Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2BEBAD8A51D3C847E4A4E1E0997CB78487F04FD8.cer
File:                     2BEBAD8A51D3C847E4A4E1E0997CB78487F04FD8.cer (raw, json)
Hash identifier:          eYW7f2vVQxBLq6ufVagR53mQnlj98h3K4gLVUospZRI=
Subject key identifier:   2B:EB:AD:8A:51:D3:C8:47:E4:A4:E1:E0:99:7C:B7:84:87:F0:4F:D8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       21A246260579D77AFDCCF333D5AA221344D68A91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/1/2BEBAD8A51D3C847E4A4E1E0997CB78487F04FD8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Aug 2023 18:53:03 +0000
Certificate not after:    Mon 19 Aug 2024 18:58:03 +0000
Subordinate resources:    AS: 263970
                          IP: 138.255.64.0/22
                          IP: 2804:289c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a2:46:26:05:79:d7:7a:fd:cc:f3:33:d5:aa:22:13:44:d6:8a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 21 18:53:03 2023 GMT
            Not After : Aug 19 18:58:03 2024 GMT
        Subject: CN=2BEBAD8A51D3C847E4A4E1E0997CB78487F04FD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0a:a8:1f:b7:3f:15:c4:60:7d:5c:e9:f6:d0:
                    65:20:12:91:4b:05:3a:b0:c7:03:23:2d:87:8f:18:
                    c4:27:91:59:69:78:cb:53:b5:06:fc:a5:09:b5:a7:
                    37:8b:d1:ee:cf:34:24:e1:b5:9a:fa:1e:7c:2e:e0:
                    0e:83:33:17:7e:9c:0d:c3:b4:13:59:03:c9:22:f6:
                    d8:84:65:9b:35:d5:31:61:0d:87:10:11:28:ff:b4:
                    ee:2f:ef:94:5a:7b:fa:05:15:9c:4a:d5:a6:49:08:
                    9a:0f:3a:4d:77:af:4f:f6:08:04:d6:9f:db:77:86:
                    4d:7a:d5:f0:0e:79:0a:39:91:de:08:44:ac:98:e4:
                    15:e2:92:1e:9a:3b:73:27:60:e1:2e:b8:fd:87:d5:
                    be:cf:24:33:e8:45:7d:1f:c5:72:76:28:24:e6:20:
                    2b:c5:cf:31:c5:77:f3:01:65:16:f7:d0:1b:7d:12:
                    60:8a:3a:4b:cb:44:91:e4:ea:6c:b1:31:67:39:6b:
                    ee:78:db:dd:5c:c5:8a:d7:6e:21:dc:ba:28:3d:0a:
                    a1:b2:f5:f8:0c:55:be:e4:9f:d8:08:39:a2:72:b9:
                    f7:d6:2d:66:33:5d:44:22:55:83:35:0f:95:12:1c:
                    a6:be:45:ec:27:23:e5:eb:5c:16:5c:d7:51:c1:6c:
                    35:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:EB:AD:8A:51:D3:C8:47:E4:A4:E1:E0:99:7C:B7:84:87:F0:4F:D8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/1/2BEBAD8A51D3C847E4A4E1E0997CB78487F04FD8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.64.0/22
                IPv6:
                  2804:289c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263970

    Signature Algorithm: sha256WithRSAEncryption
         37:20:80:2d:ac:11:1e:9d:82:da:0c:f9:51:64:b5:98:57:29:
         33:08:b8:ec:15:8f:6c:3e:0d:b1:20:da:89:85:3a:1b:de:43:
         25:96:a8:a9:77:ee:85:da:10:96:3b:a4:6f:32:d7:c9:b4:74:
         7a:cf:f1:9d:be:b0:7b:7d:d6:2b:05:0e:e6:40:4a:ee:4f:50:
         0b:cb:0c:44:27:5b:3f:8b:8d:97:6c:7e:9a:8e:7e:2d:d2:7e:
         3f:fe:d9:75:f6:36:30:86:75:ab:2d:73:5d:93:f6:66:8c:d7:
         da:00:3d:1f:1a:b8:ab:e8:33:09:c1:77:41:a9:82:25:57:f1:
         ec:66:0f:c2:64:0f:67:ac:6a:cd:b0:2e:cd:2f:4f:6f:79:4d:
         72:97:39:5d:f9:ce:83:02:b7:bc:0a:ca:b4:1e:a4:8d:7a:43:
         c3:f3:4a:0a:3f:c8:90:c6:5c:9a:74:e4:94:1b:79:d2:73:d6:
         ba:85:e7:80:ed:c1:ec:29:1a:93:5f:d4:5c:51:9a:1e:1f:bc:
         96:47:ca:1c:08:81:ab:1f:0e:6b:92:59:3f:ae:22:7d:09:61:
         0b:ce:ee:ba:79:32:a6:e9:6e:ea:92:35:74:d1:3f:76:26:7e:
         81:66:b4:4d:b9:9c:be:c5:a8:cf:c1:ca:59:e5:d1:35:af:0a:
         cb:8c:e3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:44:14 2025 by rpki-client