Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2C08A631AAA7CB77C74E7E1D34A6895A1102D4CD.cer
File:                     2C08A631AAA7CB77C74E7E1D34A6895A1102D4CD.cer (raw, json)
Hash identifier:          MU3oCRHG6UycRfZA9FjrNlns58gpNcuPUClImZftz9A=
Subject key identifier:   2C:08:A6:31:AA:A7:CB:77:C7:4E:7E:1D:34:A6:89:5A:11:02:D4:CD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       791AFC688766234862ACEFC03BC7FE8590C1F5BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/2/2C08A631AAA7CB77C74E7E1D34A6895A1102D4CD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 May 2023 14:51:14 +0000
Certificate not after:    Thu 02 May 2024 14:56:14 +0000
Subordinate resources:    AS: 61582
                          IP: 138.99.168.0/22
                          IP: 170.231.140.0/22
                          IP: 2804:3248::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:1a:fc:68:87:66:23:48:62:ac:ef:c0:3b:c7:fe:85:90:c1:f5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  4 14:51:14 2023 GMT
            Not After : May  2 14:56:14 2024 GMT
        Subject: CN=2C08A631AAA7CB77C74E7E1D34A6895A1102D4CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d1:23:21:5b:21:1d:6a:ad:dd:b4:d4:a2:b2:
                    3c:e1:12:b6:4b:0d:77:21:97:a0:cc:45:d2:d5:6a:
                    a9:47:1d:c2:5d:65:1b:2f:8e:68:ab:ba:86:6a:2f:
                    ee:a7:e0:a3:b2:4b:52:32:0f:32:b7:66:aa:a0:cd:
                    c1:3b:1a:96:b9:35:ce:65:13:d3:21:ff:1f:06:d2:
                    0c:3d:8e:75:6b:46:35:4f:e0:06:9b:3a:34:a2:53:
                    f3:b5:56:48:fc:65:e4:fe:52:09:4d:16:14:85:c3:
                    23:24:5b:cf:19:e7:5e:ab:61:8b:67:d3:7a:0b:f5:
                    ce:4a:ca:8f:14:0b:d5:74:2a:de:c9:a2:d7:38:c0:
                    69:ea:d0:75:99:e8:d9:4b:6f:5a:55:1f:20:8b:8b:
                    41:f2:40:a4:da:ab:80:c2:ae:3b:7c:4b:3e:9f:bd:
                    0f:5f:88:35:1d:e4:18:c1:85:f3:76:1c:b6:61:80:
                    27:ed:e0:18:eb:22:14:9a:40:5c:f7:f0:35:93:bd:
                    04:b8:fd:e1:90:b6:67:95:22:3d:28:b7:39:31:d4:
                    b1:10:0d:dc:df:c7:e6:cb:29:32:cf:f1:a6:01:b5:
                    c1:1f:51:72:2f:4a:88:d0:9f:a2:e5:11:ce:dd:ed:
                    fa:3f:39:c9:d2:19:83:9f:95:38:c2:3d:21:1a:84:
                    1d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:08:A6:31:AA:A7:CB:77:C7:4E:7E:1D:34:A6:89:5A:11:02:D4:CD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/2/2C08A631AAA7CB77C74E7E1D34A6895A1102D4CD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.168.0/22
                  170.231.140.0/22
                IPv6:
                  2804:3248::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61582

    Signature Algorithm: sha256WithRSAEncryption
         27:eb:98:57:65:98:33:ac:93:5b:6d:d1:c5:7c:47:cf:3d:de:
         47:e0:bd:bf:83:01:72:75:aa:fe:6d:d6:ec:8d:54:8d:28:ea:
         48:a8:14:cf:2b:ee:83:94:65:84:3b:63:90:96:1f:fe:50:45:
         e5:31:30:af:e4:c4:cd:0d:9b:b9:6d:78:53:70:0a:8d:81:91:
         69:9c:66:bc:53:fb:69:59:ab:7d:12:2a:5f:03:6d:c2:84:cf:
         00:d0:0d:f4:b3:51:ca:09:b8:20:a0:af:d9:32:c0:e9:d1:91:
         e9:0e:36:16:91:81:d8:53:c4:8f:50:26:91:da:48:5f:e7:a0:
         73:55:e8:84:01:36:1d:4d:fb:9e:5b:26:6c:59:bc:75:ab:8d:
         46:61:c1:6c:9f:2b:b4:ec:60:56:ac:d2:6c:cf:58:8c:6f:df:
         56:be:a2:e3:9c:ba:1e:bc:36:e3:c1:de:38:57:ba:d0:35:db:
         da:06:b6:db:41:34:bc:2f:aa:03:35:bf:75:ea:9f:60:56:0c:
         80:df:93:b0:91:81:33:ed:aa:86:4e:7f:50:79:7f:74:ee:a2:
         76:c1:f4:07:47:b7:09:a5:e3:ce:c6:3d:46:9d:5b:ec:0d:a4:
         d3:83:29:67:f6:9e:ed:77:3a:96:f7:f5:b6:85:bb:d7:db:b9:
         ec:9c:35:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org