Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2FBC8DFF1B8148C0C53E486ABFF033B3DAF48AA0.cer
File:                     2FBC8DFF1B8148C0C53E486ABFF033B3DAF48AA0.cer (raw, json)
Hash identifier:          BJJvM6RvZUZ62dKnK99c71cAhYnUTZUEqVvcD2iOYOI=
Subject key identifier:   2F:BC:8D:FF:1B:81:48:C0:C5:3E:48:6A:BF:F0:33:B3:DA:F4:8A:A0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4DAD542E67DF7236893C06195E8E0ED8BDC92C6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/2FBC8DFF1B8148C0C53E486ABFF033B3DAF48AA0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Nov 2021 17:51:27 +0000
Certificate not after:    Mon 28 Nov 2022 17:56:27 +0000
Subordinate resources:    AS: 28264
                          IP: 177.22.240.0/21
                          IP: 179.124.0.0/21
                          IP: 187.17.176.0/20
                          IP: 2804:130::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ad:54:2e:67:df:72:36:89:3c:06:19:5e:8e:0e:d8:bd:c9:2c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 29 17:51:27 2021 GMT
            Not After : Nov 28 17:56:27 2022 GMT
        Subject: CN=2FBC8DFF1B8148C0C53E486ABFF033B3DAF48AA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:f3:fc:6e:38:9d:9a:e5:f2:02:ec:26:03:
                    20:bd:c5:60:b7:84:3c:a4:93:fb:fa:43:89:4e:86:
                    d5:5e:8c:a0:3a:fd:4e:c7:de:34:ba:10:21:75:46:
                    aa:3d:e7:f8:b6:86:1f:d3:77:d5:22:b4:86:b2:f2:
                    76:73:09:ff:d5:d8:3a:a3:66:8d:63:8c:8b:3d:ba:
                    3a:28:d4:34:24:f7:2c:2a:d4:4f:4d:c6:b5:17:f7:
                    f8:9a:78:a7:94:ea:f1:c9:ef:fe:ef:bd:b0:e1:f4:
                    c3:6d:c0:d7:af:7c:76:17:c0:7c:0b:65:63:9b:50:
                    5d:9f:e1:2b:5a:a2:58:8e:e8:af:04:91:70:6e:a8:
                    1c:f4:f7:fe:92:d6:a6:71:f8:4f:75:1c:26:69:ce:
                    aa:b8:01:84:c0:76:e9:4a:e0:ca:cd:7b:a5:5b:aa:
                    15:fc:28:08:3c:86:5c:57:f9:b3:01:41:fe:20:89:
                    08:a1:06:46:ef:85:bc:d7:ee:30:99:be:e5:d0:26:
                    e2:7b:cf:1a:e3:f8:6f:89:ef:38:d8:04:31:a0:c8:
                    12:c8:f7:52:14:8e:cc:c3:a6:83:52:ea:da:90:67:
                    61:b1:b1:a4:43:ea:a7:35:0b:20:62:ce:34:3d:e2:
                    76:1f:40:45:a8:7b:f9:bc:7a:55:63:3c:f6:7a:53:
                    30:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:BC:8D:FF:1B:81:48:C0:C5:3E:48:6A:BF:F0:33:B3:DA:F4:8A:A0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/2FBC8DFF1B8148C0C53E486ABFF033B3DAF48AA0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.240.0/21
                  179.124.0.0/21
                  187.17.176.0/20
