Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE.cer
File:                     2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE.cer (raw, json)
Hash identifier:          QugO3XL2MhhaAzJ3EmqkKBw5F5pzBrbCGRo7kqeOmt8=
Subject key identifier:   2E:9F:82:AA:9A:B3:00:4C:AA:6C:86:8A:08:0C:6D:FA:63:15:B5:DE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0A40683F4FED21EABEA90C609F79575008895C99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/0/2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 03:53:45 +0000
Certificate not after:    Tue 05 Nov 2024 03:58:45 +0000
Subordinate resources:    AS: 61593
                          IP: 45.237.144.0/22
                          IP: 2804:4eb4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:40:68:3f:4f:ed:21:ea:be:a9:0c:60:9f:79:57:50:08:89:5c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 03:53:45 2023 GMT
            Not After : Nov  5 03:58:45 2024 GMT
        Subject: CN=2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8f:70:f4:8b:96:2b:f4:7f:99:82:90:94:ba:
                    5d:17:92:93:c4:d3:d2:42:20:a1:99:c7:22:06:29:
                    84:64:6b:61:2e:3a:2c:10:48:a2:e2:38:12:6e:85:
                    7f:36:a2:06:f3:66:e4:87:33:1c:ff:77:13:58:24:
                    05:ec:db:a6:fa:22:02:40:7d:90:1f:68:31:fd:87:
                    79:92:2e:67:a4:89:69:fa:e0:b2:43:db:d1:1c:70:
                    c9:7c:7b:d3:65:3f:d5:6d:54:f2:66:fc:2f:2e:1a:
                    cd:b5:7a:cf:bc:47:11:e0:cd:00:c1:cd:10:cb:c6:
                    36:b0:53:df:7c:fa:9d:8f:57:e0:b7:ce:94:27:38:
                    6a:4c:a2:72:81:32:f9:cd:a7:49:40:95:67:4c:09:
                    b3:3f:75:3c:fb:cf:57:44:e7:76:24:75:7e:13:bc:
                    80:2b:ea:45:5e:c3:4b:c3:12:c2:a2:4c:88:fa:fa:
                    30:6d:be:48:4f:3d:57:35:05:e5:7c:32:31:a7:fc:
                    f5:8d:82:1c:0d:60:d9:79:bb:5f:87:f7:4c:72:f1:
                    9d:fc:43:35:92:3d:6f:55:08:e7:9e:fa:66:e9:c7:
                    85:29:9f:1a:90:7b:b6:8f:a3:93:1d:54:39:99:c6:
                    0e:c0:e4:38:14:67:44:e1:92:20:ec:8f:b1:d0:07:
                    29:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:9F:82:AA:9A:B3:00:4C:AA:6C:86:8A:08:0C:6D:FA:63:15:B5:DE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HcWQVXcsFt8an9d7ULUCQJEnbozVRtFF62vqm7mPDD9w/0/2E9F82AA9AB3004CAA6C868A080C6DFA6315B5DE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.144.0/22
                IPv6:
                  2804:4eb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61593

    Signature Algorithm: sha256WithRSAEncryption
         2f:23:77:22:77:30:fe:5c:4d:18:61:7f:4f:5e:42:1d:ac:1b:
         34:f1:16:16:0f:e6:dd:e2:b8:74:33:4f:d9:59:e6:92:c3:9e:
         f2:ca:a7:13:38:83:b2:4d:b1:4d:e0:a0:09:2d:da:ae:9a:17:
         00:e2:7d:66:08:a7:00:2d:2a:c1:7e:47:32:fe:bd:de:c7:e3:
         fb:d1:a7:a9:a4:29:2d:1d:92:eb:de:a5:2d:8f:9b:c7:9d:25:
         cf:78:20:0b:5c:84:f8:76:b9:45:25:b3:57:bf:9f:a9:85:81:
         25:1a:3e:70:13:b4:32:09:f2:06:b4:e5:46:f1:49:9c:b2:81:
         50:d2:c8:aa:2b:70:c4:3f:b0:59:c5:cd:36:17:0e:94:22:3e:
         5a:fc:4f:da:c3:1c:09:e3:81:90:93:d6:8a:e3:e3:5d:51:4a:
         1d:95:85:e6:71:d8:f5:c6:5e:47:c4:cc:1d:8f:14:94:d3:f3:
         35:13:62:3a:c8:1b:19:9b:90:9f:cf:9c:2a:88:3a:d0:0b:4c:
         31:59:c8:98:d5:51:1a:ad:33:cc:44:83:03:e3:11:54:24:a3:
         cd:62:c1:1a:e9:f9:39:ce:72:d1:ea:e8:9d:5b:fc:9c:c5:8a:
         fe:83:bb:d9:f1:50:14:c2:3c:85:0a:15:ba:6e:c0:3e:e3:da:
         68:8e:2e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org