Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2CC4CD388DE50BD429B647461225B9F7545E70B6.cer
File:                     2CC4CD388DE50BD429B647461225B9F7545E70B6.cer (raw, json)
Hash identifier:          jtVqDe5AO5k3HddCpgVcqn5NclPvVzRaWRBvfJt1GRQ=
Subject key identifier:   2C:C4:CD:38:8D:E5:0B:D4:29:B6:47:46:12:25:B9:F7:54:5E:70:B6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       56049F1DBBFCA924722BC4A2D3EF0A3EB79EB011
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/2CC4CD388DE50BD429B647461225B9F7545E70B6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jul 2023 14:27:38 +0000
Certificate not after:    Thu 25 Jul 2024 14:32:38 +0000
Subordinate resources:    AS: 262460
                          IP: 143.255.72.0/22
                          IP: 177.53.72.0/21
                          IP: 2804:4b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:04:9f:1d:bb:fc:a9:24:72:2b:c4:a2:d3:ef:0a:3e:b7:9e:b0:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 27 14:27:38 2023 GMT
            Not After : Jul 25 14:32:38 2024 GMT
        Subject: CN=2CC4CD388DE50BD429B647461225B9F7545E70B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b2:51:32:b7:4f:30:ea:28:ca:44:67:b5:4a:
                    33:2e:93:4d:5c:02:ee:98:fe:2e:ee:97:a6:46:1e:
                    c0:34:89:4d:2a:3a:91:b2:63:7a:2d:5f:70:29:65:
                    74:89:51:dc:52:6a:aa:d7:b8:68:7e:4e:52:58:60:
                    51:bf:af:f3:1b:3a:11:53:30:d1:5b:97:16:58:31:
                    92:c0:c4:2e:ed:b2:b7:de:1d:f3:ef:73:b4:ba:1b:
                    1e:40:34:c5:ee:98:eb:c1:9e:02:92:8b:45:76:e5:
                    b0:c2:87:75:82:2e:8c:6a:e5:ac:6e:a5:b7:90:db:
                    cd:52:ca:b6:b6:e2:e8:8f:30:0a:bc:ce:62:49:76:
                    09:79:01:06:46:1d:34:ea:37:ff:a2:2a:f9:b2:1a:
                    e8:45:8c:eb:c4:70:28:06:5f:af:80:e8:17:e7:84:
                    84:ad:fc:ce:84:b7:e7:1f:ad:8b:4e:e5:17:a2:44:
                    6f:a1:29:6a:65:38:05:66:64:85:39:40:f5:4d:0b:
                    6f:17:e7:47:fb:18:43:3d:65:16:df:36:e9:96:74:
                    c7:32:c4:d0:9e:89:3e:89:a1:65:b3:f2:1a:b0:75:
                    40:15:d7:5b:a6:46:c3:3a:0c:ad:4d:15:3d:54:c5:
                    f5:a6:6a:5d:db:fe:88:86:9c:49:cf:8c:76:3a:7b:
                    e1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:C4:CD:38:8D:E5:0B:D4:29:B6:47:46:12:25:B9:F7:54:5E:70:B6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/2CC4CD388DE50BD429B647461225B9F7545E70B6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.72.0/22
                  177.53.72.0/21
                IPv6:
