Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2CCBCE0F05A971B0171E887B25E46A3B94A0030F.cer
File:                     2CCBCE0F05A971B0171E887B25E46A3B94A0030F.cer (raw, json)
Hash identifier:          xYGxgBo0bSLh6lCHjlFQidJCyM96f3yXDxf7Wi2U/dU=
Subject key identifier:   2C:CB:CE:0F:05:A9:71:B0:17:1E:88:7B:25:E4:6A:3B:94:A0:03:0F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0EE267778EEA843EC3909A28CBF5CEF49CBA2F5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/2CCBCE0F05A971B0171E887B25E46A3B94A0030F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Jan 2024 22:26:37 +0000
Certificate not after:    Wed 08 Jan 2025 22:31:37 +0000
Subordinate resources:    AS: 266095
                          IP: 45.5.100.0/22
                          IP: 2804:3a8c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e2:67:77:8e:ea:84:3e:c3:90:9a:28:cb:f5:ce:f4:9c:ba:2f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 10 22:26:37 2024 GMT
            Not After : Jan  8 22:31:37 2025 GMT
        Subject: CN=2CCBCE0F05A971B0171E887B25E46A3B94A0030F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5a:0b:68:f3:ae:34:d0:2d:a2:b9:24:ea:2c:
                    4d:05:55:8e:79:72:01:eb:85:4c:08:64:dc:54:a9:
                    02:a7:73:9b:4c:54:dd:45:dd:05:d3:b7:6c:f0:f1:
                    96:b1:6d:9f:1a:01:00:8a:68:4e:8b:3f:42:25:9f:
                    73:f5:0f:d0:d7:90:17:d0:c9:ce:5c:87:3e:36:b2:
                    4e:e8:09:28:c0:c9:74:ae:33:9c:cc:a3:8c:8d:b5:
                    12:1e:cb:e9:29:3f:a1:c8:37:2d:bb:fa:b0:f7:29:
                    8b:5e:3f:b1:ce:dd:9c:ec:d5:a8:5e:52:d5:88:7f:
                    f0:9e:a7:0a:57:99:78:c1:40:a1:a4:90:2b:df:1d:
                    48:8e:93:4f:6c:92:6d:bb:10:d1:e7:82:4a:71:5c:
                    b3:8e:9d:59:bb:a4:ac:47:5b:a9:73:fc:35:c2:27:
                    bf:6a:a7:d5:4f:76:f4:20:51:6f:ae:78:52:db:be:
                    8e:33:3a:77:4f:38:49:8e:96:94:51:62:42:16:1b:
                    40:f4:d5:a2:57:67:0a:02:1f:47:3f:07:c7:59:fd:
                    6a:05:28:a7:d2:77:39:f3:e4:9f:f5:9f:3d:fb:43:
                    f9:a7:7e:8b:09:3a:73:44:67:0a:1c:a8:a6:e7:7b:
                    05:4a:d2:11:9e:11:6b:8a:49:d4:04:4f:5c:bf:25:
                    b8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:CB:CE:0F:05:A9:71:B0:17:1E:88:7B:25:E4:6A:3B:94:A0:03:0F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/2CCBCE0F05A971B0171E887B25E46A3B94A0030F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.100.0/22
                IPv6:
                  2804:3a8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266095

    Signature Algorithm: sha256WithRSAEncryption
         61:ad:06:f9:aa:81:1a:d3:e1:06:8c:26:d2:da:f7:2c:f5:ce:
         f4:f4:eb:97:0f:95:99:02:ab:e1:97:24:ae:03:9d:5e:ba:05:
         4e:2f:d8:d5:64:e7:6a:62:7e:dd:88:67:2b:f4:03:aa:ba:de:
         55:6d:72:86:0d:7c:b2:18:36:29:fe:09:7d:ae:34:b8:c3:c6:
         3c:4e:e2:58:0f:89:85:d8:c4:f6:d9:17:d5:4c:4d:3b:d0:10:
         80:b8:03:79:19:67:c4:7d:63:e6:60:13:ba:ec:df:94:0b:44:
         ca:87:0f:fa:83:f6:6b:f7:09:40:6a:42:87:2f:14:38:1c:1c:
         7b:8d:18:15:4a:c5:c9:fc:58:26:59:f1:38:6b:3b:5e:e9:9f:
         14:cc:42:53:20:d8:93:0f:d1:01:1e:a0:f9:62:63:de:57:e4:
         f9:be:96:07:ed:4b:c3:02:46:a9:d5:ed:71:9a:83:0b:04:2e:
         f7:5b:f7:56:54:17:5f:08:1f:1b:3a:91:07:34:a3:b6:b8:b1:
         88:3d:a2:81:31:fc:0f:51:e0:82:a1:6d:46:bb:b3:ba:47:cc:
         1c:80:b0:39:92:b5:79:77:89:0b:2e:ec:99:61:41:6a:ef:0d:
         01:73:13:ac:65:f7:30:06:8e:5c:38:5b:0e:75:74:37:c6:70:
         f4:e9:d9:bf
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUDuJnd47qhD7DkJooy/XO9Jy6L1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMTAyMjI2MzdaFw0yNTAxMDgyMjMxMzdaMDMxMTAvBgNV
BAMTKDJDQ0JDRTBGMDVBOTcxQjAxNzFFODg3QjI1RTQ2QTNCOTRBMDAzMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiWgto86400C2iuSTqLE0FVY55
cgHrhUwIZNxUqQKnc5tMVN1F3QXTt2zw8ZaxbZ8aAQCKaE6LP0Iln3P1D9DXkBfQ
yc5chz42sk7oCSjAyXSuM5zMo4yNtRIey+kpP6HINy27+rD3KYteP7HO3Zzs1ahe
UtWIf/CepwpXmXjBQKGkkCvfHUiOk09skm27ENHngkpxXLOOnVm7pKxHW6lz/DXC
J79qp9VPdvQgUW+ueFLbvo4zOndPOEmOlpRRYkIWG0D01aJXZwoCH0c/B8dZ/WoF
KKfSdznz5J/1nz37Q/mnfosJOnNEZwocqKbnewVK0hGeEWuKSdQET1y/JbghAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQsy84PBalxsBce
iHsl5Go7lKADDzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83bU16NTVQdlB0NTI3SjlDelhBVWhkYkcyd0Jrd1Y5eVpQ
UUdia0ZKb00yQS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83bU16NTVQdlB0NTI3SjlDelhBVWhkYkcyd0Jrd1Y5eVpQ
UUdia0ZKb00yQS8wLzJDQ0JDRTBGMDVBOTcxQjAxNzFFODg3QjI1RTQ2QTNCOTRB
MDAzMEYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi0FZDANBAIAAjAHAwUA
KAQ6jDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMED28wDQYJKoZIhvcNAQELBQAD
ggEBAGGtBvmqgRrT4QaMJtLa9yz1zvT065cPlZkCq+GXJK4DnV66BU4v2NVk52pi
ft2IZyv0A6q63lVtcoYNfLIYNin+CX2uNLjDxjxO4lgPiYXYxPbZF9VMTTvQEIC4
A3kZZ8R9Y+ZgE7rs35QLRMqHD/qD9mv3CUBqQocvFDgcHHuNGBVKxcn8WCZZ8Thr
O17pnxTMQlMg2JMP0QEeoPliY95X5Pm+lgftS8MCRqnV7XGagwsELvdb91ZUF18I
Hxs6kQc0o7a4sYg9ooEx/A9R4IKhbUa7s7pHzByAsDmStXl3iQsu7JlhQWrvDQFz
E6xl9zAGjlw4Ww51dDfGcPTp2b8=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org