Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2FF2F84183D096398A51FA6F044F57FCC8A45BB7.cer
File:                     2FF2F84183D096398A51FA6F044F57FCC8A45BB7.cer (raw, json)
Hash identifier:          k7EWPqwCVEvxbCmmGU0w/N5mHKqKJ9Qxj21Sm9nKtAY=
Subject key identifier:   2F:F2:F8:41:83:D0:96:39:8A:51:FA:6F:04:4F:57:FC:C8:A4:5B:B7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       434DBDC6B14DE616E99D54B42E4B63890A31785E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/0/2FF2F84183D096398A51FA6F044F57FCC8A45BB7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 24 Feb 2024 13:09:15 +0000
Certificate not after:    Sat 22 Feb 2025 13:14:15 +0000
Subordinate resources:    AS: 262428
                          IP: 170.82.152.0/22
                          IP: 177.44.144.0/20
                          IP: 191.6.176.0/20
                          IP: 2804:13dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:4d:bd:c6:b1:4d:e6:16:e9:9d:54:b4:2e:4b:63:89:0a:31:78:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 24 13:09:15 2024 GMT
            Not After : Feb 22 13:14:15 2025 GMT
        Subject: CN=2FF2F84183D096398A51FA6F044F57FCC8A45BB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9a:2c:73:93:71:a3:5a:e3:4e:43:e0:f0:6e:
                    4c:67:af:39:4c:7a:aa:9e:ff:f1:60:ad:88:09:09:
                    63:a4:e1:fe:41:5c:9e:7c:b3:d0:c5:51:d7:c2:fb:
                    b7:7f:ac:b3:ee:8e:e6:17:ad:37:95:7f:75:ff:91:
                    b0:2a:7a:d3:b4:ea:8e:f5:24:20:58:d7:4a:9d:c7:
                    be:c9:28:5c:33:d2:48:70:cf:15:c5:58:20:38:69:
                    0c:79:fc:0f:63:e4:02:c9:ec:5c:24:c4:a1:b7:78:
                    18:84:ff:02:94:c9:e3:47:e4:9c:f0:ac:64:9a:2e:
                    f1:ab:d7:a0:ce:15:c7:b9:cc:36:76:6e:6c:e1:0c:
                    c9:e7:52:eb:06:8c:e8:c8:91:75:36:42:92:34:6f:
                    68:42:29:f0:a8:1d:89:f3:a0:ff:3c:1e:a2:29:14:
                    7d:89:10:78:16:68:40:35:95:c4:48:b8:f3:b1:8a:
                    01:56:5c:7a:86:d6:15:a4:2d:cc:f0:5c:f8:be:92:
                    b9:05:43:03:f3:31:c2:0f:b7:e6:a7:3f:ad:94:ce:
                    56:8e:36:9c:0e:cc:be:b3:31:42:62:36:ca:c7:94:
                    50:06:f7:df:ca:cc:64:93:9c:35:e7:e9:c9:35:19:
                    af:eb:0e:3b:21:a9:48:ad:a3:fa:64:62:5f:b9:00:
                    f3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:F2:F8:41:83:D0:96:39:8A:51:FA:6F:04:4F:57:FC:C8:A4:5B:B7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/0/2FF2F84183D096398A51FA6F044F57FCC8A45BB7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.152.0/22
                  177.44.144.0/20
                  191.6.176.0/20
                IPv6:
                  2804:13dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262428

    Signature Algorithm: sha256WithRSAEncryption
         90:37:17:ab:24:64:cd:07:73:17:d9:11:cf:42:b5:66:de:6d:
         cd:60:8e:c8:73:74:f6:10:d0:13:84:31:38:7b:a6:da:3a:5a:
         bf:3d:f6:59:f2:51:c0:a2:5f:be:f9:21:1c:03:b8:d4:9d:bd:
         c4:78:69:bc:ce:87:dd:8a:f6:0e:b7:71:c7:dc:a8:fb:9d:81:
         59:a3:8c:42:a0:57:6f:3e:6b:11:9a:9d:52:0e:05:91:43:5f:
         61:58:2d:99:00:f1:b8:ba:9d:05:25:c6:d3:28:90:23:b1:71:
         8a:85:04:15:16:20:82:a8:fe:5a:7d:e1:cc:c2:42:6f:64:78:
         77:6b:d1:71:f0:ef:fd:bf:72:e3:53:80:28:f6:7b:56:f1:fa:
         21:8e:58:b8:14:53:43:25:6e:fa:98:e4:b6:f1:66:80:c4:d0:
         0e:b3:e2:0d:9e:0e:45:20:8d:d5:fd:2a:74:81:33:f3:39:f2:
         7f:8b:7d:9a:94:fd:ca:01:41:43:ef:07:b4:09:84:52:c5:2c:
         1e:8e:99:aa:8a:11:51:72:0b:33:43:93:51:02:c0:66:86:17:
         5f:a8:f6:62:e2:c7:e4:42:0e:24:92:29:21:d5:44:eb:62:ca:
         4c:63:54:b7:d0:b5:76:00:48:ee:4b:a1:54:05:9b:4a:05:69:
         fd:26:c2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org