Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2CEFE495AF9A937C3CEA34289E0E0068A2C8607D.cer
File:                     2CEFE495AF9A937C3CEA34289E0E0068A2C8607D.cer (raw, json)
Hash identifier:          vj5ykwAeTG/anTEpEd40NPlG8ZDGyD5YxDA2pMxkYVw=
Subject key identifier:   2C:EF:E4:95:AF:9A:93:7C:3C:EA:34:28:9E:0E:00:68:A2:C8:60:7D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       080BEDD8313B9DB0DF456EB2409D0B56C54CCB7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/2CEFE495AF9A937C3CEA34289E0E0068A2C8607D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Mar 2024 20:06:44 +0000
Certificate not after:    Wed 19 Mar 2025 20:11:44 +0000
Subordinate resources:    AS: 271297
                          IP: 45.229.136.0/24
                          IP: 192.231.175.0/24
                          IP: 2804:794c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0b:ed:d8:31:3b:9d:b0:df:45:6e:b2:40:9d:0b:56:c5:4c:cb:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 20 20:06:44 2024 GMT
            Not After : Mar 19 20:11:44 2025 GMT
        Subject: CN=2CEFE495AF9A937C3CEA34289E0E0068A2C8607D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b3:d1:f2:6c:5a:c0:73:55:6c:fa:41:cc:27:
                    5e:c7:75:24:3d:3a:bf:be:52:a8:54:2b:72:ad:ba:
                    14:7e:72:1d:2d:3e:bc:d0:ea:b7:bd:4c:54:67:40:
                    bd:f1:94:f9:00:3e:11:d1:b1:c9:d5:84:fa:12:ac:
                    d9:f1:cd:cf:ca:45:fe:86:48:a3:18:0c:ae:7c:6c:
                    ef:90:af:d6:8b:8f:fa:03:14:93:95:04:77:b5:90:
                    1c:0e:1d:11:f1:d8:e3:d0:5b:ff:24:35:92:5e:52:
                    45:01:04:fe:35:27:b1:e1:52:c9:d4:af:12:60:e4:
                    79:d2:ad:0f:e4:c0:da:00:58:88:67:dc:c1:87:59:
                    65:f6:c8:d4:e0:12:5e:2e:0e:e7:ed:3f:5c:3b:bb:
                    7b:cf:74:cf:3b:d4:55:75:1a:24:79:ae:6a:42:b1:
                    4a:d2:11:b2:a4:de:7f:19:1a:bf:7c:95:83:cb:89:
                    bb:63:0c:3a:8b:e2:9a:af:c2:72:3c:66:ae:0c:7b:
                    fe:b0:83:d1:0f:e8:93:10:39:72:e9:6b:4d:12:31:
                    7d:9e:a7:29:6a:d7:6f:01:24:4f:0e:96:29:d2:a0:
                    93:45:0c:22:74:83:ca:70:4a:2b:2e:86:8e:ef:44:
                    0c:e6:b5:19:78:f4:4b:09:9e:5e:e7:16:57:a7:f3:
                    dc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:EF:E4:95:AF:9A:93:7C:3C:EA:34:28:9E:0E:00:68:A2:C8:60:7D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/2CEFE495AF9A937C3CEA34289E0E0068A2C8607D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.136.0/24
                  192.231.175.0/24
                IPv6:
