Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2E7EF3D46EA1FA859183A72D9264A4F76D5C0707.cer
File:                     2E7EF3D46EA1FA859183A72D9264A4F76D5C0707.cer (raw, json)
Hash identifier:          a4UtvLbXLzYefiLwZBvs9T2578oQyCNQDOQGoRn7OOI=
Subject key identifier:   2E:7E:F3:D4:6E:A1:FA:85:91:83:A7:2D:92:64:A4:F7:6D:5C:07:07
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       35BF5914C4C6104AFE7ECD82EAD3B9468C614A04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/0/2E7EF3D46EA1FA859183A72D9264A4F76D5C0707.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Dec 2023 19:05:08 +0000
Certificate not after:    Tue 10 Dec 2024 19:10:08 +0000
Subordinate resources:    AS: 264426
                          IP: 131.221.188.0/22
                          IP: 143.0.88.0/22
                          IP: 170.0.148.0/22
                          IP: 170.239.116.0/22
                          IP: 2804:1e64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:bf:59:14:c4:c6:10:4a:fe:7e:cd:82:ea:d3:b9:46:8c:61:4a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 12 19:05:08 2023 GMT
            Not After : Dec 10 19:10:08 2024 GMT
        Subject: CN=2E7EF3D46EA1FA859183A72D9264A4F76D5C0707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:58:78:62:6e:4a:71:01:61:e1:76:4a:a7:d0:
                    0c:49:9c:83:86:40:b9:97:05:93:20:87:c2:7a:49:
                    4a:00:62:e0:20:0c:95:58:91:50:9f:e8:c9:79:3f:
                    af:1f:08:8e:1f:ba:c2:3e:b3:77:bd:e1:ba:51:25:
                    c7:37:26:8b:ff:be:37:f4:0f:84:38:cd:92:8d:60:
                    bf:26:f5:85:2f:b6:c8:b3:91:f1:7b:70:87:7f:e8:
                    91:61:ae:72:43:6a:be:23:20:02:b6:41:29:16:32:
                    88:48:a0:40:26:25:af:0d:2c:e8:db:f8:24:a7:1e:
                    36:cc:7b:72:18:83:19:09:b2:a9:76:c1:38:e6:5c:
                    53:4a:0f:06:ba:00:5e:e1:fa:fe:97:58:b4:ee:94:
                    40:5a:50:58:10:48:4b:fc:33:da:8a:7e:f1:f8:43:
                    32:4e:b3:c7:6e:bc:a5:38:06:64:17:cf:b2:09:c2:
                    1f:76:66:93:9f:66:95:5d:b0:85:46:87:88:20:1e:
                    dd:5f:46:01:c4:53:80:0b:3a:ba:c7:12:55:6d:d7:
                    07:19:0a:62:6b:80:62:f8:f8:b8:71:f0:d3:da:ff:
                    fd:e0:e3:ac:38:73:2e:9f:da:86:94:b7:7b:97:79:
                    fa:58:84:57:2c:6e:25:a5:82:5c:af:b1:b0:76:86:
                    01:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:7E:F3:D4:6E:A1:FA:85:91:83:A7:2D:92:64:A4:F7:6D:5C:07:07
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/0/2E7EF3D46EA1FA859183A72D9264A4F76D5C0707.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.188.0/22
                  143.0.88.0/22
                  170.0.148.0/22
                  170.239.116.0/22
                IPv6:
                  2804:1e64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264426

    Signature Algorithm: sha256WithRSAEncryption
         1b:11:57:8f:0a:1e:59:83:33:42:e5:0b:b3:dd:fe:89:eb:6b:
         c3:e7:51:25:99:5d:ce:e6:d0:0c:ac:e8:c7:fa:91:84:3c:a9:
         53:58:5a:e6:10:34:1b:da:7e:2d:fc:58:e3:ba:8e:ef:32:be:
         71:6a:53:e4:07:5a:af:0a:c3:18:65:e2:88:b8:6b:f4:a9:51:
         fe:cb:c4:5e:4a:67:01:09:6c:e2:b0:6d:6d:3e:fb:9c:42:11:
         d9:5e:b6:77:1a:4e:f1:ce:27:8f:8e:99:3f:6a:5b:ff:4b:41:
         b8:77:84:f1:e3:0e:70:f7:a6:42:62:0b:23:58:5a:4a:cb:81:
         5b:4d:7a:af:30:e8:b2:3c:13:c8:47:5b:d5:d6:c2:eb:d5:4a:
         12:e3:5d:3d:97:0c:e3:12:ea:b2:f6:35:5b:8a:fa:45:b7:e8:
         e0:a0:5e:02:d5:8d:11:fc:bc:12:f9:11:a9:73:94:9a:70:de:
         47:24:69:78:30:d9:14:06:c6:8b:a9:4b:19:4d:92:4f:0d:16:
         d1:85:c8:ea:d0:b0:35:ee:7d:1e:f7:df:0d:7c:cc:50:11:8d:
         72:dd:14:2a:b9:00:21:17:49:66:f6:a6:f2:f9:5c:d8:75:03:
         a6:e8:19:76:5b:53:a3:29:0c:7e:34:7f:09:f5:92:03:2c:08:
         60:17:85:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org