Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2CE1F8738603CEBF287DD62540FEF561C1AF87C5.cer
File:                     2CE1F8738603CEBF287DD62540FEF561C1AF87C5.cer (raw, json)
Hash identifier:          VSF9CW4b7edEdqo0wFRuCtt055SZDxrQjWt/mSl/fis=
Subject key identifier:   2C:E1:F8:73:86:03:CE:BF:28:7D:D6:25:40:FE:F5:61:C1:AF:87:C5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       38C42F5F618046014E4C18AC91363444A1EDC640
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/2CE1F8738603CEBF287DD62540FEF561C1AF87C5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 23:39:30 +0000
Certificate not after:    Tue 21 May 2024 23:44:30 +0000
Subordinate resources:    AS: 10715
                          AS: 11242
                          AS: 263300
                          IP: 150.162.0.0/16
                          IP: 200.18.0.0/20
                          IP: 200.19.96.0/20
                          IP: 200.135.0.0/16
                          IP: 200.237.192.0/18
                          IP: 2801:80:a80::/44
                          IP: 2801:84::/32
                          IP: 2804:1f2e::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c4:2f:5f:61:80:46:01:4e:4c:18:ac:91:36:34:44:a1:ed:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 23:39:30 2023 GMT
            Not After : May 21 23:44:30 2024 GMT
        Subject: CN=2CE1F8738603CEBF287DD62540FEF561C1AF87C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a2:a6:48:09:11:16:59:ee:bc:ce:b1:47:ce:
                    64:3a:7e:3e:b3:57:e9:06:0b:d7:99:87:7b:89:25:
                    ea:93:da:38:de:db:f1:b4:67:ef:85:48:1f:42:c5:
                    a7:b7:ba:57:b7:bc:67:21:44:b0:94:97:ea:64:f9:
                    ed:d3:b7:3d:1a:3e:65:58:7b:76:62:17:fa:46:7c:
                    74:70:e5:98:85:0c:02:26:0f:c2:af:ee:50:98:a9:
                    e8:d3:3d:d4:41:e2:62:d0:a2:28:dc:c4:5c:33:e6:
                    b2:3b:b1:a2:14:61:d8:69:41:27:c1:b7:df:95:53:
                    16:6d:a4:4e:98:20:fb:3e:41:b3:89:1f:f7:17:db:
                    1e:cd:99:34:cc:fa:87:03:b7:da:e6:0f:3e:51:9c:
                    20:ae:f6:71:87:c1:1d:85:73:5a:5d:e1:a0:9a:7f:
                    48:1d:37:c6:20:43:7b:e5:1e:af:92:5c:e2:9c:d3:
                    a9:8c:de:18:73:21:08:14:62:15:38:6e:cd:dd:04:
                    dd:8c:52:22:46:d0:e1:fc:fb:50:11:14:94:04:be:
                    f7:1c:3a:ca:48:3a:2c:4f:4d:bb:e4:cd:32:35:46:
                    11:30:bd:7b:94:61:c1:f6:b1:11:f8:45:7d:14:64:
                    43:10:44:5a:ab:19:86:3c:37:d5:6e:11:b0:4e:7b:
                    e8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:E1:F8:73:86:03:CE:BF:28:7D:D6:25:40:FE:F5:61:C1:AF:87:C5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/2CE1F8738603CEBF287DD62540FEF561C1AF87C5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.162.0.0/16
                  200.18.0.0/20
                  200.19.96.0/20
                  200.135.0.0/16
                  200.237.192.0/18
                IPv6:
                  2801:80:a80::/44
                  2801:84::/32
                  2804:1f2e::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10715
                  11242
                  263300

    Signature Algorithm: sha256WithRSAEncryption
         a5:81:67:fd:94:f6:ac:4a:86:2b:b7:28:ef:64:eb:1a:9d:50:
         a5:fa:03:ce:f4:74:0a:14:5d:a4:f5:09:2d:64:a8:2f:35:7b:
         90:f3:e0:0c:4f:c4:b8:09:18:4d:91:8e:4c:23:7e:a6:d1:5e:
         6c:0d:69:66:ba:11:5d:f7:68:cf:3a:df:00:27:13:32:4f:9a:
         3d:b6:19:6f:22:44:b8:56:e2:97:3b:90:4d:eb:ab:0f:25:10:
         f9:82:fc:ae:03:53:4b:e9:5d:aa:f0:f0:84:a8:51:6e:c8:cb:
         cb:86:06:8a:b1:e2:ef:ee:b4:8d:2f:24:53:81:96:fc:3e:c6:
         8a:74:dc:e4:04:a3:20:f7:8e:9b:fa:3b:ab:83:8f:0e:5c:a3:
         11:00:8d:0c:f9:09:a0:37:ee:91:24:3b:ca:4c:ab:ae:95:fd:
         11:e1:70:2e:bd:f3:fa:f8:10:4c:a1:5d:9b:a6:88:7b:da:11:
         76:3f:71:fe:17:c5:97:ed:e7:88:67:d8:dd:c8:38:97:d2:94:
         4f:8e:2d:09:fa:df:78:0e:e5:d0:c8:5a:f1:1e:ea:74:87:53:
         24:66:42:b1:da:6d:70:09:9d:e3:f8:9c:07:34:da:ff:43:de:
         8a:87:1e:9f:e3:27:79:5f:5c:2a:b7:65:bc:cc:9e:6d:ca:76:
         fb:7f:33:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org