Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2C8F79E76852475DDED25004F5D935390FAB63C4.cer
File:                     2C8F79E76852475DDED25004F5D935390FAB63C4.cer (raw, json)
Hash identifier:          iOlXdetJq/wK8ZTf3Mht0B0sMbZPo7YwqsGHRMr0g1k=
Subject key identifier:   2C:8F:79:E7:68:52:47:5D:DE:D2:50:04:F5:D9:35:39:0F:AB:63:C4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       59086235C559DA954E1ED0E6392823D9ABE483CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1/2C8F79E76852475DDED25004F5D935390FAB63C4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 13:49:07 +0000
Certificate not after:    Thu 18 Apr 2024 13:54:07 +0000
Subordinate resources:    AS: 266563
                          IP: 45.6.196.0/22
                          IP: 2804:3dec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:08:62:35:c5:59:da:95:4e:1e:d0:e6:39:28:23:d9:ab:e4:83:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 20 13:49:07 2023 GMT
            Not After : Apr 18 13:54:07 2024 GMT
        Subject: CN=2C8F79E76852475DDED25004F5D935390FAB63C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:10:19:ef:9d:03:18:e0:83:f9:43:8f:14:5f:
                    3e:aa:66:76:2a:27:4e:24:de:e6:28:f9:f2:0d:9c:
                    3c:2b:4e:5c:24:d4:2e:2a:c9:47:64:7c:a6:7f:a5:
                    b1:9a:a7:d7:3c:ab:16:dd:90:f4:9b:a7:96:80:07:
                    0a:23:84:c2:03:c6:f5:71:c0:8b:e0:fa:49:58:70:
                    d5:11:9f:8c:e4:21:70:d0:7b:22:6b:c6:f8:50:16:
                    1d:79:64:29:e2:1e:9b:2a:79:ee:af:cc:15:2e:3f:
                    b2:75:5f:da:6a:86:e6:6d:3e:68:89:0e:f0:9d:30:
                    01:9c:bf:cf:f1:9c:7d:31:5b:bc:65:06:c0:3d:76:
                    5b:43:3f:a4:04:c2:47:7a:f7:49:cf:7a:5d:31:81:
                    ec:f4:d7:a0:c4:84:59:e2:2e:05:4d:2b:53:49:ee:
                    83:f0:8a:88:ab:f9:f1:14:7b:79:e5:fa:e4:4e:a9:
                    ae:09:80:0b:28:85:38:95:32:8f:c3:42:a5:b7:77:
                    ed:a8:46:06:19:78:4d:6c:1d:79:cb:8f:9f:36:dd:
                    ca:a8:5b:66:c8:34:e1:66:7b:60:ca:b2:43:b3:14:
                    15:28:1f:3e:7f:7d:59:0f:8a:78:78:0d:ac:65:13:
                    09:fd:92:ec:b9:7c:52:1c:f2:6e:9a:dc:84:6c:c1:
                    31:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:8F:79:E7:68:52:47:5D:DE:D2:50:04:F5:D9:35:39:0F:AB:63:C4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1/2C8F79E76852475DDED25004F5D935390FAB63C4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.196.0/22
                IPv6:
                  2804:3dec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266563

    Signature Algorithm: sha256WithRSAEncryption
         9d:b6:59:b9:20:3c:ec:c6:4b:b3:e1:78:9f:b9:e4:48:46:63:
         56:cc:16:74:8b:3b:dd:9c:9d:22:aa:8a:75:3a:81:ce:83:f6:
         57:aa:ad:42:ee:db:21:dc:de:16:e9:a3:a9:02:85:08:85:9e:
         94:35:77:86:7c:02:72:fc:57:45:7e:e7:93:16:d0:c0:ae:bd:
         10:a6:ed:47:6e:e0:d4:7c:7e:c0:ee:41:bb:1a:ea:fa:1c:c6:
         32:14:91:1c:5d:82:3d:ba:c4:d0:dc:a7:4d:2a:f5:b6:79:fd:
         97:e0:90:50:e7:f2:57:b3:16:0b:91:8b:1c:5a:0b:32:db:7f:
         5c:2b:3d:7a:e3:8b:26:be:a3:2a:14:ca:40:03:c8:ce:2b:c5:
         8e:97:03:6d:dc:41:a5:32:d1:3f:bf:05:df:7e:31:73:02:8d:
         60:6e:a6:66:dd:72:28:38:5f:76:79:ff:94:be:83:20:27:62:
         7d:02:e5:8f:ee:e6:4a:da:03:10:2c:60:ff:57:2d:49:19:b4:
         54:ad:74:dc:be:ff:f4:ab:08:ce:81:26:31:31:71:bd:ff:08:
         59:c0:c4:10:ad:4e:90:7f:ea:07:52:b9:c4:1f:ec:c6:1d:74:
         82:b6:6e:ae:8f:11:f1:53:12:05:bf:ee:06:89:27:85:5f:99:
         4a:12:b0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org