Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2FF599B83A0FDC1744A3B48099E107CF659AB46E.cer
File:                     2FF599B83A0FDC1744A3B48099E107CF659AB46E.cer (raw, json)
Hash identifier:          EBkBr2FapkhZs4qg5sQARS9DDzJ9xWbNp+Et/hMfPgs=
Subject key identifier:   2F:F5:99:B8:3A:0F:DC:17:44:A3:B4:80:99:E1:07:CF:65:9A:B4:6E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       70A0C77725F31A78DDBC6E20A17D8A20DEB83A9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/2FF599B83A0FDC1744A3B48099E107CF659AB46E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Feb 2024 12:45:11 +0000
Certificate not after:    Tue 04 Feb 2025 12:50:11 +0000
Subordinate resources:    AS: 52543
                          IP: 179.107.64.0/20
                          IP: 2804:e14::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a0:c7:77:25:f3:1a:78:dd:bc:6e:20:a1:7d:8a:20:de:b8:3a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  6 12:45:11 2024 GMT
            Not After : Feb  4 12:50:11 2025 GMT
        Subject: CN=2FF599B83A0FDC1744A3B48099E107CF659AB46E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b9:9e:6e:77:1a:e1:e0:3d:d0:ef:8b:7c:35:
                    b1:dd:59:84:15:8b:c9:47:fb:bd:70:9d:34:54:04:
                    9c:f9:78:e2:2b:50:b0:4b:1c:38:a7:2d:14:55:89:
                    f4:7d:e5:e5:61:2e:3a:c5:1d:76:29:1e:a3:68:b6:
                    15:5f:4d:10:92:84:b4:58:97:56:18:63:41:08:e9:
                    d7:2b:a8:3b:78:22:28:90:d1:f1:d8:d0:9f:2d:cc:
                    d1:17:26:06:46:3e:43:8d:5e:42:1a:6f:32:38:e5:
                    37:1b:00:59:bd:9b:ff:df:4a:8d:66:14:15:2b:96:
                    b0:c4:f0:79:10:47:81:61:04:58:56:6c:cc:46:e6:
                    d7:8c:95:b7:4c:34:67:76:99:f3:55:a6:70:01:d4:
                    fc:fb:26:40:19:23:53:5c:e9:5a:39:14:8a:bd:30:
                    83:54:16:45:8f:be:ad:15:43:d0:9d:2d:db:bd:cc:
                    9b:ab:34:0b:3d:a5:41:53:f3:6a:a0:1a:52:7b:5c:
                    2b:d3:38:7a:3e:ef:76:3a:c1:22:c4:a0:a4:43:06:
                    7b:5a:f9:79:a8:4b:8e:3d:55:b0:46:3a:17:09:0d:
                    ef:e4:34:d7:29:98:73:ad:f6:35:d1:29:32:71:b7:
                    bf:1f:3b:39:da:f8:0b:6a:ac:4b:f9:05:c8:17:cf:
                    dc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:F5:99:B8:3A:0F:DC:17:44:A3:B4:80:99:E1:07:CF:65:9A:B4:6E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/2FF599B83A0FDC1744A3B48099E107CF659AB46E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.64.0/20
                IPv6:
                  2804:e14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52543

    Signature Algorithm: sha256WithRSAEncryption
         1f:46:a7:aa:8a:35:cf:a4:f8:0c:9f:d9:81:6b:67:01:63:18:
         46:8a:42:b8:ff:e8:e4:f1:6f:b7:17:61:62:a2:37:61:8a:de:
         48:eb:06:45:74:d9:8c:ee:29:2b:12:f8:1b:5c:3e:13:35:6f:
         4a:ce:bf:50:0f:eb:25:88:77:3f:50:1f:69:f1:3d:07:dd:59:
         39:76:f0:21:a2:86:ef:fa:d6:06:47:2d:f5:22:3a:90:6a:eb:
         1a:35:11:79:3a:9d:20:40:95:34:64:59:5c:e6:4b:08:4c:87:
         39:c2:cc:73:aa:43:83:3e:6c:74:6e:bc:7e:75:e8:8e:47:db:
         5a:fa:06:d6:7d:8a:d7:3c:26:b4:0e:b9:0d:ec:8d:ab:c6:22:
         a4:ad:3b:f6:13:ec:53:c7:44:ec:95:8c:88:bf:77:7b:cc:6b:
         2e:5a:9f:60:a8:38:be:3e:7d:4c:4f:a9:12:8c:d8:10:70:5e:
         50:c5:70:43:aa:38:f2:8e:3b:b2:29:57:a0:e3:89:e7:80:98:
         2b:34:dc:7b:f5:6b:91:d0:8d:df:c2:c1:16:3e:d1:5c:59:ae:
         89:77:d6:51:41:41:bf:d1:1e:6f:35:f1:37:fc:ec:a0:fe:7b:
         eb:37:b3:fc:25:8c:93:77:67:fb:c2:ef:b9:3e:68:98:13:00:
         22:5e:98:03
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUcKDHdyXzGnjdvG4goX2KIN64Op0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMDYxMjQ1MTFaFw0yNTAyMDQxMjUwMTFaMDMxMTAvBgNV
BAMTKDJGRjU5OUI4M0EwRkRDMTc0NEEzQjQ4MDk5RTEwN0NGNjU5QUI0NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjuZ5udxrh4D3Q74t8NbHdWYQV
i8lH+71wnTRUBJz5eOIrULBLHDinLRRVifR95eVhLjrFHXYpHqNothVfTRCShLRY
l1YYY0EI6dcrqDt4IiiQ0fHY0J8tzNEXJgZGPkONXkIabzI45TcbAFm9m//fSo1m
FBUrlrDE8HkQR4FhBFhWbMxG5teMlbdMNGd2mfNVpnAB1Pz7JkAZI1Nc6Vo5FIq9
MINUFkWPvq0VQ9CdLdu9zJurNAs9pUFT82qgGlJ7XCvTOHo+73Y6wSLEoKRDBnta
+XmoS449VbBGOhcJDe/kNNcpmHOt9jXRKTJxt78fOzna+AtqrEv5BcgXz9wjAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQv9Zm4Og/cF0Sj
tICZ4QfPZZq0bjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BNkh0bVFpMjlTcVFrOHZ0N1I2aEo5NzdUUFhBQ1duNEJ1
WEVjYWNEanBxOS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BNkh0bVFpMjlTcVFrOHZ0N1I2aEo5NzdUUFhBQ1duNEJ1
WEVjYWNEanBxOS8wLzJGRjU5OUI4M0EwRkRDMTc0NEEzQjQ4MDk5RTEwN0NGNjU5
QUI0NkUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBLNrQDANBAIAAjAHAwUA
KAQOFDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzT8wDQYJKoZIhvcNAQELBQAD
ggEBAB9Gp6qKNc+k+Ayf2YFrZwFjGEaKQrj/6OTxb7cXYWKiN2GK3kjrBkV02Yzu
KSsS+BtcPhM1b0rOv1AP6yWIdz9QH2nxPQfdWTl28CGihu/61gZHLfUiOpBq6xo1
EXk6nSBAlTRkWVzmSwhMhznCzHOqQ4M+bHRuvH516I5H21r6BtZ9itc8JrQOuQ3s
javGIqStO/YT7FPHROyVjIi/d3vMay5an2CoOL4+fUxPqRKM2BBwXlDFcEOqOPKO
O7IpV6DjieeAmCs03Hv1a5HQjd/CwRY+0VxZrol31lFBQb/RHm818Tf87KD+e+s3
s/wljJN3Z/vC77k+aJgTACJemAM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org