                  2804:794c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271297

    Signature Algorithm: sha256WithRSAEncryption
         46:5a:31:0f:d0:1c:0f:84:27:56:f3:d2:7d:9a:20:3f:4b:0a:
         0e:8c:43:0e:72:42:9f:c4:92:68:92:77:47:c5:58:be:d5:55:
         8e:fe:ba:b1:23:de:8a:3d:1c:08:dc:88:06:7c:6e:e2:77:81:
         39:6a:24:c2:b2:4e:68:93:13:8a:f2:90:d3:95:3a:d9:b2:69:
         71:00:39:1b:4c:4d:be:3b:fa:e2:42:b5:fd:8d:15:fc:e0:12:
         db:8b:3d:fb:bd:b1:49:30:3c:d2:92:b6:01:d0:71:d5:f4:da:
         3d:c0:bb:27:e6:e2:12:59:ac:02:16:4a:dc:74:c8:c6:25:c3:
         fe:b0:47:2d:d9:e0:d7:11:ac:ff:75:63:44:bd:91:6c:02:5b:
         ba:32:21:53:aa:19:8b:36:fa:3d:a5:50:1c:86:0b:98:8f:5e:
         c8:99:57:1d:d7:a4:62:58:31:c0:81:2f:e1:95:13:e7:5e:6b:
         b5:49:4c:dc:fa:52:85:c2:2f:52:3d:64:9e:ef:7e:0c:be:63:
         18:7a:22:6d:1f:40:1e:3a:85:2a:e1:88:b5:20:91:2d:0e:c7:
         16:c0:33:0b:a0:60:26:61:14:d6:bf:ac:62:80:93:e0:bd:37:
         6b:50:f8:26:47:6f:d6:ea:37:62:40:28:85:a7:cd:12:8c:30:
         bf:9d:8d:f9
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUCAvt2DE7nbDfRW6yQJ0LVsVMy3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjAyMDA2NDRaFw0yNTAzMTkyMDExNDRaMDMxMTAvBgNV
BAMTKDJDRUZFNDk1QUY5QTkzN0MzQ0VBMzQyODlFMEUwMDY4QTJDODYwN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXs9HybFrAc1Vs+kHMJ17HdSQ9
Or++UqhUK3KtuhR+ch0tPrzQ6re9TFRnQL3xlPkAPhHRscnVhPoSrNnxzc/KRf6G
SKMYDK58bO+Qr9aLj/oDFJOVBHe1kBwOHRHx2OPQW/8kNZJeUkUBBP41J7HhUsnU
rxJg5HnSrQ/kwNoAWIhn3MGHWWX2yNTgEl4uDuftP1w7u3vPdM871FV1GiR5rmpC
sUrSEbKk3n8ZGr98lYPLibtjDDqL4pqvwnI8Zq4Me/6wg9EP6JMQOXLpa00SMX2e
pylq128BJE8OlinSoJNFDCJ0g8pwSisuho7vRAzmtRl49EsJnl7nFlen89znAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQs7+SVr5qTfDzq
NCieDgBooshgfTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83TVpFaW1uYVM1OUUyZUF3OGg0b1hLZWhyNUNZbW1NdEhY
a24xb3VBdGhkUS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vN01aRWltbmFTNTlFMmVBdzhoNG9YS2VocjVDWW1tTXRI
WGtuMW91QXRoZFEvMC8yQ0VGRTQ5NUFGOUE5MzdDM0NFQTM0Mjg5RTBFMDA2OEEy
Qzg2MDdELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAAt5YgDBADA568wDQQC
AAIwBwMFACgEeUwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCPBMA0GCSqGSIb3
DQEBCwUAA4IBAQBGWjEP0BwPhCdW89J9miA/SwoOjEMOckKfxJJokndHxVi+1VWO
/rqxI96KPRwI3IgGfG7id4E5aiTCsk5okxOK8pDTlTrZsmlxADkbTE2+O/riQrX9
jRX84BLbiz37vbFJMDzSkrYB0HHV9No9wLsn5uISWawCFkrcdMjGJcP+sEct2eDX
Eaz/dWNEvZFsAlu6MiFTqhmLNvo9pVAchguYj17ImVcd16RiWDHAgS/hlRPnXmu1
SUzc+lKFwi9SPWSe734MvmMYeiJtH0AeOoUq4Yi1IJEtDscWwDMLoGAmYRTWv6xi
gJPgvTdrUPgmR2/W6jdiQCiFp80SjDC/nY35
-----END CERTIFICATE-----