Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2CB826CB06C695182F68FD4CB91D342C0DF2FB6C.cer
File:                     2CB826CB06C695182F68FD4CB91D342C0DF2FB6C.cer (raw, json)
Hash identifier:          qRmxQB+A4d64n8Rjckj2XCw2Uy+MuH2D1qo8o/CYm4U=
Subject key identifier:   2C:B8:26:CB:06:C6:95:18:2F:68:FD:4C:B9:1D:34:2C:0D:F2:FB:6C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       40F1442E5BE6551681F1D465EE00FF5402DA82E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/0/2CB826CB06C695182F68FD4CB91D342C0DF2FB6C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jul 2023 19:43:41 +0000
Certificate not after:    Tue 23 Jul 2024 19:48:41 +0000
Subordinate resources:    AS: 263071
                          IP: 177.73.56.0/22
                          IP: 186.232.188.0/22
                          IP: 191.6.144.0/21
                          IP: 2804:94c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f1:44:2e:5b:e6:55:16:81:f1:d4:65:ee:00:ff:54:02:da:82:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 19:43:41 2023 GMT
            Not After : Jul 23 19:48:41 2024 GMT
        Subject: CN=2CB826CB06C695182F68FD4CB91D342C0DF2FB6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:18:df:42:6a:1a:c5:21:d4:99:66:1f:4a:c5:
                    ee:ff:ef:82:55:e1:03:4e:25:78:8b:c9:c0:da:5e:
                    20:7e:43:e9:3c:85:e1:93:84:8c:cc:f1:ae:2d:f2:
                    24:0f:6c:7b:4b:1b:9b:0a:19:ac:b5:3b:77:0f:93:
                    c4:aa:29:58:b7:b1:f8:9c:ce:49:fa:01:72:84:f9:
                    13:50:be:84:00:46:2a:a4:fc:f6:cc:68:75:0f:35:
                    61:ae:0a:c9:be:9f:96:e6:54:ec:f4:89:39:96:eb:
                    77:fa:68:3a:62:f5:1b:51:b2:dc:d6:94:24:eb:56:
                    6d:b5:0d:de:10:a6:c9:de:23:46:56:09:50:67:48:
                    98:55:60:c2:e4:61:c9:1b:ff:3a:38:6d:e8:e8:4b:
                    08:bb:6a:07:bf:d4:90:da:45:6a:4e:15:da:76:23:
                    dc:43:36:a3:00:ea:d8:9c:d8:81:22:94:01:e4:0d:
                    db:55:49:e0:6c:01:d7:75:6b:94:86:46:b8:f3:09:
                    1e:88:9a:2b:58:13:6c:c7:cf:ab:db:0d:b1:f6:2e:
                    27:e3:bc:36:ae:1c:a4:2c:f3:25:a6:70:34:f8:8a:
                    d5:fa:af:32:0e:0b:a5:10:b0:32:a9:56:0a:b2:0b:
                    94:16:35:e8:59:c4:d8:34:fa:2e:1c:57:dd:d9:f5:
                    23:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:B8:26:CB:06:C6:95:18:2F:68:FD:4C:B9:1D:34:2C:0D:F2:FB:6C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/0/2CB826CB06C695182F68FD4CB91D342C0DF2FB6C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.56.0/22
                  186.232.188.0/22
                  191.6.144.0/21
                IPv6:
                  2804:94c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263071

    Signature Algorithm: sha256WithRSAEncryption
         41:00:b9:2d:95:5b:77:56:76:25:6e:ea:05:cf:d7:89:89:5c:
         32:10:11:03:c8:13:eb:28:97:1f:2e:0c:7f:54:29:c5:d4:bc:
         f8:af:b4:6c:78:67:fe:de:2e:36:6c:bc:47:14:ff:3c:8a:ac:
         5c:cc:0c:ff:bf:89:ca:36:5c:8e:1b:4f:9d:1a:47:6e:d7:cc:
         e8:33:e0:0e:4a:1a:7a:1c:bf:a5:85:c6:47:3f:0d:1e:d9:94:
         23:91:56:fe:7f:ce:45:b2:c2:b9:a1:3c:85:f9:4e:e0:81:82:
         ee:f8:e3:3b:9f:46:a5:e0:13:b7:94:bf:a8:3a:a1:c1:14:d0:
         6f:42:64:8b:a8:84:f8:32:e9:18:c8:df:f7:7b:96:7d:c9:ba:
         6a:91:8b:3b:7e:89:bd:df:92:98:63:1e:07:5b:15:e7:57:d5:
         46:57:ee:36:6a:ca:a3:80:7a:c1:e9:c4:98:56:19:75:b1:4e:
         8c:c7:87:61:96:2a:a7:ef:7d:2e:4c:5f:5a:73:ce:54:0d:1e:
         42:e3:d8:b9:16:6b:42:30:d5:46:88:d2:bd:ad:33:5f:ce:30:
         b1:8b:42:45:cd:10:d1:83:df:00:ae:6c:d7:c4:71:d5:21:f4:
         2d:55:cc:9a:04:0a:6a:02:8e:42:3a:79:6a:4f:22:b4:48:f4:
         d9:a5:27:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org