Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2D5C6CACD311321B2E91159DD9A5CD72FCBDD966.cer
File:                     2D5C6CACD311321B2E91159DD9A5CD72FCBDD966.cer (raw, json)
Hash identifier:          ijXOrEJSWA85c2w+oPH3EG3w5PN6PvErPgrKKzZBw6k=
Subject key identifier:   2D:5C:6C:AC:D3:11:32:1B:2E:91:15:9D:D9:A5:CD:72:FC:BD:D9:66
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3B49918DDCB4DF472EC13A97B2CD55C5878291A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/2D5C6CACD311321B2E91159DD9A5CD72FCBDD966.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Mar 2024 09:58:43 +0000
Certificate not after:    Fri 07 Mar 2025 10:03:43 +0000
Subordinate resources:    AS: 52570
                          IP: 177.86.116.0/22
                          IP: 179.96.200.0/21
                          IP: 2804:1564::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:49:91:8d:dc:b4:df:47:2e:c1:3a:97:b2:cd:55:c5:87:82:91:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 09:58:43 2024 GMT
            Not After : Mar  7 10:03:43 2025 GMT
        Subject: CN=2D5C6CACD311321B2E91159DD9A5CD72FCBDD966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9d:b6:c3:2b:0a:99:d2:7d:d3:3c:08:ef:fe:
                    6b:72:04:a0:a9:c8:be:1d:4f:c6:c4:f5:66:91:8c:
                    e0:0b:78:82:57:2e:ad:b2:22:99:2f:41:19:5d:97:
                    5c:eb:75:8c:c8:f6:66:34:82:4d:6a:21:a8:d7:a7:
                    73:f1:4a:0d:b0:32:94:e2:b5:d0:ea:37:61:d7:8a:
                    61:43:35:e0:d0:28:0c:30:be:47:c4:ef:c9:fc:92:
                    d1:45:72:8e:44:8b:a5:6a:72:1d:d9:de:b8:97:d9:
                    eb:7a:a5:a9:d6:50:ae:24:7c:5c:e4:9e:7e:33:a3:
                    88:ca:be:7d:9d:e4:d2:83:fa:d2:73:91:8c:1f:c9:
                    d9:a2:a2:a6:a0:9d:12:69:4e:a2:17:b4:61:51:24:
                    1d:5e:26:06:cb:37:f4:d8:d5:41:1d:ea:f0:3e:7e:
                    69:94:ef:a8:6f:b8:99:dd:21:a2:ee:27:db:1d:35:
                    9b:60:77:cc:ce:85:79:ca:5e:7b:c8:48:fe:5c:cf:
                    29:39:ae:65:d0:97:11:06:81:70:e6:03:8e:eb:3b:
                    63:5e:4f:e4:c8:6f:73:7f:03:79:23:34:49:f6:6e:
                    70:bf:46:dc:e3:2b:f1:d3:70:55:c0:4c:86:30:81:
                    00:08:77:45:b9:8a:62:e4:17:6d:03:a5:22:ca:24:
                    7e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2D:5C:6C:AC:D3:11:32:1B:2E:91:15:9D:D9:A5:CD:72:FC:BD:D9:66
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/0/2D5C6CACD311321B2E91159DD9A5CD72FCBDD966.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.116.0/22
                  179.96.200.0/21
                IPv6:
                  2804:1564::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52570

    Signature Algorithm: sha256WithRSAEncryption
         15:51:5b:4f:07:95:e5:b7:9c:80:2f:26:e4:9a:9a:f7:e4:5e:
         f3:48:a2:35:16:1e:f2:c1:84:9a:24:10:c0:bd:81:9a:ca:48:
         22:f6:f7:f6:ef:59:44:9f:36:0f:d6:a4:d9:78:1d:f2:d9:78:
         cd:00:97:e6:66:6f:58:0b:5a:95:66:7c:d4:b5:f2:51:43:dc:
         2e:db:03:25:fb:8b:3e:80:8d:6e:71:ab:ec:10:4c:e3:4b:2b:
         a0:d4:a2:5a:3d:0d:56:99:e1:c6:91:e6:55:ff:71:11:38:34:
         4e:f4:2a:c5:53:7f:58:8a:51:ee:8d:53:1c:b8:1e:97:b0:56:
         0f:f7:3d:90:1c:10:2d:ba:b6:39:97:c3:d3:7f:50:f4:9d:81:
         02:18:2a:17:ec:0e:b3:8e:4f:94:10:76:d0:4d:7c:c6:7f:da:
         59:84:9c:2d:f6:41:8f:0d:7d:20:a7:8e:64:b2:6a:78:65:d9:
         62:b5:f8:ff:61:8b:7f:2a:ef:1f:c1:a3:e0:ab:40:c7:f4:7a:
         66:88:61:64:0f:85:87:59:f1:78:de:ac:cd:49:27:d2:c1:ac:
         1e:f4:75:ca:eb:a1:46:96:34:0a:ef:84:bb:51:21:f9:81:77:
         4d:33:d6:06:6e:a9:7a:88:7d:6c:81:e1:01:ff:04:db:b1:db:
         0c:26:ab:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org