Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
File:                     2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer (raw, json)
Hash identifier:          Mj/rXWKd3oZu6NoAlpjHWe46yGJf+g6qhKQtV7rOFT8=
Subject key identifier:   2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2332BC10213A6DFE11456D2FF15F0E2EB1273EA8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 20 Oct 2023 16:05:09 +0000
Certificate not after:    Fri 18 Oct 2024 16:10:09 +0000
Subordinate resources:    AS: 264247
                          IP: 138.118.32.0/22
                          IP: 2804:24e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:32:bc:10:21:3a:6d:fe:11:45:6d:2f:f1:5f:0e:2e:b1:27:3e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 20 16:05:09 2023 GMT
            Not After : Oct 18 16:10:09 2024 GMT
        Subject: CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:74:06:16:73:17:88:4a:de:94:ea:05:aa:
                    bb:70:5f:fb:96:e0:c6:66:c7:8e:4d:c5:ca:4f:6c:
                    ea:3d:98:ab:21:b5:d2:09:a5:fc:7c:61:0b:53:6c:
                    03:ea:b6:cf:c3:3b:84:54:cc:be:0e:85:f5:78:76:
                    49:35:5c:a2:7b:ae:de:54:a2:d3:c3:6f:54:74:06:
                    ac:83:82:17:a4:3a:c7:b4:ba:d4:11:94:8c:f4:2c:
                    4c:63:79:72:63:94:c9:83:b5:ca:b8:62:c1:03:7f:
                    e6:8b:a5:b5:59:0f:79:8a:3e:d2:56:10:70:a3:fd:
                    9c:e4:56:e7:6a:02:14:c3:ff:04:3f:31:c8:62:96:
                    5c:13:5b:a1:de:79:48:35:0c:bb:ec:27:70:c3:cd:
                    99:3c:ce:39:19:87:6b:50:b3:07:ca:06:22:2d:fc:
                    b6:f0:fa:45:ee:b2:0b:b4:2e:a0:95:ad:7e:b7:82:
                    52:79:cc:42:e8:d4:f3:c4:61:33:09:6d:c6:bb:69:
                    20:71:23:31:59:b3:1e:4c:26:ac:11:a4:c7:e0:53:
                    73:38:31:6d:6a:7d:53:96:2b:f1:31:ba:9e:db:b9:
                    cf:98:4c:00:cc:38:bc:24:8f:49:e0:8a:ef:1f:b7:
                    dc:5b:56:16:19:45:e2:30:67:dc:0e:9e:41:99:21:
                    94:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.32.0/22
                IPv6:
                  2804:24e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264247

    Signature Algorithm: sha256WithRSAEncryption
         ab:ff:6d:d5:de:54:96:e7:8c:e0:e7:90:86:d6:c6:29:44:7a:
         14:8a:be:dd:fe:bb:e6:59:b6:db:0e:c8:8d:78:6b:ff:34:8c:
         cf:57:d0:4b:a5:0d:04:d5:05:f3:de:04:5e:6a:e4:fe:43:eb:
         d2:71:07:a0:9e:96:81:81:27:b7:44:15:2b:48:2f:62:fb:08:
         04:f7:ac:9f:eb:11:a6:62:02:1c:0a:a5:3f:61:5b:89:96:76:
         f0:29:1b:9b:8f:b9:82:63:f4:b7:4e:78:3d:f9:4b:26:d7:dd:
         6f:4c:2a:87:76:9b:c1:3a:16:a0:05:06:c5:1c:04:d1:f1:cf:
         51:ee:58:00:d3:d4:66:0c:59:94:f0:74:d7:48:49:34:69:1f:
         81:9d:e5:50:17:fc:98:f1:fe:31:1e:63:57:62:65:a4:5c:eb:
         13:eb:f4:b8:27:a9:b7:a3:69:f1:ec:3e:a0:da:20:e3:0a:96:
         a9:3b:97:dc:fc:93:47:f8:92:a8:f1:5b:a2:a1:e5:d1:ef:b8:
         63:a6:02:41:1c:0f:9f:10:fb:96:2b:b4:dd:bf:23:5c:19:14:
         86:d9:c0:ea:94:f9:cb:41:37:f2:6c:e7:a8:78:6f:fa:0d:26:
         4f:50:db:4e:d9:a0:4a:0f:6b:e7:de:c5:ab:60:06:d1:a5:96:
         a2:fe:02:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org