Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2F71AB5CAACB982B46823A90DA691E884C937F54.cer
File:                     2F71AB5CAACB982B46823A90DA691E884C937F54.cer (raw, json)
Hash identifier:          GL+1YQjVS2ODhCqqgUJoJgf3TEJxsUzzjoW2hMo6lnM=
Subject key identifier:   2F:71:AB:5C:AA:CB:98:2B:46:82:3A:90:DA:69:1E:88:4C:93:7F:54
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       13162E4BB7955CF04E5FC4EB5B8DF85102F3A586
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/2F71AB5CAACB982B46823A90DA691E884C937F54.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Apr 2023 13:42:28 +0000
Certificate not after:    Thu 11 Apr 2024 13:47:28 +0000
Subordinate resources:    AS: 268465
                          IP: 45.161.124.0/22
                          IP: 2804:519c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:16:2e:4b:b7:95:5c:f0:4e:5f:c4:eb:5b:8d:f8:51:02:f3:a5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 13 13:42:28 2023 GMT
            Not After : Apr 11 13:47:28 2024 GMT
        Subject: CN=2F71AB5CAACB982B46823A90DA691E884C937F54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:0f:a7:b9:15:3e:87:c6:0c:a4:12:7d:7f:
                    74:87:1f:a5:6b:bc:98:f4:06:c4:50:1d:5f:87:da:
                    71:a1:c0:70:1a:85:48:8e:ef:a7:ea:26:3c:29:65:
                    a8:f6:f7:07:c2:35:b6:10:63:65:5b:30:92:4b:d0:
                    e2:72:cd:9b:3c:71:84:85:9f:52:76:e0:63:de:04:
                    40:fe:3a:4e:5a:8a:27:e7:de:ab:33:f4:59:28:a9:
                    88:dd:b0:5e:cd:7f:5d:b9:97:60:92:ef:2a:a6:0b:
                    cd:1a:b7:18:1d:99:b3:f8:bd:03:9e:0c:6a:83:50:
                    78:6a:f2:8b:df:bc:57:25:68:18:e4:1e:01:97:c6:
                    df:95:88:58:2e:0c:e9:81:b8:21:8d:5f:06:e2:98:
                    8d:22:dd:f1:42:6b:4c:67:67:c7:21:ef:6d:a5:ab:
                    1a:20:d3:b1:3b:c7:60:67:3a:d5:7f:74:eb:22:0f:
                    41:45:e6:bc:3e:ea:bd:64:1e:da:8f:80:fa:82:a2:
                    8e:6c:5e:e4:a2:80:bb:3d:fb:dd:96:c8:a4:ef:d3:
                    73:f6:be:9e:5e:27:a5:a9:fe:3d:44:0b:3d:7e:2c:
                    6d:b6:1a:41:f0:ba:b0:fc:6d:60:33:7b:06:45:8c:
                    39:7d:9a:84:ed:2c:1e:24:b5:9f:a0:c1:3d:2b:9e:
                    d6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:71:AB:5C:AA:CB:98:2B:46:82:3A:90:DA:69:1E:88:4C:93:7F:54
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/2F71AB5CAACB982B46823A90DA691E884C937F54.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.124.0/22
                IPv6:
                  2804:519c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268465

    Signature Algorithm: sha256WithRSAEncryption
         3e:38:f6:2a:c9:e2:40:6f:19:39:97:ae:63:af:e3:55:02:80:
         d7:39:c5:a0:e7:f1:82:81:fc:19:35:d0:26:d8:d1:f4:88:1e:
         d0:ce:2e:4c:57:59:9a:8a:09:d5:76:80:20:5c:8e:3a:c5:9c:
         ac:d8:45:68:ee:13:2d:a0:db:2c:0c:6e:13:78:ae:6c:fc:57:
         d0:39:78:4d:4e:64:d6:61:c8:66:ef:f8:c2:c5:02:e6:f5:a3:
         88:30:86:bb:b6:ff:66:21:b1:1c:af:3d:96:18:a0:39:a7:0b:
         3a:b4:1e:cb:ad:7f:14:5c:a4:25:13:31:46:a7:34:98:b2:af:
         2b:56:69:05:61:28:09:bc:9b:3a:0b:5c:b7:a3:4f:6a:b2:ae:
         03:e4:9a:5d:1c:b0:86:61:42:f6:b6:cf:21:cd:62:48:ba:77:
         37:8b:f4:96:a8:3d:e2:1c:49:d0:68:7a:46:fc:da:3c:d8:ce:
         4a:ef:0e:6e:5a:83:56:2c:6b:88:23:c1:98:72:25:3e:bb:4c:
         13:3b:9e:56:65:e6:f4:e0:da:9f:a0:b5:d5:60:1d:a7:f7:2c:
         88:39:e4:62:4d:57:f8:0e:58:12:f2:56:ef:b2:b8:fe:23:9d:
         5a:d2:d8:86:7d:48:de:c2:28:57:a4:3b:21:5b:59:14:12:04:
         2f:4f:ac:ce
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUExYuS7eVXPBOX8TrW434UQLzpYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MTMxMzQyMjhaFw0yNDA0MTExMzQ3MjhaMDMxMTAvBgNV
BAMTKDJGNzFBQjVDQUFDQjk4MkI0NjgyM0E5MERBNjkxRTg4NEM5MzdGNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9tA+nuRU+h8YMpBJ9f3SHH6Vr
vJj0BsRQHV+H2nGhwHAahUiO76fqJjwpZaj29wfCNbYQY2VbMJJL0OJyzZs8cYSF
n1J24GPeBED+Ok5aiifn3qsz9FkoqYjdsF7Nf125l2CS7yqmC80atxgdmbP4vQOe
DGqDUHhq8ovfvFclaBjkHgGXxt+ViFguDOmBuCGNXwbimI0i3fFCa0xnZ8ch722l
qxog07E7x2BnOtV/dOsiD0FF5rw+6r1kHtqPgPqCoo5sXuSigLs9+92WyKTv03P2
vp5eJ6Wp/j1ECz1+LG22GkHwurD8bWAzewZFjDl9moTtLB4ktZ+gwT0rnta9AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvcatcqsuYK0aC
OpDaaR6ITJN/VDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85SGpOdWRQZkN1Qkx3VXM0WUtQUlgyNW43TnFHV3pqRlhk
WmN3d2hpWjhldi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85SGpOdWRQZkN1Qkx3VXM0WUtQUlgyNW43TnFHV3pqRlhk
WmN3d2hpWjhldi8wLzJGNzFBQjVDQUFDQjk4MkI0NjgyM0E5MERBNjkxRTg4NEM5
MzdGNTQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2hfDANBAIAAjAHAwUA
KARRnDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGLEwDQYJKoZIhvcNAQELBQAD
ggEBAD449irJ4kBvGTmXrmOv41UCgNc5xaDn8YKB/Bk10CbY0fSIHtDOLkxXWZqK
CdV2gCBcjjrFnKzYRWjuEy2g2ywMbhN4rmz8V9A5eE1OZNZhyGbv+MLFAub1o4gw
hru2/2YhsRyvPZYYoDmnCzq0HsutfxRcpCUTMUanNJiyrytWaQVhKAm8mzoLXLej
T2qyrgPkml0csIZhQva2zyHNYki6dzeL9JaoPeIcSdBoekb82jzYzkrvDm5ag1Ys
a4gjwZhyJT67TBM7nlZl5vTg2p+gtdVgHaf3LIg55GJNV/gOWBLyVu+yuP4jnVrS
2IZ9SN7CKFekOyFbWRQSBC9PrM4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org