Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2FF76076754B4C7F56163A6D57EC01836F824336.cer
File:                     2FF76076754B4C7F56163A6D57EC01836F824336.cer (raw, json)
Hash identifier:          mFajTvQJ6Ws7gqo6Pw1IE7sqnT08CGwPJy7TZdS/HAE=
Subject key identifier:   2F:F7:60:76:75:4B:4C:7F:56:16:3A:6D:57:EC:01:83:6F:82:43:36
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3B009F451552C8B4387EEEC40113869D6643B3CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/2FF76076754B4C7F56163A6D57EC01836F824336.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Jan 2024 23:35:09 +0000
Certificate not after:    Tue 28 Jan 2025 23:40:09 +0000
Subordinate resources:    AS: 271550
                          IP: 181.232.240.0/22
                          IP: 2804:7d44::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:00:9f:45:15:52:c8:b4:38:7e:ee:c4:01:13:86:9d:66:43:b3:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 30 23:35:09 2024 GMT
            Not After : Jan 28 23:40:09 2025 GMT
        Subject: CN=2FF76076754B4C7F56163A6D57EC01836F824336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b3:00:e2:39:2c:ae:6c:a1:49:0c:9e:69:81:
                    15:a2:d8:d1:9f:6b:1f:10:42:6e:ab:cf:67:f9:04:
                    7b:1f:02:75:31:da:c0:7a:19:85:c1:b8:ee:3e:37:
                    4e:03:f9:29:63:e6:0e:cd:4a:5c:41:61:fa:e6:68:
                    fd:6d:54:eb:57:45:ac:ab:cb:be:5c:42:50:20:ed:
                    05:36:bc:a9:a8:0a:18:55:57:89:89:87:27:61:dd:
                    b8:22:a3:72:2f:fe:9b:1d:28:9f:c1:ba:74:89:f1:
                    03:81:b5:0f:00:a9:b3:97:40:91:ae:4b:0b:06:79:
                    59:1a:c2:98:8a:f4:1f:2f:ca:7c:14:51:25:ca:0a:
                    53:59:2a:15:db:82:13:b4:ab:5f:a9:42:17:eb:62:
                    78:dd:9f:e1:a8:34:51:7a:29:14:ff:ef:9d:e1:59:
                    3d:f0:9e:01:0b:5b:24:ec:67:8a:5d:e2:85:b6:14:
                    6c:dd:24:60:6f:ae:ac:a9:f8:32:4d:6a:23:24:4a:
                    58:df:4c:5d:e8:2c:08:1b:21:bb:3e:f3:f5:a8:89:
                    d9:3a:d6:18:82:5a:55:6e:94:33:75:7a:01:09:ec:
                    fb:be:cd:66:04:4e:bd:a0:b8:02:cf:b9:bc:a4:ad:
                    9e:95:ac:d9:5c:91:5f:5a:5b:a5:53:9a:5a:7c:ea:
                    5e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:F7:60:76:75:4B:4C:7F:56:16:3A:6D:57:EC:01:83:6F:82:43:36
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/2FF76076754B4C7F56163A6D57EC01836F824336.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.240.0/22
                IPv6:
                  2804:7d44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271550

    Signature Algorithm: sha256WithRSAEncryption
         2c:35:66:ad:91:10:26:6e:ac:ac:7b:50:5f:01:fd:7c:ec:27:
         0d:e2:fa:65:0e:62:07:ce:a5:1d:66:34:ca:f6:4a:92:ec:67:
         ee:3a:04:21:73:01:0f:a1:09:22:cb:78:ea:5c:d8:14:7e:36:
         0f:0a:5d:e9:98:b1:bd:4d:d4:a4:bf:0f:0f:56:32:ee:91:bf:
         7b:ac:59:b4:2f:cc:cc:e8:6b:48:e6:16:e7:a5:b7:96:20:a0:
         d5:64:42:62:26:72:7b:e9:f9:b3:79:5a:87:7e:31:94:09:19:
         f1:14:da:8d:39:a4:e1:5d:d6:fb:47:d9:3a:eb:f1:7d:cc:22:
         2d:e0:c8:00:4e:32:36:0d:ee:6b:80:69:2f:b1:b2:56:c7:b0:
         48:73:f0:0a:c9:49:ea:e2:ab:d9:87:30:d0:cd:42:85:ea:70:
         00:57:42:7e:bc:d0:30:00:56:be:8d:84:43:cd:ee:9d:ed:93:
         da:5c:70:9a:59:a0:17:14:ed:38:3d:5b:dd:94:19:02:a0:a0:
         09:a3:5c:da:d5:ed:b8:14:cf:a9:ac:21:f2:e5:a0:88:8d:98:
         f2:77:b4:62:65:b0:61:9b:1e:a2:25:c8:f5:de:3d:3b:b1:2a:
         fd:74:08:ca:a4:fe:d7:34:a9:03:84:5a:f6:0c:29:4d:9f:d5:
         74:06:24:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org