Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2F4AED482D7ABF406BB142364A041CFC8B01DB95.cer
File:                     2F4AED482D7ABF406BB142364A041CFC8B01DB95.cer (raw, json)
Hash identifier:          QBgWSmVGQWBgIDsNufj70ymolYuDvyXfWJMhBJD4jrw=
Subject key identifier:   2F:4A:ED:48:2D:7A:BF:40:6B:B1:42:36:4A:04:1C:FC:8B:01:DB:95
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D5F08F3BEBAAE9098C7F85210D3A6136FB8F486
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/2F4AED482D7ABF406BB142364A041CFC8B01DB95.mft
caRepository:             rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Dec 2022 17:38:44 +0000
Certificate not after:    Tue 26 Dec 2023 17:43:44 +0000
Subordinate resources:    AS: 270811
                          IP: 200.219.20.0/22
                          IP: 2804:71c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5f:08:f3:be:ba:ae:90:98:c7:f8:52:10:d3:a6:13:6f:b8:f4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 27 17:38:44 2022 GMT
            Not After : Dec 26 17:43:44 2023 GMT
        Subject: CN=2F4AED482D7ABF406BB142364A041CFC8B01DB95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b6:72:00:76:35:27:31:8a:d7:26:ff:42:bb:
                    1b:ef:c3:44:a2:46:93:8a:64:70:87:67:82:bb:44:
                    89:6b:8a:de:00:a3:5d:83:17:83:1c:b6:59:40:d8:
                    ac:b3:10:21:13:14:ae:1a:57:dd:81:5f:2e:fd:6b:
                    13:55:89:f5:6c:19:f0:d1:a0:f3:54:34:5d:f8:c9:
                    b6:b2:09:f7:7c:fe:eb:79:53:73:c8:98:cc:61:29:
                    1d:cf:12:05:a4:78:6f:92:aa:5c:ec:a0:7d:66:29:
                    45:78:5e:a1:f5:e2:15:06:71:94:9c:bb:3b:04:86:
                    d8:6a:3f:34:e5:0a:8a:1e:d0:a3:59:4b:a9:f2:bb:
                    30:b1:57:72:b6:11:c6:bb:fc:d1:4b:ff:01:0d:a6:
                    d1:42:f0:6d:7d:29:17:bc:13:ea:49:d7:37:d7:9c:
                    cd:5d:c2:cb:c1:0f:d1:50:c3:c9:d3:74:1d:76:e9:
                    7b:52:2f:c3:bd:b2:d2:8a:27:c4:b9:0c:37:3b:37:
                    51:c4:3a:f3:8b:e3:34:d0:db:aa:67:82:f4:fc:95:
                    55:ee:86:fa:be:3a:8f:86:98:35:45:b7:24:b5:66:
                    b6:53:67:72:3b:95:20:79:94:13:71:b7:9c:b2:57:
                    01:36:82:2c:70:eb:28:23:7f:aa:e2:11:39:14:5e:
                    d2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:4A:ED:48:2D:7A:BF:40:6B:B1:42:36:4A:04:1C:FC:8B:01:DB:95
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/2F4AED482D7ABF406BB142364A041CFC8B01DB95.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.20.0/22
                IPv6:
                  2804:71c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270811

    Signature Algorithm: sha256WithRSAEncryption
         52:dc:55:74:6a:66:76:f1:c0:cd:c6:a8:59:10:c2:2c:da:16:
         66:54:ef:2b:89:b9:fd:d3:8d:ea:33:8d:b4:9c:31:d1:79:10:
         fa:79:90:52:0b:d0:6c:87:e2:f9:d3:05:91:cc:32:2c:ac:04:
         8e:2a:bf:c6:a4:ff:fb:b8:83:1f:47:ea:65:8d:48:71:8a:6f:
         3d:c9:0c:e0:32:31:b6:cb:c7:08:4c:5d:ca:df:bb:eb:bb:01:
         e4:58:49:bb:68:3c:a4:7f:e2:75:2d:d9:c4:93:54:e5:0c:90:
         ac:f3:ab:17:3b:75:e2:de:fc:58:8e:8b:e2:3f:8a:26:d6:c7:
         ce:1d:db:c4:e9:22:c9:8f:f1:b6:34:e7:fc:07:92:6a:b7:60:
         6f:d8:29:89:37:3f:74:7d:20:14:bc:94:81:b6:63:64:7b:7d:
         34:28:97:f5:61:25:d3:d1:35:67:1e:47:e4:a9:10:43:da:c4:
         9a:78:85:0f:88:8c:7d:97:5e:24:cc:e1:9d:48:59:f3:09:60:
         4e:f3:10:ae:ee:17:38:ec:65:08:ae:15:07:44:a1:fd:20:9a:
         10:73:42:32:49:f7:84:2e:47:4b:8f:45:24:0a:21:0b:13:f1:
         55:c5:09:f4:78:b6:2d:1c:f5:f6:ad:58:c6:84:42:cd:5e:22:
         60:1b:6f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org