Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2CBB75030A47D2F3C18B047E0F096CF787337032.cer
File:                     2CBB75030A47D2F3C18B047E0F096CF787337032.cer (raw, json)
Hash identifier:          7gIiQqZOmpnqdvlqQhMKr8w5uMVXY0OVQK91aao2aeI=
Subject key identifier:   2C:BB:75:03:0A:47:D2:F3:C1:8B:04:7E:0F:09:6C:F7:87:33:70:32
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       27EEEFA74B970D97FA7DF063AF4B1F1A0F8CCF25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/1/2CBB75030A47D2F3C18B047E0F096CF787337032.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Apr 2024 13:34:01 +0000
Certificate not after:    Thu 10 Apr 2025 13:39:01 +0000
Subordinate resources:    AS: 262506
                          IP: 177.86.96.0/21
                          IP: 2804:725c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ee:ef:a7:4b:97:0d:97:fa:7d:f0:63:af:4b:1f:1a:0f:8c:cf:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 11 13:34:01 2024 GMT
            Not After : Apr 10 13:39:01 2025 GMT
        Subject: CN=2CBB75030A47D2F3C18B047E0F096CF787337032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ce:ed:40:e0:ed:14:7c:31:09:a7:32:99:99:
                    24:7b:47:bc:fb:9f:e3:d3:f3:51:41:3f:4f:b0:a5:
                    b8:c6:f0:27:20:41:b0:32:49:24:4f:a2:dd:7e:1d:
                    f7:8a:15:62:9f:7c:be:ae:16:e5:18:95:e6:de:84:
                    c7:92:59:a6:94:a3:1d:33:96:5f:d6:25:0f:0e:98:
                    7d:32:c8:13:89:dc:2d:58:b0:5c:55:68:16:1e:f4:
                    f8:29:9a:ac:88:1b:1e:67:6b:af:da:d2:8b:bc:7b:
                    39:cc:dd:2f:48:12:6f:db:af:46:2f:e7:77:1c:3e:
                    77:81:72:5f:ad:9f:c4:44:c1:6e:9a:bf:16:8f:17:
                    f4:56:4d:22:e4:73:61:d1:96:98:fc:70:07:65:2b:
                    e3:39:30:48:0d:73:87:72:46:c8:9b:f2:ad:05:e4:
                    30:8c:44:fc:44:73:67:13:54:9e:ef:5b:b0:9c:59:
                    2f:12:36:eb:cb:10:fd:b1:e9:71:51:a0:23:ae:2a:
                    58:93:52:49:5f:93:18:54:5c:d4:95:7d:11:da:bd:
                    38:d1:59:02:9c:43:40:a6:f2:8a:04:97:0f:58:20:
                    1b:48:42:51:8e:75:c7:b2:24:7c:08:70:46:12:96:
                    a2:75:85:26:77:df:14:ad:bf:db:3f:ff:87:92:fc:
                    55:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:BB:75:03:0A:47:D2:F3:C1:8B:04:7E:0F:09:6C:F7:87:33:70:32
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/1/2CBB75030A47D2F3C18B047E0F096CF787337032.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.96.0/21
                IPv6:
                  2804:725c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262506

    Signature Algorithm: sha256WithRSAEncryption
         a8:df:5d:65:9e:53:1d:a3:43:9b:81:9d:ac:f0:9d:c6:15:81:
         f9:d4:7c:dd:f7:6b:d2:e8:38:65:ff:62:68:1c:02:66:df:88:
         9f:12:ba:32:11:29:cb:4b:4b:a4:77:15:9e:8c:93:83:24:c4:
         c6:6c:78:98:4c:91:00:7c:1f:ac:2a:ee:5e:45:57:1f:e6:1b:
         76:8f:d4:9c:bc:6e:6d:46:76:53:a3:c5:e0:94:cb:f3:c9:2b:
         ff:d6:af:fb:0e:6e:6e:b3:38:91:fe:bb:77:d2:26:41:50:a0:
         f2:e7:b6:63:dc:43:b2:17:75:f6:f6:a2:c0:6d:80:28:88:c5:
         5c:fc:e0:2f:42:74:d3:55:11:ad:38:6c:62:22:d0:ec:48:cc:
         e1:11:a8:1e:c1:80:79:f6:6c:21:42:2a:a0:dc:41:b0:6c:54:
         c8:c5:88:f1:63:2a:b8:c9:b8:c9:8b:9a:97:d4:bc:e4:23:dc:
         f3:9d:82:2b:f1:13:3f:b2:df:dd:4b:6e:49:25:29:9c:b4:8f:
         cf:26:65:4a:48:9b:10:51:ce:0a:15:91:27:57:36:a4:b0:a0:
         7a:8e:a2:81:2d:45:72:43:4c:2e:98:30:05:58:eb:aa:c1:f2:
         5d:50:ec:e5:86:2a:69:22:34:29:d4:45:49:9e:66:46:d3:1d:
         8d:48:ee:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----