Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer
File:                     2EC69813A49E7B20507CB65A508F14FFB1282200.cer (raw, json)
Hash identifier:          5ysmzuJTB64o6wZ8VbgzD5SrZUgaGnEQNOlpanlu+4U=
Subject key identifier:   2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0C98A8F6F0749C7CFBCC5704A68F069AF7E42048
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/2EC69813A49E7B20507CB65A508F14FFB1282200.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Dec 2023 13:59:45 +0000
Certificate not after:    Mon 09 Dec 2024 14:04:45 +0000
Subordinate resources:    AS: 264137
                          IP: 138.97.96.0/22
                          IP: 170.0.220.0/22
                          IP: 2804:2304::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:98:a8:f6:f0:74:9c:7c:fb:cc:57:04:a6:8f:06:9a:f7:e4:20:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 11 13:59:45 2023 GMT
            Not After : Dec  9 14:04:45 2024 GMT
        Subject: CN=2EC69813A49E7B20507CB65A508F14FFB1282200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:40:75:a4:c8:86:c9:57:55:d5:0f:21:b7:b8:
                    f5:11:67:68:6a:e8:fc:5a:fc:94:fb:6f:2d:e0:ed:
                    0d:2d:41:2f:78:66:57:62:5a:44:d6:c2:48:e9:ac:
                    95:9f:45:db:6f:aa:8e:b2:0d:b2:ee:23:9e:e6:ff:
                    2d:1f:5d:23:74:9c:2e:44:3e:03:80:44:c8:54:e5:
                    77:83:fd:4d:3f:60:9f:58:c6:c1:76:ff:1c:d6:d1:
                    73:e0:ff:93:db:17:c1:9e:0d:11:74:76:52:a6:0e:
                    f3:95:ea:b5:67:88:1b:cf:a9:fa:3b:1f:14:69:08:
                    dd:6f:42:61:9f:dd:e4:a2:b7:de:09:e9:05:de:f9:
                    31:a3:83:ac:c4:36:12:1a:40:b2:f9:84:37:20:df:
                    79:99:eb:52:7a:63:24:f3:f7:4d:af:0a:1e:e4:b4:
                    ac:fe:5b:f5:49:df:b8:f8:53:2f:a4:c1:f8:8d:7f:
                    d0:6d:9f:cc:93:e0:86:39:82:63:a0:d1:11:a0:cd:
                    9d:7e:8c:ff:82:aa:c8:63:ad:52:e5:97:5d:78:4b:
                    2e:49:e7:d7:ee:79:c1:55:aa:de:c4:b0:18:a1:a9:
                    d7:6a:5f:b1:f1:94:37:cb:20:8e:dc:3a:be:31:d1:
                    0f:14:e0:12:2f:8d:e2:77:b3:31:65:20:4f:83:bc:
                    7c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/2EC69813A49E7B20507CB65A508F14FFB1282200.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.96.0/22
                  170.0.220.0/22
                IPv6:
                  2804:2304::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264137

    Signature Algorithm: sha256WithRSAEncryption
         ae:d4:2f:01:a6:18:8f:70:12:26:2e:2a:61:66:36:f7:00:3d:
         d5:ed:85:97:2d:d2:6b:87:44:79:a8:3e:8b:d9:9e:be:0c:10:
         ed:25:a8:83:c9:79:0b:1b:c3:37:e8:ac:bb:98:49:c2:c4:55:
         db:fd:0e:23:3b:84:05:a3:97:55:0a:15:e2:f3:90:d4:eb:31:
         53:bf:d2:aa:6f:49:26:1c:80:db:ef:97:e3:3d:bf:8b:76:62:
         8e:b9:57:e4:6c:5c:20:55:6e:19:8d:a9:da:2e:88:8a:2f:6d:
         6b:2a:18:9f:a7:f8:df:1a:31:e4:21:73:42:be:4f:42:ef:3d:
         ac:02:c2:be:64:90:2b:3d:a5:7e:f7:8a:96:54:60:d9:c9:a4:
         0c:c4:e4:75:d7:bf:ce:27:89:13:36:d8:a7:0c:7b:bc:77:d3:
         1d:94:43:82:71:d5:b3:75:d1:71:14:d5:51:ba:7f:be:58:dc:
         0b:1f:54:1b:c8:97:ec:8d:45:1f:61:da:59:94:53:85:86:25:
         53:65:ab:ff:e8:1b:2e:0f:eb:ac:60:23:81:16:75:6b:76:58:
         02:9f:09:0e:02:db:05:64:f0:15:8b:cf:42:ca:6f:96:ec:4c:
         9d:a6:1a:1e:78:04:86:a0:36:4c:95:73:96:d3:e6:7f:16:9a:
         8e:c2:2a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org