Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0.cer
File:                     2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0.cer (raw, json)
Hash identifier:          dJ200Z6IQOaljALRtpcodVs1ag/j7yn7zut6faKRpZg=
Subject key identifier:   2D:F3:3D:7B:F9:AA:7A:D1:BF:99:8B:F3:42:E6:D4:16:96:7E:57:E0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6DF10888D9A941CC286F5A4C1E4C6722024A87BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/0/2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Jan 2024 18:49:40 +0000
Certificate not after:    Wed 15 Jan 2025 18:54:40 +0000
Subordinate resources:    AS: 268798
                          IP: 45.171.140.0/22
                          IP: 2804:5ad0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f1:08:88:d9:a9:41:cc:28:6f:5a:4c:1e:4c:67:22:02:4a:87:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 17 18:49:40 2024 GMT
            Not After : Jan 15 18:54:40 2025 GMT
        Subject: CN=2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a9:92:9b:54:8d:89:cc:48:5b:34:25:bc:7e:
                    9a:30:51:b8:b6:c6:15:14:e5:1a:f2:f9:52:23:ab:
                    e4:e3:e2:04:a7:e3:e3:ef:b9:02:b6:24:9e:5f:3c:
                    0b:e8:14:a2:e3:9c:23:59:4a:b1:47:23:27:1d:d8:
                    79:82:93:0b:8c:b4:8b:76:75:61:3f:bd:00:2b:85:
                    ff:5f:84:42:25:cb:cc:b8:bd:13:3d:82:45:bc:b1:
                    9a:de:ff:32:70:0a:cf:81:9f:96:16:11:bf:53:4f:
                    17:88:30:23:19:c8:c9:79:e0:aa:be:98:e2:6c:44:
                    2c:45:99:17:70:de:da:bf:69:06:ff:f1:8f:a5:7c:
                    e8:f4:67:26:4f:71:89:82:0e:80:ef:69:34:d2:ea:
                    21:ba:33:8d:09:73:ac:08:61:3f:07:04:02:1c:be:
                    40:ad:d1:ec:12:f1:cb:79:22:b9:21:6f:a9:7f:d1:
                    d7:b2:d0:b1:11:c7:a1:55:a6:49:17:68:33:50:01:
                    b4:ac:59:62:f1:73:d6:8b:24:35:ff:b4:92:53:4a:
                    4d:b6:5d:a1:e6:a1:fc:b4:c1:43:c2:a8:5f:67:65:
                    fa:fa:ec:dd:52:33:37:0f:95:78:71:72:73:f0:6f:
                    da:0e:6a:68:52:d7:9f:ef:90:d4:53:93:f2:a2:55:
                    d5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2D:F3:3D:7B:F9:AA:7A:D1:BF:99:8B:F3:42:E6:D4:16:96:7E:57:E0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/94RULAMeo5kMW6MHK1CYbq4mkZPW6BpmEaocjWkivi94/0/2DF33D7BF9AA7AD1BF998BF342E6D416967E57E0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.140.0/22
                IPv6:
                  2804:5ad0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268798

    Signature Algorithm: sha256WithRSAEncryption
         02:69:56:78:96:85:56:c9:eb:b9:35:55:2d:d8:a6:4e:05:5d:
         6e:a0:88:59:8b:0a:df:10:5c:c8:9a:ad:6d:84:12:fd:fd:54:
         32:9c:0f:c4:fe:e6:55:5a:b8:cc:ba:bf:05:01:75:07:12:5d:
         9d:66:da:f1:0d:90:20:18:6b:76:37:fe:ac:c7:63:d1:19:4e:
         d6:e8:a9:7d:9f:e7:0c:78:cf:7a:82:24:5a:ca:f1:9e:33:ac:
         c8:12:34:36:35:ab:13:1e:cb:e5:1f:18:cd:78:5a:18:73:42:
         b6:35:ca:77:06:2d:9a:96:eb:73:1d:00:d5:06:5e:27:5d:b3:
         98:57:e7:d5:ad:33:7a:a7:9d:73:50:9e:df:dc:20:e9:67:df:
         84:86:75:43:94:45:74:83:89:12:f4:64:95:3d:d2:60:8e:3e:
         84:b2:d9:c3:cc:51:aa:38:27:a8:7d:46:10:c4:71:ba:23:a2:
         b2:b2:fb:10:e0:fb:9f:f6:15:25:57:7d:39:2b:74:06:37:e8:
         7b:dc:9c:88:7a:db:90:00:a9:7a:16:20:ef:52:44:6a:4f:e6:
         ad:4b:e1:00:07:a8:81:d5:b3:e3:3c:f0:b0:ee:f7:d1:09:60:
         8c:92:83:1b:4a:9d:1f:10:aa:c3:50:16:59:e8:d8:4a:b4:aa:
         d6:a2:2d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org