Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2D986BE46C5DEBAE344855265B87EFB984A52F12.cer
File:                     2D986BE46C5DEBAE344855265B87EFB984A52F12.cer (raw, json)
Hash identifier:          WRN56ceExCfcIByGjo9WamYUVSPBmtHCXtJuHkaG9Is=
Subject key identifier:   2D:98:6B:E4:6C:5D:EB:AE:34:48:55:26:5B:87:EF:B9:84:A5:2F:12
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       793A6808B98116847DE6412F8E223038C08C8A73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6nv9YEtscDbQDhUhSUHDE1e9tFUewaWtiRXCAwMyCd87/0/2D986BE46C5DEBAE344855265B87EFB984A52F12.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6nv9YEtscDbQDhUhSUHDE1e9tFUewaWtiRXCAwMyCd87/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Nov 2023 13:35:08 +0000
Certificate not after:    Wed 27 Nov 2024 13:40:08 +0000
Subordinate resources:    AS: 28327
                          IP: 131.0.20.0/22
                          IP: 189.50.80.0/20
                          IP: 2804:c3c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3a:68:08:b9:81:16:84:7d:e6:41:2f:8e:22:30:38:c0:8c:8a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 29 13:35:08 2023 GMT
            Not After : Nov 27 13:40:08 2024 GMT
        Subject: CN=2D986BE46C5DEBAE344855265B87EFB984A52F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a0:4f:52:09:d3:66:84:f9:a0:ea:4b:55:dd:
                    6e:37:02:2a:66:b1:e9:91:20:e0:33:cd:48:f4:e8:
                    ab:86:12:a6:d7:b6:8a:1a:f4:24:b6:0a:0f:f3:16:
                    ca:2b:c1:71:3b:16:a1:4b:0f:1f:65:40:05:58:f9:
                    0b:e2:1a:48:16:7c:bb:b9:a5:38:ef:d9:f8:90:85:
                    4e:ed:f5:06:fd:80:c1:e9:09:a1:4d:7d:e6:51:b0:
                    ad:d2:2e:01:e8:94:9c:b7:50:82:56:c3:d5:0b:2a:
                    ba:64:52:34:e8:52:79:8d:a8:95:ad:56:41:c7:64:
                    98:ea:f2:44:ae:c9:c9:a9:d7:1a:6d:1c:97:4d:f0:
                    73:ab:fb:a9:b7:13:4b:3d:12:5c:4a:ff:a7:64:c3:
                    80:51:2b:b5:9a:f9:60:0c:f7:05:ee:9c:28:a8:ed:
                    00:77:f6:47:0b:6a:e3:03:53:18:65:37:7f:10:36:
                    b2:58:cc:06:2b:fe:43:3d:00:ef:bc:1e:be:69:1c:
                    aa:14:4a:71:8c:37:1e:6a:f2:37:bc:52:29:b6:50:
                    d1:3f:a0:f1:27:d4:58:e3:2e:f7:11:ea:24:90:5d:
                    1f:a3:3a:39:ed:fc:88:a2:47:cd:46:48:c3:97:40:
                    b4:93:6c:17:49:8c:cd:92:2f:dc:36:12:6e:00:3f:
                    fe:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2D:98:6B:E4:6C:5D:EB:AE:34:48:55:26:5B:87:EF:B9:84:A5:2F:12
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6nv9YEtscDbQDhUhSUHDE1e9tFUewaWtiRXCAwMyCd87/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6nv9YEtscDbQDhUhSUHDE1e9tFUewaWtiRXCAwMyCd87/0/2D986BE46C5DEBAE344855265B87EFB984A52F12.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.20.0/22
                  189.50.80.0/20
                IPv6:
                  2804:c3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28327

    Signature Algorithm: sha256WithRSAEncryption
         75:3f:7c:de:23:d6:b2:0e:60:b9:ac:8d:28:e6:59:98:29:34:
         c5:c7:6a:8b:92:b8:49:c0:63:ea:88:26:58:f8:40:00:ca:91:
         36:d2:49:a2:1d:b9:67:fe:2d:1c:2a:76:0b:fb:6e:19:26:75:
         16:4b:fa:df:04:79:9a:28:41:e6:ae:fc:20:a6:63:5b:94:86:
         d9:d2:b7:34:bd:40:e6:ca:56:41:8d:f8:ea:e5:91:b2:58:40:
         5b:81:d3:01:2a:58:46:e5:f7:a8:2a:fa:8d:9a:2d:4e:b9:ba:
         85:58:08:97:80:9f:e7:d0:4a:18:40:10:8f:35:b2:dd:62:02:
         c0:66:6c:96:cc:60:b9:95:f8:65:16:ae:1c:58:56:20:2c:3e:
         0e:c3:1a:b3:1b:d8:df:66:18:72:75:13:5b:b4:c0:45:ff:60:
         08:c7:05:ec:7d:b4:b6:4c:52:c1:5f:58:dc:b7:d1:d5:32:05:
         2c:9a:0d:40:d0:77:11:f8:52:79:c2:e7:a0:85:23:07:4b:4d:
         ab:3e:1e:a0:df:01:e0:f0:97:18:17:a5:a8:6e:6d:e1:51:43:
         73:be:91:fc:1c:7a:6f:7c:ab:c5:b9:aa:a3:62:e2:b4:c0:e7:
         29:13:31:5d:76:4e:8e:e8:8c:a7:50:ea:1f:c1:c3:42:63:a9:
         64:19:5a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org