Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2FB412543B856F996765C01B679EECB97CE613A2.cer
File:                     2FB412543B856F996765C01B679EECB97CE613A2.cer (raw, json)
Hash identifier:          LW3sdKnwypjCAiA7Lds7kLwgkEZImYAjrdKi23M/8+Q=
Subject key identifier:   2F:B4:12:54:3B:85:6F:99:67:65:C0:1B:67:9E:EC:B9:7C:E6:13:A2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       084D14299F1EB07EC2AF555126EA8E4E11B1C61E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/2FB412543B856F996765C01B679EECB97CE613A2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Jun 2023 12:42:37 +0000
Certificate not after:    Mon 10 Jun 2024 12:47:37 +0000
Subordinate resources:    AS: 268035
                          IP: 45.168.12.0/22
                          IP: 2804:56f8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4d:14:29:9f:1e:b0:7e:c2:af:55:51:26:ea:8e:4e:11:b1:c6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 12 12:42:37 2023 GMT
            Not After : Jun 10 12:47:37 2024 GMT
        Subject: CN=2FB412543B856F996765C01B679EECB97CE613A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:83:31:ba:50:75:e8:26:01:3b:b4:2b:c4:7d:
                    f6:24:9b:1f:fe:70:df:b9:87:85:10:65:5c:58:bd:
                    18:c7:41:98:f4:2e:3b:9f:b4:b4:a3:41:ca:60:d9:
                    ed:59:12:47:37:ae:b9:7f:59:9e:84:4c:a7:c7:75:
                    87:e2:c9:b2:d4:57:a8:4e:0f:73:26:e9:da:bf:ef:
                    6a:d5:19:8c:a8:42:1d:40:c6:03:f9:42:ef:05:63:
                    58:70:6a:cb:c1:d1:d0:b0:16:77:51:a4:0b:cb:cc:
                    79:ae:1d:d7:b3:f9:ad:62:3c:bf:26:d7:1c:51:15:
                    4e:d1:27:ff:d9:11:b6:dd:80:64:1b:1e:35:50:b5:
                    01:8e:5d:1d:c2:08:9b:0f:47:90:b2:e8:e3:e4:c9:
                    92:68:f8:e0:11:45:09:4c:3a:73:55:07:58:a0:b9:
                    4b:34:2e:1a:32:83:db:f4:b4:a8:6a:39:c0:9c:ed:
                    ab:fa:3a:fb:58:0a:a6:74:ba:a7:9f:c2:d8:e3:1f:
                    7c:ad:ba:0f:60:04:7a:53:5c:e7:d0:72:ca:49:32:
                    05:d7:f7:8f:c0:30:25:e7:54:94:09:83:2f:07:49:
                    07:32:f1:18:dd:ec:75:7d:cf:e6:1f:2f:be:d8:82:
                    2e:f6:08:8a:a0:c9:d3:24:04:45:4b:e8:8a:0d:3a:
                    56:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:B4:12:54:3B:85:6F:99:67:65:C0:1B:67:9E:EC:B9:7C:E6:13:A2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/2FB412543B856F996765C01B679EECB97CE613A2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.12.0/22
                IPv6:
                  2804:56f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268035

    Signature Algorithm: sha256WithRSAEncryption
         06:71:bd:f8:5b:64:c3:58:e2:68:f7:b3:73:e3:e2:e4:26:21:
         1b:89:b8:63:2c:2d:96:28:aa:c6:0a:28:55:15:1e:c1:eb:6d:
         4c:15:c3:7f:6f:3f:68:ca:de:1b:a0:e4:04:90:1d:de:17:d6:
         43:37:3a:7c:0c:cf:e8:09:0a:57:d8:07:6c:ad:2a:bb:df:fa:
         dd:62:e1:4f:bf:91:f4:54:28:64:3e:ad:25:d3:e1:42:89:e8:
         4f:01:fb:4e:8b:aa:79:63:46:85:e1:af:45:9c:7d:8a:45:f9:
         1e:8f:2e:c6:c7:aa:f6:ac:31:94:c8:51:18:a7:d4:ea:8a:45:
         82:53:71:23:89:cc:40:04:8c:9b:4e:13:11:1e:94:0e:78:44:
         ce:e3:6e:9f:c4:f9:92:27:60:d6:d5:66:f0:0a:c4:e3:32:3b:
         04:2e:0d:bf:45:f5:fb:a8:f2:92:3f:79:a2:16:4a:7f:1f:c1:
         92:da:1c:42:47:65:11:8d:90:35:7b:c1:56:38:cb:68:08:06:
         cc:dd:fe:0c:88:ac:fe:9d:98:39:19:1a:68:01:5f:17:34:64:
         ac:21:61:c3:43:bb:13:ca:2a:be:86:86:f7:82:e4:b5:67:af:
         65:38:9b:35:7e:99:42:d6:b1:1a:97:65:47:9c:1a:cf:d8:5b:
         6f:18:6f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org