Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2DC4E7742BEC43606E6290264F426EB1E94AB03B.cer
File:                     2DC4E7742BEC43606E6290264F426EB1E94AB03B.cer (raw, json)
Hash identifier:          l8Y7QeW0sOU5p2wFEahDTmk34ZIQvapRv8BHANrQJsQ=
Subject key identifier:   2D:C4:E7:74:2B:EC:43:60:6E:62:90:26:4F:42:6E:B1:E9:4A:B0:3B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7A6971F079230E15BFE7814FA8088A7402A7BF36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2hix8FdCsfzzH3Rgc7aoN4eFLWTFBEqpnqc8PNquGWj4/0/2DC4E7742BEC43606E6290264F426EB1E94AB03B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2hix8FdCsfzzH3Rgc7aoN4eFLWTFBEqpnqc8PNquGWj4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Sep 2023 11:43:54 +0000
Certificate not after:    Mon 23 Sep 2024 11:48:54 +0000
Subordinate resources:    AS: 262833
                          IP: 177.8.64.0/22
                          IP: 177.8.71.0 -- 177.8.79.255
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:69:71:f0:79:23:0e:15:bf:e7:81:4f:a8:08:8a:74:02:a7:bf:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 25 11:43:54 2023 GMT
            Not After : Sep 23 11:48:54 2024 GMT
        Subject: CN=2DC4E7742BEC43606E6290264F426EB1E94AB03B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:8b:6d:a7:22:d0:98:de:60:b9:9d:5e:62:
                    cd:51:e3:be:28:57:86:04:83:39:52:e3:4a:5b:1e:
                    97:17:62:ca:96:48:5c:54:cb:fd:24:d6:da:a5:ac:
                    19:4c:8a:52:2d:f9:63:40:e2:ed:a6:96:24:08:4a:
                    94:9a:e0:29:f7:6a:0e:1f:8f:8f:1a:e9:13:2d:be:
                    f3:be:73:eb:aa:1c:fc:5a:44:34:b1:06:74:fd:ad:
                    dd:d9:80:30:52:02:80:7f:66:79:58:8e:d5:cc:de:
                    07:20:02:c2:dd:2f:73:5a:76:11:8d:9b:42:85:52:
                    e3:c3:b0:4c:37:67:d5:91:1b:21:3d:4b:23:15:2c:
                    79:46:bb:62:0d:2c:66:3c:88:54:9f:8f:47:92:01:
                    3f:8a:be:fb:e3:c8:a9:99:d8:bc:e0:21:09:1d:9e:
                    f4:98:72:59:a5:40:db:b9:f4:18:9c:09:88:50:e0:
                    28:89:58:d7:3e:d5:d8:d7:8e:71:af:f7:15:5e:45:
                    c7:58:cb:8d:2e:e1:7c:61:0b:79:c2:89:08:3c:37:
                    f9:54:b1:4a:30:5f:0f:e7:78:13:70:20:1b:4e:95:
                    88:f7:0a:fa:0c:da:9c:de:6e:8b:6d:86:06:91:f2:
                    11:f1:59:4e:bf:9b:ca:eb:9e:88:f8:df:7c:da:f0:
                    29:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2D:C4:E7:74:2B:EC:43:60:6E:62:90:26:4F:42:6E:B1:E9:4A:B0:3B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2hix8FdCsfzzH3Rgc7aoN4eFLWTFBEqpnqc8PNquGWj4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2hix8FdCsfzzH3Rgc7aoN4eFLWTFBEqpnqc8PNquGWj4/0/2DC4E7742BEC43606E6290264F426EB1E94AB03B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.64.0/22
                  177.8.71.0-177.8.79.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262833

    Signature Algorithm: sha256WithRSAEncryption
         98:e6:a7:0c:e9:97:40:8c:6a:ee:ff:e3:52:1b:f0:75:3c:a2:
         05:b1:19:7c:68:04:7d:5b:13:b0:aa:36:5e:21:5a:d8:a8:24:
         d7:7a:2c:f5:90:67:7e:e6:04:49:7a:77:fd:3e:8d:cf:df:26:
         c3:97:ff:27:70:4a:d2:9f:0c:46:d0:41:fa:9c:ef:e9:34:db:
         7b:03:5a:b8:18:ab:c6:f0:96:16:84:24:d4:65:b1:24:5e:9b:
         f3:88:d7:0d:f3:bd:34:41:2d:33:48:9c:82:76:bd:39:ad:4b:
         5c:b1:a6:f1:5e:03:08:ec:4e:d8:55:13:8e:0b:d5:02:c9:05:
         ed:12:83:f2:88:12:b2:81:6a:ac:b2:ac:ad:28:43:1c:1f:c3:
         5b:c8:88:69:7f:1d:73:35:1c:e5:30:9d:c9:0b:9a:b7:2e:9e:
         59:3b:57:31:4e:35:85:d2:b9:b3:8d:59:fb:67:06:65:46:70:
         be:14:a3:e7:b9:d3:18:32:d4:ab:18:88:bc:30:26:39:e3:8e:
         73:7e:33:b0:dc:fe:6a:a0:d3:04:58:3d:17:85:71:29:84:4b:
         a7:b5:de:02:ac:cd:a2:11:77:33:b5:d6:c8:93:6b:d6:7c:b7:
         81:46:c0:c1:fa:a2:b1:81:95:da:b5:ce:cc:d7:eb:b6:7a:aa:
         ec:da:34:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:52:10 2025 by rpki-client