Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2B9BAD4A649403CAA3BD93A70813B16191638E2F.cer
File:                     2B9BAD4A649403CAA3BD93A70813B16191638E2F.cer (raw, json)
Hash identifier:          zOmK0/moEkqqKAKkDWPzTIojmCded8xoLFr8tjicO0E=
Subject key identifier:   2B:9B:AD:4A:64:94:03:CA:A3:BD:93:A7:08:13:B1:61:91:63:8E:2F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5483FFB53582515F45D2295511EF8D2DC21951E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/2B9BAD4A649403CAA3BD93A70813B16191638E2F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 06:30:15 +0000
Certificate not after:    Tue 03 Dec 2024 06:35:15 +0000
Subordinate resources:    AS: 273606
                          IP: 2804:8978::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:83:ff:b5:35:82:51:5f:45:d2:29:55:11:ef:8d:2d:c2:19:51:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 06:30:15 2023 GMT
            Not After : Dec  3 06:35:15 2024 GMT
        Subject: CN=2B9BAD4A649403CAA3BD93A70813B16191638E2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:ac:51:0b:30:e9:95:76:74:9e:07:d6:f5:
                    68:98:4d:e3:04:77:19:dc:65:7c:19:55:3f:6d:05:
                    82:93:86:b8:6a:da:0c:a8:ff:22:3c:37:94:b2:14:
                    c8:db:c1:3e:b2:24:eb:4e:5a:b5:2c:39:98:e6:6b:
                    7f:15:db:b8:8f:eb:e5:ca:31:fc:21:06:2b:18:f3:
                    dd:53:3b:4a:3d:94:fd:16:91:32:05:5d:e8:fd:5d:
                    3c:9e:cd:f4:7d:0b:95:c7:1a:bf:27:9e:57:f5:20:
                    e6:5e:c3:80:b0:e5:08:f3:35:89:8e:71:a9:af:c1:
                    bd:d3:ec:b9:bf:24:f6:8d:3a:00:af:c1:5b:f7:35:
                    21:98:cc:e6:41:15:28:65:38:51:95:c7:54:c7:41:
                    21:8f:63:32:94:8e:98:ba:b2:d4:c5:20:42:b0:43:
                    e9:d2:bd:38:1f:02:f6:05:e5:0d:4d:ca:c3:89:c1:
                    a2:74:b0:79:6a:6e:96:76:99:9b:f7:79:f7:53:f7:
                    ff:1c:42:74:0b:d5:c0:29:5f:9a:15:dc:ce:2d:2c:
                    0c:a7:8d:88:c7:ea:31:a3:b6:ec:e9:95:f3:02:1d:
                    7d:51:dd:8a:7c:37:8e:9a:28:ef:25:c9:05:b5:a1:
                    44:15:fb:29:8e:13:f4:1f:22:b2:c5:7c:9b:46:04:
                    5f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:9B:AD:4A:64:94:03:CA:A3:BD:93:A7:08:13:B1:61:91:63:8E:2F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/2B9BAD4A649403CAA3BD93A70813B16191638E2F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8978::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273606

    Signature Algorithm: sha256WithRSAEncryption
         50:13:45:85:2a:79:2e:18:6d:30:e4:ae:73:5d:63:d7:ce:f6:
         5e:56:65:15:22:fa:b2:36:ac:93:16:07:6d:69:97:a5:2c:a6:
         6f:50:4a:d8:83:34:c3:8d:ff:1e:7f:77:03:5c:50:05:c9:b9:
         9c:d4:47:56:23:c5:1e:eb:d4:f2:b6:d3:fe:06:66:9a:14:10:
         b2:b7:b3:70:93:99:76:af:84:9b:bb:4d:1e:80:70:36:ae:76:
         3f:86:f0:16:57:2e:5e:b2:81:a6:d3:8b:b8:15:00:35:5c:93:
         2e:43:7b:9c:57:36:44:27:44:f0:10:35:11:16:fa:89:4d:46:
         fd:d6:ce:63:1e:e4:28:1f:ff:6d:73:4f:ba:49:02:16:e7:84:
         8c:d5:63:f9:d5:38:a0:33:b9:12:e7:77:88:ff:4c:f5:82:af:
         e6:1b:1f:59:c1:81:51:11:4f:95:38:f6:49:1a:e8:48:b2:39:
         6f:6d:ef:dc:b1:a5:47:1d:10:73:dc:9a:65:87:86:06:db:39:
         d6:fd:b7:e4:cb:ab:86:e1:e5:c7:0e:16:a5:74:a2:a0:93:64:
         d1:76:7b:c2:fd:e4:fb:cd:1d:6b:95:18:98:35:53:cc:35:63:
         6c:36:77:b7:ee:1d:2d:20:74:3c:29:86:56:4d:ab:cb:a0:8a:
         4d:69:9b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:57 2025 by rpki-client