Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2CBCA125662055C6A9F373BFBB29A448D69C2061.cer
File:                     2CBCA125662055C6A9F373BFBB29A448D69C2061.cer (raw, json)
Hash identifier:          ziepl+9rCnxIsEPufocwdLB2afmlVAPsHGHjpf59hZQ=
Subject key identifier:   2C:BC:A1:25:66:20:55:C6:A9:F3:73:BF:BB:29:A4:48:D6:9C:20:61
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6B0466FE51AFB12CEBE1210FED56D945F756161C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/2CBCA125662055C6A9F373BFBB29A448D69C2061.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 09 Apr 2022 19:41:04 +0000
Certificate not after:    Sat 08 Apr 2023 19:46:04 +0000
Subordinate resources:    AS: 267475
                          IP: 192.141.192.0/22
                          IP: 2804:4210::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:04:66:fe:51:af:b1:2c:eb:e1:21:0f:ed:56:d9:45:f7:56:16:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  9 19:41:04 2022 GMT
            Not After : Apr  8 19:46:04 2023 GMT
        Subject: CN=2CBCA125662055C6A9F373BFBB29A448D69C2061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ce:8e:24:49:34:46:98:87:f7:ef:f9:6f:10:
                    71:cf:16:1b:85:52:93:7e:e4:9d:ca:bd:45:5d:e5:
                    94:c8:d5:90:18:3f:d7:e9:f6:bd:9a:3d:5a:78:a3:
                    f1:7a:cb:49:18:9f:64:40:19:c8:c5:2b:5c:10:f9:
                    12:c9:bc:1b:54:c3:70:34:ed:e2:13:e9:bc:f6:c0:
                    4d:31:5b:7e:6a:65:35:d4:63:1a:33:98:5a:6b:e8:
                    08:2a:b9:63:44:0a:98:84:5e:1e:ae:5c:e0:ad:ab:
                    51:59:97:53:91:98:3a:68:64:9b:39:13:68:4d:27:
                    85:6c:e5:c5:07:77:0d:23:50:0b:f7:9e:08:2b:27:
                    0c:15:7b:42:7b:e7:a9:7d:3e:e2:1e:49:95:0f:12:
                    99:69:5b:dd:7e:78:ab:b6:32:6f:8a:d2:97:7a:3d:
                    ec:60:78:69:66:18:63:e5:31:57:bd:ba:7e:72:a0:
                    74:e8:fe:64:21:14:23:71:2a:57:01:e5:1e:bb:d7:
                    99:91:93:14:c8:de:2f:8e:90:03:11:58:c6:6c:78:
                    cf:2a:2e:ba:9c:45:31:7c:83:f6:1a:f9:8e:b4:af:
                    15:c1:0e:b4:fc:bc:84:e8:6e:30:a4:86:5e:90:3a:
                    d1:8c:cb:dc:76:f1:9d:ee:91:c0:9b:74:60:1a:62:
                    ee:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:BC:A1:25:66:20:55:C6:A9:F3:73:BF:BB:29:A4:48:D6:9C:20:61
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/2CBCA125662055C6A9F373BFBB29A448D69C2061.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.192.0/22
                IPv6:
                  2804:4210::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267475

    Signature Algorithm: sha256WithRSAEncryption
         a0:4b:da:c3:c1:75:cb:aa:dc:00:65:14:a0:8a:31:03:2a:48:
         eb:7e:00:bd:70:de:d3:51:e0:f7:6b:fd:51:6c:01:de:7c:81:
         26:5c:e5:fe:22:9b:6f:ba:18:64:4e:97:7a:45:25:51:8e:5a:
         c0:82:3a:e6:d9:7d:e5:ef:40:ed:c4:aa:91:1c:ef:50:95:ab:
         df:70:b0:60:27:6f:03:a4:15:75:ff:f4:f6:51:43:7d:18:af:
         17:33:f9:43:97:f3:60:75:a7:13:7d:e6:0e:d8:b6:a4:43:9f:
         89:16:4e:59:d6:9d:f1:16:05:f6:8b:20:4a:b9:cc:40:2b:01:
         ba:28:57:30:d1:2e:d0:d7:de:62:e7:ab:af:f9:8c:09:39:60:
         ef:a4:17:2f:d8:19:c2:e3:e0:0d:6c:c4:8d:7e:a3:e0:a6:f6:
         13:52:3f:35:f8:a7:a5:a3:f1:f6:ec:8f:87:36:30:9d:17:f4:
         90:d7:c0:63:c9:1f:73:b1:6f:52:1f:a7:15:e3:ae:49:2d:f8:
         a1:af:a6:f6:3e:97:60:19:92:3d:97:40:6f:c7:57:7b:42:9b:
         08:5a:07:93:95:69:66:0a:a9:58:e2:75:cc:67:e8:20:ab:7a:
         aa:a1:e7:f5:04:6f:51:07:cf:11:aa:3b:7a:c1:a2:41:1d:47:
         16:f7:8d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org