Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2DB41A3BC0B44F47245BA46320F4817897477307.cer
File:                     2DB41A3BC0B44F47245BA46320F4817897477307.cer (raw, json)
Hash identifier:          4Alt4CvVd7DtpZGAiOpA4NAB2+qpVISvFVuKeMaonq0=
Subject key identifier:   2D:B4:1A:3B:C0:B4:4F:47:24:5B:A4:63:20:F4:81:78:97:47:73:07
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       71C823327F595A551DDBAD403DA59EA81BBF825B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/2DB41A3BC0B44F47245BA46320F4817897477307.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 12 Aug 2023 02:53:55 +0000
Certificate not after:    Sat 10 Aug 2024 02:58:55 +0000
Subordinate resources:    AS: 266048
                          IP: 45.4.116.0/22
                          IP: 2804:39c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c8:23:32:7f:59:5a:55:1d:db:ad:40:3d:a5:9e:a8:1b:bf:82:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 12 02:53:55 2023 GMT
            Not After : Aug 10 02:58:55 2024 GMT
        Subject: CN=2DB41A3BC0B44F47245BA46320F4817897477307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b1:e2:9e:b5:be:40:39:c5:31:03:82:c5:18:
                    2e:ff:7e:c2:71:15:9a:bd:53:a8:a2:3f:19:24:b3:
                    a8:d8:da:88:ea:da:03:44:0d:62:a5:41:19:b0:c9:
                    50:e7:d2:16:9a:1b:02:94:cc:49:4d:cc:46:24:fc:
                    07:23:c9:06:63:d8:c1:0d:41:e7:b3:0d:d6:14:b7:
                    a9:e4:49:38:f3:b1:0d:15:18:7a:f4:87:37:7f:f6:
                    d6:23:e9:f1:b6:05:99:fb:47:ba:0f:8f:59:49:e1:
                    d5:d3:71:ee:20:bd:89:62:7a:01:46:df:7b:14:d7:
                    43:83:b7:5f:3e:4c:e5:01:89:36:b4:f6:83:34:65:
                    3f:4e:05:91:c8:ee:d8:8d:8e:f7:59:b2:bd:75:e6:
                    a7:5d:7d:54:8d:57:04:d5:b4:c4:1a:0b:14:d1:fd:
                    3b:cf:42:a7:f0:fc:9e:c2:33:9e:e5:79:31:9a:af:
                    28:df:a0:c4:09:a4:8e:22:62:c2:ea:f1:d4:fd:1d:
                    9c:ff:46:0f:6f:5c:b9:0e:64:82:e1:e5:2f:07:45:
                    9f:46:95:81:42:9f:b3:04:1c:b2:ac:e4:0b:2f:be:
                    0a:66:c3:50:9e:f1:40:5d:77:e7:d7:2d:2d:20:ca:
                    2e:65:9c:8a:8a:81:cf:96:6e:b3:a2:76:e1:fe:8f:
                    c6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2D:B4:1A:3B:C0:B4:4F:47:24:5B:A4:63:20:F4:81:78:97:47:73:07
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/2DB41A3BC0B44F47245BA46320F4817897477307.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.116.0/22
                IPv6:
                  2804:39c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266048

    Signature Algorithm: sha256WithRSAEncryption
         86:ff:81:d2:74:42:a9:f7:82:af:ea:19:0c:1c:ba:c2:49:7e:
         be:17:13:b1:1c:26:ef:a8:0d:49:73:7f:2b:eb:2b:3c:49:89:
         9f:57:8b:04:18:67:17:2b:bb:31:ab:fa:6d:cb:86:ca:fa:d0:
         3a:20:f8:99:db:fe:6a:43:71:f0:d0:dc:f8:6f:5b:de:54:e3:
         a0:49:ff:04:65:1b:fd:6a:32:69:82:9d:55:68:41:38:67:48:
         05:31:ed:a1:0f:24:ef:63:f2:1e:13:f5:c7:c6:b7:77:10:60:
         f5:21:8c:1f:26:7d:aa:13:60:10:1f:a9:e2:f0:cf:b8:9d:e3:
         ab:f0:0a:c6:8f:8e:7d:5f:ab:9a:ce:8f:80:b1:1f:f0:70:0d:
         80:1f:fe:19:7b:fb:df:56:4d:19:30:32:70:2c:af:06:17:bf:
         d2:88:bc:26:cd:60:05:f8:b3:21:6b:4c:87:54:d2:4c:07:a7:
         4f:82:19:c1:94:ae:5d:37:2a:29:b9:5c:b7:71:9b:da:da:3b:
         fb:46:b4:42:c1:bf:34:5a:e1:b6:35:a9:a5:f4:71:56:1f:b7:
         7c:d3:fd:7e:67:c2:00:a4:5d:6f:a2:75:05:29:98:5b:24:de:
         20:35:e2:91:94:b0:61:91:23:36:59:41:76:fd:65:74:b4:5b:
         e8:0c:a5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org