                IPv6:
                  2804:130::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28264

    Signature Algorithm: sha256WithRSAEncryption
         47:a1:40:db:b4:18:31:41:64:c5:20:05:98:41:71:95:86:be:
         57:ca:86:f6:fa:b8:f0:8b:fc:6c:80:2a:67:31:e5:bb:c3:a1:
         c4:c4:ab:dc:2c:e2:7a:21:21:be:1b:94:5f:ca:35:c3:10:9b:
         a5:bc:0c:49:50:7f:4e:74:1e:65:28:7f:75:8b:62:d7:b3:46:
         88:bb:67:08:a2:b7:66:57:f1:91:7e:ae:5a:e0:e6:9c:dc:bd:
         00:7f:1c:82:fd:68:00:8a:2e:a0:e5:52:8b:75:7b:cd:c0:60:
         36:e4:90:c1:61:7b:93:be:72:bd:59:71:25:0c:fe:24:05:89:
         3a:51:8a:32:08:3a:37:da:a5:bd:3f:5a:3b:96:59:c2:ea:d0:
         50:78:2f:97:33:57:8b:41:3e:49:6a:10:aa:f2:73:41:08:1b:
         68:3c:96:36:6a:7c:9c:6f:5e:c1:8e:1f:24:15:cf:d2:d8:54:
         0d:4b:21:5d:9d:3f:14:dc:fa:64:ae:a9:bf:c2:19:05:9e:71:
         05:2d:18:fb:f6:e7:09:4c:41:bc:f2:f8:fa:7d:fc:a4:e6:09:
         9e:62:dd:2b:3f:95:ab:af:97:8e:b6:02:50:43:10:35:0c:b0:
         77:19:cb:2e:79:0d:ea:88:43:8b:4f:4e:f9:8b:d3:18:a0:35:
         dc:43:c4:c0
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIUTa1ULmffcjaJPAYZXo4O2L3JLGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMTExMjkxNzUxMjdaFw0yMjExMjgxNzU2MjdaMDMxMTAvBgNV
BAMTKDJGQkM4REZGMUI4MTQ4QzBDNTNFNDg2QUJGRjAzM0IzREFGNDhBQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwGvP8bjidmuXyAuwmAyC9xWC3
hDykk/v6Q4lOhtVejKA6/U7H3jS6ECF1Rqo95/i2hh/Td9UitIay8nZzCf/V2Dqj
Zo1jjIs9ujoo1DQk9ywq1E9NxrUX9/iaeKeU6vHJ7/7vvbDh9MNtwNevfHYXwHwL
ZWObUF2f4StaoliO6K8EkXBuqBz09/6S1qZx+E91HCZpzqq4AYTAdulK4MrNe6Vb
qhX8KAg8hlxX+bMBQf4giQihBkbvhbzX7jCZvuXQJuJ7zxrj+G+J7zjYBDGgyBLI
91IUjszDpoNS6tqQZ2GxsaRD6qc1CyBizjQ94nYfQEWoe/m8elVjPPZ6UzCdAgMB
AAGjggMlMIIDITAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvvI3/G4FIwMU+
SGq/8DOz2vSKoDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FZHdHTmdRNGdYcTh3QlROSGZoTnJHNFFVMk56SlpnQ1J2
dno5M1FQOHlYbS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FZHdHTmdRNGdYcTh3QlROSGZoTnJHNFFVMk56SlpnQ1J2
dno5M1FQOHlYbS8wLzJGQkM4REZGMUI4MTQ4QzBDNTNFNDg2QUJGRjAzM0IzREFG
NDhBQTAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEA7EW8AMEA7N8AAMEBLsR
sDANBAIAAjAHAwUAKAQBMDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJuaDANBgkq
hkiG9w0BAQsFAAOCAQEAR6FA27QYMUFkxSAFmEFxlYa+V8qG9vq48Iv8bIAqZzHl
u8OhxMSr3CzieiEhvhuUX8o1wxCbpbwMSVB/TnQeZSh/dYti17NGiLtnCKK3Zlfx
kX6uWuDmnNy9AH8cgv1oAIouoOVSi3V7zcBgNuSQwWF7k75yvVlxJQz+JAWJOlGK
Mgg6N9qlvT9aO5ZZwurQUHgvlzNXi0E+SWoQqvJzQQgbaDyWNmp8nG9ewY4fJBXP
0thUDUshXZ0/FNz6ZK6pv8IZBZ5xBS0Y+/bnCUxBvPL4+n38pOYJnmLdKz+Vq6+X
jrYCUEMQNQywdxnLLnkN6ohDi09O+YvTGKA13EPEwA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org