Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2F2ABE9A5B4A9967AFE81C5C5C4C454BD86BC243.cer
File:                     2F2ABE9A5B4A9967AFE81C5C5C4C454BD86BC243.cer (raw, json)
Hash identifier:          UYyet42keyK9XUnfwh8no9Rw4CaTuDrnZeXAxO04SDU=
Subject key identifier:   2F:2A:BE:9A:5B:4A:99:67:AF:E8:1C:5C:5C:4C:45:4B:D8:6B:C2:43
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7FF2853CA7CCFF3A7CF835349891362F7C573873
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/2F2ABE9A5B4A9967AFE81C5C5C4C454BD86BC243.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Oct 2023 17:35:39 +0000
Certificate not after:    Thu 24 Oct 2024 17:40:39 +0000
Subordinate resources:    AS: 265482
                          IP: 168.197.140.0/22
                          IP: 2804:34d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f2:85:3c:a7:cc:ff:3a:7c:f8:35:34:98:91:36:2f:7c:57:38:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 26 17:35:39 2023 GMT
            Not After : Oct 24 17:40:39 2024 GMT
        Subject: CN=2F2ABE9A5B4A9967AFE81C5C5C4C454BD86BC243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1b:44:30:2f:26:71:4f:25:e8:83:72:57:ec:
                    49:57:05:07:3e:b4:15:d7:83:7a:29:4d:5f:eb:8c:
                    70:a6:e9:83:d3:f8:52:44:3d:42:97:5a:b2:1b:6c:
                    46:45:5c:a8:53:40:93:ff:af:a3:c7:c8:4e:c5:dc:
                    8c:4f:9f:ec:49:f9:e4:d1:8c:a1:6d:04:64:49:0d:
                    c5:e3:2b:b1:05:e9:25:2a:c1:22:81:ac:fc:ec:a9:
                    94:9e:ce:58:6d:40:d2:ce:57:59:ce:96:27:b3:8e:
                    a5:9a:70:23:ad:0b:c5:dd:e5:40:9b:0a:57:fb:14:
                    fa:16:d5:db:bb:0f:b6:d4:46:de:07:09:7a:8d:0d:
                    35:e7:6c:68:66:1d:eb:a4:da:1a:71:96:bf:cf:14:
                    e8:18:db:35:f2:36:20:8e:d3:7f:fb:50:f8:8a:93:
                    00:13:6e:69:1d:eb:47:b7:d7:6f:25:85:56:f0:07:
                    50:4f:5d:72:ce:71:6f:cb:a0:cc:0b:d8:a8:2c:68:
                    b8:2f:19:c1:f0:13:12:ed:eb:f5:0e:41:a9:80:d3:
                    f0:82:90:ef:d6:1b:d1:cd:21:fe:46:e4:8a:cc:61:
                    9f:0d:d3:c8:a8:ac:61:71:71:3f:fd:34:14:6a:93:
                    8f:3a:d6:c4:4d:87:9a:d7:e8:54:47:78:0f:0b:30:
                    2a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:2A:BE:9A:5B:4A:99:67:AF:E8:1C:5C:5C:4C:45:4B:D8:6B:C2:43
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/2F2ABE9A5B4A9967AFE81C5C5C4C454BD86BC243.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.140.0/22
                IPv6:
                  2804:34d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265482

    Signature Algorithm: sha256WithRSAEncryption
         54:af:47:22:e8:88:cf:60:c8:6b:8c:ff:c3:dd:e6:f6:f9:fc:
         fe:64:d8:f5:77:93:9f:6b:91:fa:fb:19:82:a4:96:ba:ec:d2:
         0f:3f:a2:8b:60:e1:57:12:9e:57:98:9f:cd:81:0b:93:9b:47:
         75:ee:f5:c6:d7:c0:c8:a5:57:6b:d5:31:90:cf:02:7a:29:68:
         5d:9e:73:26:25:b3:b9:3f:41:07:d1:48:c4:76:0e:c2:72:64:
         81:29:1b:04:ed:69:db:1b:60:70:f1:4b:75:60:18:18:f6:ea:
         cc:b2:83:9f:5d:77:b2:39:c5:46:d1:d3:37:dc:11:34:53:a9:
         f6:06:dc:ff:48:c8:84:ad:15:38:fe:7e:d0:eb:38:fb:16:a1:
         62:12:2c:40:c1:a0:8a:27:27:d2:32:4d:37:29:b0:7c:20:f1:
         e6:95:68:17:63:81:85:bb:60:b8:1a:08:de:03:0f:1a:c6:68:
         7f:4b:d3:a6:13:27:3c:9c:c7:41:02:54:0b:e1:03:f4:a1:7c:
         87:3c:74:02:22:64:ea:a1:0a:a1:71:10:a3:26:05:15:b8:d9:
         a9:43:63:01:9a:7d:ef:08:9b:fb:eb:49:bf:fd:b0:d5:71:bf:
         db:1c:4a:78:bb:23:b5:57:51:b5:43:18:52:f3:13:5c:f1:0f:
         25:8c:7c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org