                  2804:4b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262460

    Signature Algorithm: sha256WithRSAEncryption
         02:9f:9b:9a:6c:6b:3f:41:16:54:4b:19:36:fb:5f:aa:70:99:
         03:e2:33:dc:7d:05:20:28:0f:df:b4:7b:1c:d5:3f:a0:5e:03:
         ce:dd:28:2c:0a:28:74:d8:ac:27:61:00:f7:16:18:5a:ca:f0:
         0e:bd:0c:41:3b:57:79:7b:6e:12:60:2e:49:d7:fe:13:5e:b9:
         6e:0b:ae:8e:44:0c:ff:0d:9b:8b:38:5e:92:10:c2:ec:c7:29:
         e2:87:90:24:db:d8:4c:e7:9b:99:48:ad:df:17:24:36:fe:bc:
         7d:e9:83:7d:fb:24:ed:38:c9:fc:29:7b:21:9a:70:2d:62:5d:
         aa:4d:c1:50:b4:2a:69:ce:eb:f2:1b:7c:ee:aa:19:16:6e:18:
         5a:31:8f:30:3b:2d:26:ee:0c:ea:c8:45:3b:2e:82:54:21:36:
         41:04:09:f7:ef:1f:41:da:a6:84:a1:47:7f:74:f0:ff:ab:27:
         ae:3b:90:c0:d2:fd:36:fe:3d:0c:73:f5:69:57:17:01:81:7b:
         0f:14:ab:b9:2e:79:79:02:bd:fe:78:59:9c:80:1c:14:3b:48:
         ad:15:1d:64:6b:20:0e:be:94:26:f1:d5:7a:08:bb:66:3b:48:
         c7:83:04:4c:cb:fc:f5:c8:8a:3f:9b:ea:6a:18:e4:39:70:c8:
         07:05:a9:c2
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUVgSfHbv8qSRyK8Si0+8KPreesBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MjcxNDI3MzhaFw0yNDA3MjUxNDMyMzhaMDMxMTAvBgNV
BAMTKDJDQzRDRDM4OERFNTBCRDQyOUI2NDc0NjEyMjVCOUY3NTQ1RTcwQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsslEyt08w6ijKRGe1SjMuk01c
Au6Y/i7ul6ZGHsA0iU0qOpGyY3otX3ApZXSJUdxSaqrXuGh+TlJYYFG/r/MbOhFT
MNFblxZYMZLAxC7tsrfeHfPvc7S6Gx5ANMXumOvBngKSi0V25bDCh3WCLoxq5axu
pbeQ281Syra24uiPMAq8zmJJdgl5AQZGHTTqN/+iKvmyGuhFjOvEcCgGX6+A6Bfn
hISt/M6Et+cfrYtO5ReiRG+hKWplOAVmZIU5QPVNC28X50f7GEM9ZRbfNumWdMcy
xNCeiT6JoWWz8hqwdUAV11umRsM6DK1NFT1UxfWmal3b/oiGnEnPjHY6e+FNAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQsxM04jeUL1Cm2
R0YSJbn3VF5wtjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HY3RHVXcxbmFaeFE5dzhERFVxWVBlaEJZRmkyd0h0OWpM
YnRHS0ZpNFRaTi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vR2N0R1V3MW5hWnhROXc4RERVcVlQZWhCWUZpMndIdDlq
TGJ0R0tGaTRUWk4vMC8yQ0M0Q0QzODhERTUwQkQ0MjlCNjQ3NDYxMjI1QjlGNzU0
NUU3MEI2Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKP/0gDBAOxNUgwDQQC
AAIwBwMFACgEBLQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAE8MA0GCSqGSIb3
DQEBCwUAA4IBAQACn5uabGs/QRZUSxk2+1+qcJkD4jPcfQUgKA/ftHsc1T+gXgPO
3SgsCih02KwnYQD3FhhayvAOvQxBO1d5e24SYC5J1/4TXrluC66ORAz/DZuLOF6S
EMLsxynih5Ak29hM55uZSK3fFyQ2/rx96YN9+yTtOMn8KXshmnAtYl2qTcFQtCpp
zuvyG3zuqhkWbhhaMY8wOy0m7gzqyEU7LoJUITZBBAn37x9B2qaEoUd/dPD/qyeu
O5DA0v02/j0Mc/VpVxcBgXsPFKu5Lnl5Ar3+eFmcgBwUO0itFR1kayAOvpQm8dV6
CLtmO0jHgwRMy/z1yIo/m+pqGOQ5cMgHBanC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org