Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2FD7B1A409FE8ACD198B1C3F43BC6124D21595DD.cer
File:                     2FD7B1A409FE8ACD198B1C3F43BC6124D21595DD.cer (raw, json)
Hash identifier:          L9l/mMxp/69kjqy6iM2VfEhtTOhzjrijTdcisjfQH7k=
Subject key identifier:   2F:D7:B1:A4:09:FE:8A:CD:19:8B:1C:3F:43:BC:61:24:D2:15:95:DD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       527588DDAD812759AAF2C8926A1E3B387D6A38E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/2FD7B1A409FE8ACD198B1C3F43BC6124D21595DD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Feb 2024 12:11:27 +0000
Certificate not after:    Tue 18 Feb 2025 12:16:27 +0000
Subordinate resources:    AS: 265017
                          IP: 170.84.140.0/22
                          IP: 2804:3178::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:75:88:dd:ad:81:27:59:aa:f2:c8:92:6a:1e:3b:38:7d:6a:38:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 20 12:11:27 2024 GMT
            Not After : Feb 18 12:16:27 2025 GMT
        Subject: CN=2FD7B1A409FE8ACD198B1C3F43BC6124D21595DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8a:26:4b:18:c3:7f:4c:95:8e:41:8e:32:e8:
                    2f:9f:f8:07:d8:6b:e6:be:f8:be:82:4a:cd:2e:1e:
                    05:21:00:67:77:99:59:0e:db:7f:5c:f2:39:66:10:
                    d6:16:5b:c0:04:cf:ff:aa:5f:2e:d0:8c:eb:3c:28:
                    99:81:dc:3a:55:3b:76:93:b6:68:95:84:19:3b:4e:
                    64:7e:5b:02:71:a4:f9:26:de:74:6d:66:8e:28:5b:
                    97:15:ca:ed:28:7d:54:4a:a9:86:62:21:2b:66:a3:
                    6a:0e:ad:84:97:98:03:b3:c1:5c:13:af:5c:d4:df:
                    8d:93:5e:df:19:b9:01:1b:9f:2b:7c:98:eb:c9:68:
                    6d:30:87:43:eb:00:dd:52:a7:1a:d6:ef:00:3b:cc:
                    e9:e8:e0:3d:f8:9f:7c:71:46:24:78:a0:0f:3a:f4:
                    df:7b:0f:3d:39:27:58:1c:b9:6d:19:b8:cc:93:b8:
                    73:34:24:8c:1d:81:75:34:15:5f:7a:32:be:7c:2e:
                    82:7d:1c:06:58:70:62:19:3d:64:d0:a8:8a:00:11:
                    ca:5a:74:88:d0:23:99:c7:f0:2c:04:97:60:8e:11:
                    e2:02:8b:73:3b:10:d3:fd:22:fa:94:f1:66:57:c5:
                    02:52:19:2a:8b:ef:9c:9d:5a:30:9b:5b:e2:18:3e:
                    bd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:D7:B1:A4:09:FE:8A:CD:19:8B:1C:3F:43:BC:61:24:D2:15:95:DD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/2FD7B1A409FE8ACD198B1C3F43BC6124D21595DD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.140.0/22
                IPv6:
                  2804:3178::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265017

    Signature Algorithm: sha256WithRSAEncryption
         a0:02:1a:9a:35:6a:9b:24:af:21:f2:5e:78:ea:02:fa:8c:cd:
         13:46:b8:86:e0:78:98:93:42:96:24:27:cc:a4:dc:11:bc:eb:
         e7:d4:77:16:32:e8:bc:bf:2d:f2:d5:36:ec:d2:98:93:3a:8f:
         ac:13:ef:a6:8a:25:f3:f3:59:2a:5d:70:e8:04:33:40:e9:08:
         c1:c3:ca:1f:bc:a2:83:b2:4b:57:71:27:35:92:76:26:e5:9d:
         48:b8:4d:3d:dc:a6:b7:23:38:58:dc:6e:74:eb:ea:43:26:27:
         d0:49:f9:e3:70:38:48:26:09:fd:ae:40:d6:2d:3e:09:54:c2:
         03:a1:02:87:22:07:ef:91:5e:f1:ea:b8:0f:0c:bf:a9:a8:09:
         07:02:2f:5e:b5:00:40:87:83:dd:ea:17:29:06:ad:cb:55:6e:
         ce:93:27:be:3c:ac:0d:69:55:45:42:a9:29:32:37:03:0e:51:
         5e:11:74:a7:a2:8a:76:ef:a8:0f:81:70:8f:ca:6f:4e:c0:e4:
         3b:65:3c:3b:27:bd:af:04:cf:71:3c:68:7d:5e:82:a3:fe:33:
         1d:eb:3b:d6:ab:40:2b:ba:9d:3b:ca:6d:87:fa:f5:a5:03:f7:
         79:e8:4a:3d:5c:b6:f7:34:c5:fc:b9:d4:83:8a:d2:2f:0d:f5:
         5c:cf:86:60
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUUnWI3a2BJ1mq8siSah47OH1qOOMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjAxMjExMjdaFw0yNTAyMTgxMjE2MjdaMDMxMTAvBgNV
BAMTKDJGRDdCMUE0MDlGRThBQ0QxOThCMUMzRjQzQkM2MTI0RDIxNTk1REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsiiZLGMN/TJWOQY4y6C+f+AfY
a+a++L6CSs0uHgUhAGd3mVkO239c8jlmENYWW8AEz/+qXy7QjOs8KJmB3DpVO3aT
tmiVhBk7TmR+WwJxpPkm3nRtZo4oW5cVyu0ofVRKqYZiIStmo2oOrYSXmAOzwVwT
r1zU342TXt8ZuQEbnyt8mOvJaG0wh0PrAN1SpxrW7wA7zOno4D34n3xxRiR4oA86
9N97Dz05J1gcuW0ZuMyTuHM0JIwdgXU0FV96Mr58LoJ9HAZYcGIZPWTQqIoAEcpa
dIjQI5nH8CwEl2COEeICi3M7ENP9IvqU8WZXxQJSGSqL75ydWjCbW+IYPr2VAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQv17GkCf6KzRmL
HD9DvGEk0hWV3TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Ec0VObnJURmdkaHZiWnVCNlZxNlNNWWlqczF1WmJhRHVF
ajdCOTI1Q3ZNbS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRHNFTm5yVEZnZGh2Ylp1QjZWcTZTTVlpanMxdVpiYUR1
RWo3QjkyNUN2TW0vMC8yRkQ3QjFBNDA5RkU4QUNEMTk4QjFDM0Y0M0JDNjEyNEQy
MTU5NURELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKqVIwwDQQCAAIwBwMF
ACgEMXgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAs5MA0GCSqGSIb3DQEBCwUA
A4IBAQCgAhqaNWqbJK8h8l546gL6jM0TRriG4HiYk0KWJCfMpNwRvOvn1HcWMui8
vy3y1Tbs0piTOo+sE++miiXz81kqXXDoBDNA6QjBw8ofvKKDsktXcSc1knYm5Z1I
uE093Ka3IzhY3G506+pDJifQSfnjcDhIJgn9rkDWLT4JVMIDoQKHIgfvkV7x6rgP
DL+pqAkHAi9etQBAh4Pd6hcpBq3LVW7Okye+PKwNaVVFQqkpMjcDDlFeEXSnoop2
76gPgXCPym9OwOQ7ZTw7J72vBM9xPGh9XoKj/jMd6zvWq0Arup07ym2H+vWlA/d5
6Eo9XLb3NMX8udSDitIvDfVcz4Zg
-----END CERTIFICATE-----