Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2CDB1B0F649BDAD0B722D2123205665D270BFEDF.cer
File:                     2CDB1B0F649BDAD0B722D2123205665D270BFEDF.cer (raw, json)
Hash identifier:          nCFghBTV3thX7/Bwrye9kpjhDkinomg9l4s5RYQp1Us=
Subject key identifier:   2C:DB:1B:0F:64:9B:DA:D0:B7:22:D2:12:32:05:66:5D:27:0B:FE:DF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1359473B4D744AB0EDCCF92022D3049774661FF7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/2CDB1B0F649BDAD0B722D2123205665D270BFEDF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 12 Oct 2023 19:49:03 +0000
Certificate not after:    Thu 10 Oct 2024 19:54:03 +0000
Subordinate resources:    AS: 262791
                          IP: 168.0.108.0/22
                          IP: 186.233.192.0/21
                          IP: 2804:220::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:59:47:3b:4d:74:4a:b0:ed:cc:f9:20:22:d3:04:97:74:66:1f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 12 19:49:03 2023 GMT
            Not After : Oct 10 19:54:03 2024 GMT
        Subject: CN=2CDB1B0F649BDAD0B722D2123205665D270BFEDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:fa:44:21:7c:44:c2:96:5d:9d:17:7d:c7:
                    af:84:17:8a:c0:e6:d0:8e:2c:32:b0:d9:01:1a:d1:
                    e8:cb:c9:c1:31:8d:37:f1:a5:f8:8f:e2:35:f9:27:
                    fe:37:9b:b4:09:f9:57:a7:f9:c4:6e:9a:25:6a:4d:
                    b7:78:08:30:bf:6e:cf:ae:1d:f0:3d:be:70:3d:f9:
                    f7:c1:58:99:ef:9e:df:8c:af:24:d4:e0:6e:1e:7d:
                    a3:76:f3:3e:33:d1:6b:d4:f1:66:66:e6:a4:79:51:
                    9d:f9:27:97:0a:0c:eb:37:93:33:58:01:a4:21:0a:
                    85:b7:5d:d7:6f:ce:cd:da:b2:89:85:70:c7:ad:03:
                    93:cd:66:75:a2:c4:89:d6:a6:6b:2a:a6:b0:7b:ee:
                    08:38:a8:15:47:9b:5e:98:a3:36:6f:91:b9:08:6b:
                    51:51:04:14:30:65:df:e5:35:60:68:a7:36:b3:d2:
                    0f:41:22:e9:47:f0:72:10:86:5b:38:45:26:31:45:
                    0f:88:f3:a4:f3:9e:4e:f7:54:d6:fb:d2:71:ca:a5:
                    4a:fb:a0:9e:0c:97:29:09:26:b1:d9:15:b7:93:e1:
                    85:0c:cb:95:c8:0a:f3:a9:b2:91:8a:cf:be:70:32:
                    87:de:8a:92:75:bb:7f:32:fe:31:48:9d:d3:5e:86:
                    fb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:DB:1B:0F:64:9B:DA:D0:B7:22:D2:12:32:05:66:5D:27:0B:FE:DF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/2CDB1B0F649BDAD0B722D2123205665D270BFEDF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.108.0/22
                  186.233.192.0/21
                IPv6:
                  2804:220::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262791

    Signature Algorithm: sha256WithRSAEncryption
         5e:2b:dd:00:69:ed:af:09:11:67:37:9c:45:41:9f:b1:a2:db:
         c8:c9:ce:60:8d:40:e0:e4:08:1c:01:54:c5:79:ae:d3:d9:87:
         fc:db:7c:1a:a5:da:40:53:4d:58:7b:4d:9d:99:ed:df:d9:bb:
         c7:73:7e:19:db:2b:ba:8d:24:d6:8e:95:18:4d:67:b8:74:2b:
         74:de:61:53:54:87:8c:58:f2:e3:73:8f:e7:c1:8e:74:45:57:
         9a:38:f9:b7:18:af:ab:11:33:44:74:1d:29:41:bc:89:b0:46:
         db:ef:de:cd:1a:17:bc:33:a7:65:46:ed:d2:11:f6:a0:73:3e:
         fe:b8:43:42:4d:aa:3d:b7:e5:a0:12:18:04:51:74:5c:d8:a1:
         36:94:cc:2d:00:9e:7a:99:83:ad:22:db:79:57:a8:66:07:af:
         c6:56:c8:d3:1e:4e:0a:f0:49:f6:7c:20:14:d8:1f:fc:67:a6:
         24:e1:78:1e:0a:40:0c:5d:90:0c:f4:6b:be:16:0e:1a:ac:d9:
         3e:72:d4:c3:6b:bb:56:8b:d8:9c:29:f3:5c:10:0f:22:5d:cd:
         5c:25:b4:c6:86:8d:9f:b2:4e:80:50:c4:3c:b4:ff:b6:43:51:
         0c:9e:43:4d:b7:9a:1a:28:38:07:8e:b9:a9:8c:92:42:62:7b:
         8b:b1:26:41
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUE1lHO010SrDtzPkgItMEl3RmH/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMTIxOTQ5MDNaFw0yNDEwMTAxOTU0MDNaMDMxMTAvBgNV
BAMTKDJDREIxQjBGNjQ5QkRBRDBCNzIyRDIxMjMyMDU2NjVEMjcwQkZFREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbvpEIXxEwpZdnRd9x6+EF4rA
5tCOLDKw2QEa0ejLycExjTfxpfiP4jX5J/43m7QJ+Ven+cRumiVqTbd4CDC/bs+u
HfA9vnA9+ffBWJnvnt+MryTU4G4efaN28z4z0WvU8WZm5qR5UZ35J5cKDOs3kzNY
AaQhCoW3Xddvzs3asomFcMetA5PNZnWixInWpmsqprB77gg4qBVHm16YozZvkbkI
a1FRBBQwZd/lNWBopzaz0g9BIulH8HIQhls4RSYxRQ+I86Tznk73VNb70nHKpUr7
oJ4MlykJJrHZFbeT4YUMy5XICvOpspGKz75wMofeipJ1u38y/jFIndNehvtLAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQs2xsPZJva0Lci
0hIyBWZdJwv+3zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zb21EQjN6eEpXMWU3bk1adEpaVm9lZWsySlRNTDM0eDF4
MnExdEtubWdYUS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vM29tREIzenhKVzFlN25NWnRKWlZvZWVrMkpUTUwzNHgx
eDJxMXRLbm1nWFEvMC8yQ0RCMUIwRjY0OUJEQUQwQjcyMkQyMTIzMjA1NjY1RDI3
MEJGRURGLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKoAGwDBAO66cAwDQQC
AAIwBwMFACgEAiAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAKHMA0GCSqGSIb3
DQEBCwUAA4IBAQBeK90Aae2vCRFnN5xFQZ+xotvIyc5gjUDg5AgcAVTFea7T2Yf8
23wapdpAU01Ye02dme3f2bvHc34Z2yu6jSTWjpUYTWe4dCt03mFTVIeMWPLjc4/n
wY50RVeaOPm3GK+rETNEdB0pQbyJsEbb797NGhe8M6dlRu3SEfagcz7+uENCTao9
t+WgEhgEUXRc2KE2lMwtAJ56mYOtItt5V6hmB6/GVsjTHk4K8En2fCAU2B/8Z6Yk
4XgeCkAMXZAM9Gu+Fg4arNk+ctTDa7tWi9icKfNcEA8iXc1cJbTGho2fsk6AUMQ8
tP+2Q1EMnkNNt5oaKDgHjrmpjJJCYnuLsSZB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org