
yPUHet4tnVag8oQLpr5SfdIw4ZO3RLUo12oWg4EPwePGxoC9hQnZIWyW+fAEIVR6
XLqGufaaak7fcp4nZLoHtBV//WM0WOGY257Ys/C18C9J3BcJEVlSjFxntcvoRltk
UeCdpO/TZgzWf0vFjk3W/RJlwYHLG8yz4CxKsdAg5deu2rWXkQYkoZ4XzFKtmxhz
X4rN+kdcQJUm8dkp/JUr2EvLuNBn7+z2Zh2W+fX5yjZSuGhuUUWXfJJ32gIHKBo5
WMcxfJ2BU0E39xPu64GyW+1fwMSwZs64cOKRkfBFje/bv2ENHl5H1ajcjecbAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQrmUDZaMG2I+Jm
Q94TYcENs+t6ijAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84NHFRdEI5Z0tlVG9vTk4zSnEyMjNBZ1FTSjRkdDFLTWl4
cXJQeG5VNzN0Si8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84NHFRdEI5Z0tlVG9vTk4zSnEyMjNBZ1FTSjRkdDFLTWl4
cXJQeG5VNzN0Si8wLzJCOTk0MEQ5NjhDMUI2MjNFMjY2NDNERTEzNjFDMTBEQjNF
QjdBOEEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqf5oDANBAIAAjAHAwUA
KAQr7DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEC+AwDQYJKoZIhvcNAQELBQAD
ggEBAIm5NdbI36Zi54HAWk+IpawYuyXidz4UMTa5ErNtqzljy1L2pJQXM+MMzEEp
vhH+suHYz0MHxBtIsgbCXEScSWXk92IBG4hJml5d6T22B1Dvli0Ty+t+W2VwOB7d
ah/OnT3cdX7KfhhaubECkRh650olWVz2hz8j0Gp/v6gZZ6S7c8TUKOcSkiuahomf
XyTh3/VWIyUDTcpsZ6UaKbAy3olrP09Rl0xDLSPMLHvhoOEp8E5OTrjHJEpK85Sx
a62dyGTP8xRujsxL7MAG1GDpCzRCd+WfXJb6qNa/AuEToOVb1NtENb2dv/6pveW9
nJcmfNyousqDXC1Q9Vc8xCkUQk8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org