Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer
File:                     2C2CCD4371B86BAD12AAEB2F89F536649B54068D.cer (raw, json)
Hash identifier:          KI46+Y9vTrJgjSrH0EN8eeWPV/aaJZiSuRAi9XBRTYg=
Subject key identifier:   2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7B1F3CA7E708ACE2C7900EA816B1BEE4291BAD98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 12:06:59 +0000
Certificate not after:    Mon 10 Mar 2025 12:11:59 +0000
Subordinate resources:    AS: 270340
                          IP: 190.83.84.0/22
                          IP: 2804:6a80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1f:3c:a7:e7:08:ac:e2:c7:90:0e:a8:16:b1:be:e4:29:1b:ad:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 12:06:59 2024 GMT
            Not After : Mar 10 12:11:59 2025 GMT
        Subject: CN=2C2CCD4371B86BAD12AAEB2F89F536649B54068D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:c6:f5:7c:e1:d5:12:38:a8:56:8c:b3:d6:
                    30:5b:c4:e4:7f:c9:73:f7:dc:c4:34:7b:1b:44:e3:
                    01:b4:5b:c9:b8:a8:ef:fe:31:8e:c7:9b:70:c4:31:
                    9b:af:31:80:c7:6f:76:cd:a8:84:4d:d9:c9:b8:1d:
                    31:75:76:8e:91:a7:2b:88:bc:a6:c3:f7:86:a2:b0:
                    67:03:b1:cf:01:7c:04:0f:44:79:e5:60:b3:12:91:
                    f4:08:47:30:ec:62:66:e9:2c:da:76:f3:c6:1a:8f:
                    f3:70:7b:67:44:29:b4:d8:4e:6e:ac:bd:54:db:24:
                    83:07:73:7a:bf:84:6e:7d:f5:54:28:bb:d7:44:15:
                    d5:8b:c2:1a:28:b8:f2:2d:af:ea:01:9b:7c:6a:7b:
                    60:67:7e:f3:d3:73:01:f7:41:ab:dd:43:7a:95:ec:
                    a6:68:c8:06:f1:94:47:ca:86:95:31:5c:64:96:75:
                    4a:ad:6f:33:7c:64:2d:a0:74:a8:28:43:89:69:ce:
                    d2:81:ed:88:81:03:0a:b4:ef:7f:53:5d:95:19:4d:
                    f7:76:cd:2c:dc:fc:51:6e:4b:54:f5:94:e0:ce:43:
                    5e:9f:40:6e:79:9d:c8:da:4f:71:bd:6f:b3:cb:cb:
                    8c:36:f8:22:08:28:68:27:fb:88:65:f8:57:af:95:
                    06:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:2C:CD:43:71:B8:6B:AD:12:AA:EB:2F:89:F5:36:64:9B:54:06:8D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/0/2C2CCD4371B86BAD12AAEB2F89F536649B54068D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.84.0/22
                IPv6:
                  2804:6a80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270340

    Signature Algorithm: sha256WithRSAEncryption
         7a:15:11:bb:b4:55:5f:b2:ee:54:77:50:f5:00:4a:eb:9d:b0:
         a5:53:95:02:3f:ee:60:ac:fe:96:49:7f:e7:c4:25:05:29:21:
         c6:78:5d:ba:79:72:a0:36:3c:81:11:2b:91:e6:ef:a4:92:cd:
         88:d2:e4:6c:94:e8:ea:9f:8f:0a:b3:14:26:3d:f9:4c:09:d7:
         88:20:08:a6:80:f2:69:89:27:62:ff:65:b7:92:2b:88:38:eb:
         49:1e:ee:53:a0:60:8d:09:72:5f:c2:f4:ab:75:1c:af:36:69:
         f1:c9:16:ca:fa:25:8e:e8:14:d1:33:6d:cb:37:96:c1:ae:fe:
         57:f6:7d:cc:ba:8f:16:95:5b:cc:f7:ab:a7:f5:5b:0a:dc:31:
         02:76:75:08:25:36:b8:c7:26:52:7a:5e:8c:8a:01:ff:b6:8a:
         90:fe:5b:0a:9e:a0:43:a2:b1:74:5a:d6:36:6a:3d:80:fe:d4:
         c6:f8:3b:88:08:a0:d9:8e:64:0b:71:a1:b1:b6:5e:a7:f6:5c:
         ff:0f:52:32:ef:29:fa:85:f4:3f:b2:ea:05:ea:05:c6:64:6d:
         0a:9a:18:c0:62:21:df:fa:93:5d:ba:3c:57:fa:77:69:6c:d5:
         a1:1b:31:b2:49:ee:56:87:ef:58:f9:00:4e:2f:4b:f3:cb:61:
         89:09:fa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org