Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2C4950C71122E144532D0ECA84E49D609A511FEF.cer
File:                     2C4950C71122E144532D0ECA84E49D609A511FEF.cer (raw, json)
Hash identifier:          kxE2Jxa1P6rApfHoFZfSuAghNA0kkNIhqaAdt7VulSw=
Subject key identifier:   2C:49:50:C7:11:22:E1:44:53:2D:0E:CA:84:E4:9D:60:9A:51:1F:EF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3F0D70BE8706007DC9D1482943B9068949631620
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/2C4950C71122E144532D0ECA84E49D609A511FEF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Nov 2023 12:42:56 +0000
Certificate not after:    Fri 01 Nov 2024 12:47:56 +0000
Subordinate resources:    AS: 28263
                          IP: 187.17.160.0/20
                          IP: 201.49.64.0/19
                          IP: 2804:4f8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:0d:70:be:87:06:00:7d:c9:d1:48:29:43:b9:06:89:49:63:16:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  3 12:42:56 2023 GMT
            Not After : Nov  1 12:47:56 2024 GMT
        Subject: CN=2C4950C71122E144532D0ECA84E49D609A511FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:29:4a:76:bc:4f:3a:9d:87:3c:56:57:c2:11:
                    ab:7c:99:7d:38:23:87:b3:b5:55:07:5b:ad:51:61:
                    0d:c0:1e:92:1b:c9:08:87:0e:1b:a9:e7:9d:75:cf:
                    69:79:b9:bf:52:1f:3d:cf:38:bc:3e:c5:a8:f5:d8:
                    0e:98:10:60:55:9e:b2:bb:60:db:3c:aa:96:c5:e6:
                    4c:ae:ff:ac:d8:f9:17:09:0b:ca:61:ee:46:aa:2a:
                    1b:8b:05:c5:4a:c6:e1:16:97:84:3d:3d:b7:d0:89:
                    0e:7b:00:8a:37:9e:4e:e8:a0:67:1e:42:77:0e:2f:
                    90:d7:ae:05:38:2e:b4:2a:9a:3d:76:2c:8b:de:d4:
                    55:7a:39:db:29:91:ce:72:f5:e4:42:52:d5:b0:2e:
                    38:d0:66:37:5c:ce:b0:50:d7:24:1a:06:b3:cb:2f:
                    35:2a:d8:d3:04:2d:40:06:e8:d1:b8:a5:a6:2c:57:
                    cd:9a:6b:a2:e2:20:f7:94:e7:54:59:00:55:64:a0:
                    6b:ec:39:e1:86:aa:88:b0:d5:82:b6:ea:30:41:e3:
                    ff:b1:87:ea:3b:1d:67:9a:84:b9:5d:d9:1f:69:c4:
                    93:4f:0f:3f:04:8b:b1:11:a1:6c:00:4c:8f:b2:de:
                    10:f8:61:bc:1f:45:58:6c:8b:81:78:a9:86:f3:3d:
                    51:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:49:50:C7:11:22:E1:44:53:2D:0E:CA:84:E4:9D:60:9A:51:1F:EF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/2C4950C71122E144532D0ECA84E49D609A511FEF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.160.0/20
                  201.49.64.0/19
                IPv6:
                  2804:4f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28263

    Signature Algorithm: sha256WithRSAEncryption
         34:2f:74:bb:1a:61:9e:4d:67:71:5a:c9:8b:88:b4:d1:27:f0:
         75:27:51:3e:59:28:7b:b6:07:1d:43:68:20:08:27:a9:95:3c:
         74:26:de:dd:22:57:13:a8:af:3d:14:a3:00:af:8b:2a:0e:ee:
         60:43:73:07:d7:a6:77:8a:25:a9:04:f5:b3:48:23:c5:9d:f3:
         ab:65:39:95:3b:30:a3:c8:ce:d0:db:ed:66:d3:d3:f1:9e:58:
         1c:23:01:0b:a0:d3:57:f7:b6:d7:1f:8d:e0:b5:1b:03:76:f1:
         e2:8c:90:78:a9:29:0b:a0:97:6b:9a:54:a6:e2:ab:d9:e2:f8:
         96:91:53:b0:23:ee:b3:de:3e:a1:d6:72:f1:91:85:79:6f:ed:
         77:59:c6:60:c5:d2:13:72:e6:28:7b:e1:0c:8c:df:0b:6b:bb:
         b6:b2:15:c9:46:2f:0d:3b:14:d1:3b:4e:b0:c0:c2:0c:34:3a:
         0e:60:3d:6d:0d:5d:8d:87:53:cd:23:07:f2:ce:98:51:3e:5b:
         be:00:3a:49:49:3c:43:89:87:e0:23:3a:4c:9f:8f:4c:5b:85:
         eb:f6:04:37:97:46:14:30:1b:5c:f9:31:d0:b2:5d:b4:8f:12:
         b6:30:3e:4a:50:06:91:af:13:8a:56:86:8d:60:2d:41:e9:56:
         97:88:ab:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org