Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.cer
File:                     2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.cer (raw, json)
Hash identifier:          NZx7jOhGQ0TZPsbufZH7Ms4rVC1UHC6rUjtdaUZoG3w=
Subject key identifier:   2F:7C:F5:CC:C0:B9:BC:67:F4:6D:48:08:E4:9F:D2:81:B9:75:18:B6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2B81075FED5902B5C4E493D307CF7336F34B716B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Jan 2024 16:55:11 +0000
Certificate not after:    Fri 03 Jan 2025 17:00:11 +0000
Subordinate resources:    AS: 264237
                          IP: 138.117.172.0 -- 138.117.174.255
                          IP: 2804:24ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:81:07:5f:ed:59:02:b5:c4:e4:93:d3:07:cf:73:36:f3:4b:71:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  5 16:55:11 2024 GMT
            Not After : Jan  3 17:00:11 2025 GMT
        Subject: CN=2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:83:fe:d1:f6:20:bc:7c:39:a0:0b:8a:37:46:
                    c1:07:8f:b5:8a:ba:48:cd:28:ca:c6:49:31:cb:b3:
                    02:b0:4c:c9:cb:4b:35:83:f4:2b:1e:20:44:a3:26:
                    24:02:03:29:e5:44:c8:11:3a:fa:e2:79:69:bf:86:
                    c0:a0:a9:d3:df:ac:91:57:2e:49:c2:6f:ce:9b:c4:
                    30:9b:b2:6d:83:f0:d4:ec:2a:2d:aa:70:af:b5:70:
                    39:16:a2:90:5c:69:4e:43:59:58:cb:b3:c1:4d:c0:
                    c8:fd:a7:7b:fe:99:d8:4a:7d:f4:44:b5:b4:4b:c8:
                    51:2a:48:85:4c:d7:04:9c:72:27:51:01:87:cf:8f:
                    e0:ff:0c:d4:1b:4c:14:b2:cc:b3:80:9a:7a:f5:a8:
                    08:e3:01:d5:0c:6e:eb:e5:5a:f3:d8:f3:4a:d2:30:
                    33:43:07:39:ad:fa:34:92:a6:03:7b:e4:cd:c9:6c:
                    3c:46:8e:ff:df:72:fa:3f:d9:19:5d:ce:65:e6:4e:
                    e0:b1:5e:3a:e3:82:41:d6:28:31:0f:39:9e:80:88:
                    3f:7f:a7:e5:54:41:bc:fa:7c:95:50:ee:b7:36:94:
                    42:9b:30:1a:d1:ec:ad:79:c7:1d:e3:51:f7:da:5f:
                    a6:ad:ed:3c:8e:33:b5:6f:f3:41:60:42:43:d8:9f:
                    a3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:7C:F5:CC:C0:B9:BC:67:F4:6D:48:08:E4:9F:D2:81:B9:75:18:B6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/0/2F7CF5CCC0B9BC67F46D4808E49FD281B97518B6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.172.0-138.117.174.255
                IPv6:
                  2804:24ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264237

    Signature Algorithm: sha256WithRSAEncryption
         32:00:d1:99:ce:49:2e:29:a4:6a:f3:e8:96:ce:30:b0:04:5b:
         3f:93:5b:74:f8:4a:82:3f:f7:3b:7f:f7:53:eb:f0:53:6b:08:
         b4:df:ba:8f:85:27:aa:60:d3:eb:68:7f:61:06:27:0e:2f:bf:
         de:7a:44:94:f6:e7:39:8c:dc:11:09:91:aa:00:25:84:21:da:
         8a:88:9d:a5:50:09:c8:51:b5:af:ff:f7:1e:c5:0b:ef:b2:41:
         1c:65:4b:9c:c0:9a:0b:ca:02:6b:70:bc:81:d4:42:54:64:09:
         cc:65:15:8b:2b:60:4b:f2:21:f9:9d:40:8d:cb:7b:34:ca:f1:
         a8:cd:8a:c0:7c:21:30:2a:b3:cd:35:6e:45:71:23:f7:aa:c0:
         13:3e:9e:d0:91:dc:26:82:8c:36:37:ff:70:62:c1:59:3c:4e:
         2d:51:d3:73:c2:ae:b9:38:09:ac:5d:5b:a8:26:7c:51:94:87:
         f7:56:e0:35:b6:ab:27:4d:e0:09:e6:20:58:cc:78:69:f9:3e:
         de:2c:2b:b8:fb:66:77:c3:c2:04:ca:5e:2b:3f:d1:08:79:b5:
         34:b3:bb:17:e3:01:e6:6f:3d:2e:1b:e2:fb:a1:fe:d3:e2:ec:
         99:d6:bc:64:8c:04:82:a1:f6:90:31:f8:3e:15:5d:98:6b:34:
         a1:15:76:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org