Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.cer
File:                     2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.cer (raw, json)
Hash identifier:          1QYkxPKLezqwlzVaRY8GT7pckxIjINp+MMaoqbkAoWQ=
Subject key identifier:   2E:B5:E6:72:D7:99:5D:9D:AE:16:E5:A6:38:1C:94:BB:3F:21:28:EA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       47D9922739791776BEDD543F62F14844A55D06CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Mar 2024 13:49:34 +0000
Certificate not after:    Mon 03 Mar 2025 13:54:34 +0000
Subordinate resources:    AS: 52968
                          IP: 138.36.184.0/22
                          IP: 168.194.116.0/22
                          IP: 177.38.112.0/20
                          IP: 179.108.64.0/21
                          IP: 200.229.212.0/22
                          IP: 2804:ea0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d9:92:27:39:79:17:76:be:dd:54:3f:62:f1:48:44:a5:5d:06:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 13:49:34 2024 GMT
            Not After : Mar  3 13:54:34 2025 GMT
        Subject: CN=2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4b:16:20:37:43:51:2b:10:19:2e:09:20:42:
                    75:a3:8a:07:dc:be:b4:57:ae:f5:6b:d2:c1:e8:69:
                    fe:b5:33:13:5d:bc:77:59:e4:e3:cb:37:50:6c:c8:
                    ed:8a:eb:6f:53:37:69:30:f7:cc:cd:58:e9:53:fc:
                    72:e7:e8:55:01:8c:87:8a:e0:b7:a0:9b:19:62:52:
                    5e:c8:3a:3e:32:56:f2:6a:0a:6f:d4:69:1a:27:56:
                    11:5b:99:7b:15:21:65:f0:9a:08:d0:75:0f:56:f9:
                    9f:41:86:6b:8a:6d:6a:8b:08:7a:56:a4:d7:0d:a6:
                    21:93:02:a7:23:78:c9:ab:ff:1d:6c:8e:46:d4:14:
                    09:0b:85:9c:92:cf:f9:74:30:8e:a2:f3:b7:61:21:
                    37:6b:47:26:f3:1e:d5:f6:ab:31:72:2f:a4:c0:e6:
                    cc:f8:a0:0b:f4:2c:59:54:28:23:48:52:b3:e9:ed:
                    41:a8:42:16:49:d9:bb:22:b2:8b:2e:22:89:c7:9b:
                    38:91:18:2d:a2:7b:28:31:12:9c:ab:2d:ac:fb:b8:
                    fd:85:6b:f9:2d:a5:f0:da:ab:8d:c7:7a:a5:d8:d0:
                    6d:9d:aa:26:c7:83:dc:67:7c:ed:09:ae:0f:87:bd:
                    8b:c2:b6:71:f4:cb:01:4f:b3:b4:09:73:0c:99:db:
                    99:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:B5:E6:72:D7:99:5D:9D:AE:16:E5:A6:38:1C:94:BB:3F:21:28:EA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.184.0/22
                  168.194.116.0/22
                  177.38.112.0/20
                  179.108.64.0/21
                  200.229.212.0/22
                IPv6:
                  2804:ea0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52968

    Signature Algorithm: sha256WithRSAEncryption
         16:ef:d9:2c:80:b5:11:29:bc:5b:1e:cf:03:b1:00:b1:39:65:
         a8:e8:aa:9d:5d:a8:35:6e:b2:38:15:fb:99:b9:20:78:55:17:
         79:56:ae:c0:77:09:94:60:5d:de:53:bf:df:79:46:43:a2:1e:
         60:39:e3:c1:29:ac:a1:96:ab:ac:f3:b8:7b:78:9f:06:81:e3:
         ad:74:e4:3f:a8:8f:2a:9b:59:dc:aa:7f:82:4c:eb:53:0f:4e:
         42:76:05:68:5e:2b:a3:3e:f9:47:eb:85:7f:e2:7b:db:4e:4d:
         5b:4f:99:0f:14:60:30:99:23:25:61:69:e1:93:d1:35:80:ef:
         d4:7f:b1:db:8a:e6:23:c6:a2:13:42:5a:62:3b:c4:84:cc:1a:
         78:6d:c0:37:35:59:04:cc:30:5b:17:83:c5:5d:9f:66:4c:22:
         46:dc:cc:be:bc:ac:82:13:2a:3c:e3:6a:2d:59:a6:56:1e:18:
         cd:c8:a5:9e:0e:d8:1f:29:cc:53:45:6d:76:d3:0e:4e:f4:0b:
         4b:ef:85:1d:c9:92:b4:c0:87:56:67:ea:ac:81:04:f5:dc:3e:
         15:a0:cc:47:2d:a0:2a:36:2e:55:0a:b3:bd:3f:41:ee:a0:47:
         ba:ed:7a:2f:ba:cc:0b:c3:a2:1d:8a:28:c5:6f:48:9b:d7:63:
         77:11:96:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org