Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2E85AA19E45B833054BE04745B74B3A1C9E961CA.cer
File:                     2E85AA19E45B833054BE04745B74B3A1C9E961CA.cer (raw, json)
Hash identifier:          gSwdU0Gs4/SZuG1/xhw9bNfpTk9I8GlzE3Dw4W0d5LY=
Subject key identifier:   2E:85:AA:19:E4:5B:83:30:54:BE:04:74:5B:74:B3:A1:C9:E9:61:CA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D8828451FACEC8F1450A748C049865BCF33F5F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/0/2E85AA19E45B833054BE04745B74B3A1C9E961CA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Jun 2022 15:56:55 +0000
Certificate not after:    Tue 27 Jun 2023 16:01:55 +0000
Subordinate resources:    AS: 266226
                          IP: 216.98.216.0/22
                          IP: 2804:3ca4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:88:28:45:1f:ac:ec:8f:14:50:a7:48:c0:49:86:5b:cf:33:f5:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 28 15:56:55 2022 GMT
            Not After : Jun 27 16:01:55 2023 GMT
        Subject: CN=2E85AA19E45B833054BE04745B74B3A1C9E961CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:90:ac:b4:03:ee:3e:d0:29:69:77:60:9b:3c:
                    ed:fa:14:7d:3e:cf:48:5e:6c:1d:fc:19:18:a0:d5:
                    98:5e:b4:1a:50:dc:e4:51:34:90:47:f5:40:0a:b0:
                    24:37:8d:f6:e9:95:7e:cf:d5:48:67:98:ac:a1:d8:
                    65:90:4c:2e:32:23:01:f1:5f:79:b3:9f:55:c7:23:
                    9e:57:7b:6f:02:b9:83:d4:8d:7e:ba:09:17:24:cd:
                    72:86:50:e6:12:fe:74:3e:d2:c5:95:a9:c3:46:7b:
                    5a:87:f4:63:99:80:81:a0:b6:0d:44:d8:59:b6:77:
                    48:bd:96:0d:cc:19:1a:3a:3e:eb:9a:93:30:79:a4:
                    3f:c6:34:fd:1a:aa:2d:d8:81:0b:ec:7a:1f:21:d6:
                    13:e6:c3:82:7b:a1:74:de:c8:8b:c5:62:e8:95:2a:
                    d6:25:7b:86:d7:ce:43:70:6f:e0:1b:13:fb:63:1f:
                    fb:37:63:ab:e4:d0:af:45:7b:37:cb:6c:88:1d:9d:
                    2f:67:00:f5:82:85:80:30:fc:8b:07:cf:95:45:5b:
                    e0:9e:83:54:e9:a8:b0:49:9d:17:ee:02:61:cb:ff:
                    99:41:9e:77:69:76:25:11:78:77:97:af:99:4e:23:
                    ae:66:ba:fb:96:a6:7d:24:5d:ec:2a:b0:6d:fe:4b:
                    10:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:85:AA:19:E4:5B:83:30:54:BE:04:74:5B:74:B3:A1:C9:E9:61:CA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/0/2E85AA19E45B833054BE04745B74B3A1C9E961CA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.216.0/22
                IPv6:
                  2804:3ca4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266226

    Signature Algorithm: sha256WithRSAEncryption
         5c:ee:15:f7:6b:5f:9b:de:69:e4:ac:ff:cb:2d:ae:9f:45:bf:
         af:4c:29:ca:b5:21:aa:ad:11:41:43:9d:6d:ff:a6:b3:2b:d0:
         4d:30:a5:30:c0:95:7c:2e:a1:57:24:73:08:cb:48:60:36:7b:
         90:69:d1:47:25:02:55:c9:2f:70:cb:1c:15:66:e1:74:eb:45:
         71:0c:39:f9:92:c1:52:6f:cb:26:1a:b7:57:64:b4:98:41:20:
         1d:ee:61:6b:fd:8d:b9:3a:45:3c:03:5d:17:cb:18:ff:b5:8b:
         94:80:c7:fd:09:da:41:3f:55:9b:67:b7:75:c7:2c:b5:ea:2d:
         45:f6:4a:ce:a5:17:88:22:12:61:1c:df:81:06:c3:ae:ef:03:
         25:2d:06:cc:e4:ec:2f:61:65:bf:6a:59:37:73:40:fb:f4:4d:
         3a:9b:12:51:60:e5:ac:59:dd:bb:3f:ac:d6:1f:b5:53:7a:c9:
         34:f7:17:a9:03:bd:81:73:84:95:df:bf:d8:17:6b:97:bc:7f:
         e8:2b:54:e6:34:4d:fa:2b:6f:16:0c:81:ec:fe:42:38:26:5c:
         8c:bb:05:9d:33:f6:a2:49:67:ba:a2:c9:0f:10:16:99:5f:16:
         72:ef:9f:2f:21:ec:e8:2c:a1:6f:b8:03:36:21:b8:f5:ab:39:
         eb:0e:e3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org