Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2D2B1C0A519E55A84D6F466E7A256F2093430E1D.cer
File:                     2D2B1C0A519E55A84D6F466E7A256F2093430E1D.cer (raw, json)
Hash identifier:          FEj4dxhRnFfGg6bhv5UNyoflVo/emqJ0nH72GUp7gvs=
Subject key identifier:   2D:2B:1C:0A:51:9E:55:A8:4D:6F:46:6E:7A:25:6F:20:93:43:0E:1D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       040790F7B7F69FF5DCAFE1A84D38BB1CD5E103C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/2D2B1C0A519E55A84D6F466E7A256F2093430E1D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Jan 2024 14:52:43 +0000
Certificate not after:    Mon 13 Jan 2025 14:57:43 +0000
Subordinate resources:    AS: 264932
                          IP: 168.232.12.0/22
                          IP: 2804:3024::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:07:90:f7:b7:f6:9f:f5:dc:af:e1:a8:4d:38:bb:1c:d5:e1:03:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 15 14:52:43 2024 GMT
            Not After : Jan 13 14:57:43 2025 GMT
        Subject: CN=2D2B1C0A519E55A84D6F466E7A256F2093430E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7e:30:2d:e2:50:d7:9c:72:7b:cc:6e:8c:6d:
                    4f:3a:a3:7d:9d:ad:54:19:83:68:6a:8c:cc:2c:98:
                    47:b5:ce:e2:f5:42:5f:49:dd:af:ae:00:bf:e7:15:
                    9d:19:79:33:56:9d:60:51:03:1a:c1:7b:34:ea:98:
                    ef:50:53:ef:a9:b7:e9:6a:c1:0c:48:5c:d4:a8:bd:
                    14:b2:94:f0:0d:97:e2:fd:8d:0f:45:54:27:0d:88:
                    09:d5:5a:eb:ea:04:4a:37:65:9f:da:78:da:ef:46:
                    11:a2:46:38:94:45:f0:02:10:39:54:ed:50:18:88:
                    44:59:30:bd:01:e2:0f:7d:9f:c1:14:99:3f:f0:01:
                    bb:4d:cf:6a:b5:9f:d8:b8:1f:33:28:ae:db:45:ac:
                    67:6d:90:1e:c7:2c:e2:4b:b1:03:22:f2:80:21:75:
                    9f:1f:a5:67:6a:17:04:89:0e:ad:65:65:90:e2:e6:
                    c3:b7:33:d2:9f:54:8f:37:a1:f6:ed:1c:a3:cd:4f:
                    44:41:cb:c9:56:42:82:9a:12:98:b6:fc:55:54:51:
                    5d:92:85:c5:8b:3e:ad:e1:be:e1:eb:f7:8c:bc:87:
                    16:c6:fa:20:36:d4:f1:75:26:4b:58:15:63:1c:8d:
                    a6:7a:24:af:32:ec:7a:44:fb:31:08:d9:e7:d4:f8:
                    30:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2D:2B:1C:0A:51:9E:55:A8:4D:6F:46:6E:7A:25:6F:20:93:43:0E:1D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/2D2B1C0A519E55A84D6F466E7A256F2093430E1D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.12.0/22
                IPv6:
                  2804:3024::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264932

    Signature Algorithm: sha256WithRSAEncryption
         37:c1:d4:61:0d:89:c5:d0:8a:44:5f:28:9b:94:1e:0a:ae:63:
         0f:78:0d:c7:49:9f:e2:5e:69:a1:6c:8e:50:0d:cd:38:6c:15:
         80:60:96:30:f4:ce:3b:cf:dc:40:d6:73:ff:f3:85:53:d3:c0:
         93:9e:c6:1f:d6:81:cd:11:9f:97:f5:ff:8e:fb:a9:72:a5:3f:
         c2:44:03:f2:b4:8b:6d:2c:97:3d:6c:67:c7:ad:92:2a:1c:53:
         4e:2e:db:53:5e:d4:7a:ad:91:af:15:24:7a:32:90:d7:2f:59:
         e1:55:9c:ea:ca:46:f2:2b:33:12:2c:4c:50:f1:a3:d1:04:5a:
         b6:f7:4d:96:ad:a2:a1:ba:d0:b2:6d:32:20:e9:61:56:ac:6b:
         5f:36:ef:a8:d1:13:c7:be:7b:97:cb:dc:35:c3:69:11:59:dc:
         38:de:3e:4b:ba:ea:16:e7:a2:46:25:a1:58:2e:7a:32:47:c9:
         01:7e:2c:6b:f9:00:d1:be:12:6a:0d:8b:8c:39:60:2f:fb:09:
         36:43:bb:d3:1b:45:7c:31:c6:3b:44:8f:0a:ee:3e:5d:18:26:
         94:12:99:c8:3b:3c:7f:8e:47:3f:e2:66:c7:53:69:b3:e4:65:
         0b:87:d2:dd:b2:fe:c0:95:8f:d3:73:56:27:4f:d2:a1:c6:16:
         31:2c:1e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org