Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C2B39AB73EA83A81BA76D827057DE505232F8600.cer
File:                     C2B39AB73EA83A81BA76D827057DE505232F8600.cer (raw, json)
Hash identifier:          PAvhimOMc/NimZCHXd0PpX1NMDCkquTMaauOf8upfds=
Subject key identifier:   C2:B3:9A:B7:3E:A8:3A:81:BA:76:D8:27:05:7D:E5:05:23:2F:86:00
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       08B6CC7C2DABEC1782DB540805EBEAB24EDB7ACB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/0/C2B39AB73EA83A81BA76D827057DE505232F8600.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 01 Aug 2023 23:19:33 +0000
Certificate not after:    Tue 30 Jul 2024 23:24:33 +0000
Subordinate resources:    AS: 266277
                          IP: 170.78.100.0/22
                          IP: 2804:3540::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b6:cc:7c:2d:ab:ec:17:82:db:54:08:05:eb:ea:b2:4e:db:7a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  1 23:19:33 2023 GMT
            Not After : Jul 30 23:24:33 2024 GMT
        Subject: CN=C2B39AB73EA83A81BA76D827057DE505232F8600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a4:80:fa:d8:f3:6b:16:18:32:3a:f6:8d:43:
                    e0:ef:9e:49:6b:9c:8a:eb:bf:d2:03:6f:fc:91:f9:
                    1d:e0:6d:e2:03:f9:fa:45:5d:ac:3a:fb:fc:56:fb:
                    ea:20:cf:14:1f:55:b1:d4:95:76:87:26:74:83:ea:
                    df:59:f0:be:04:a1:8f:28:fc:11:41:35:f1:78:c6:
                    43:b4:10:25:3f:86:95:02:6c:17:1c:0c:7c:c7:98:
                    64:89:1d:16:0d:e7:9b:91:e6:84:11:99:d5:60:f7:
                    2d:d9:ea:e3:5b:e7:b6:78:ec:8e:14:a6:a3:ed:58:
                    34:97:2f:97:71:b2:f7:f7:2d:f6:e8:8a:4b:0f:14:
                    1c:ff:9c:6a:65:68:a8:bd:4f:c7:03:31:e4:b4:cd:
                    40:e5:6b:37:ee:30:6b:76:3a:5a:ee:d5:75:d9:05:
                    b3:b4:6d:d1:9f:cc:99:87:b2:f7:29:b1:f4:40:eb:
                    d4:d9:36:2e:97:d2:10:fa:2a:7b:87:7c:60:ef:7b:
                    fb:2a:ca:a2:ba:42:8b:46:55:2c:72:7e:ed:74:16:
                    98:4d:da:c1:35:22:88:bc:7c:f4:75:f7:a9:7f:46:
                    65:34:43:62:9b:e9:4a:74:83:4b:b3:39:f5:32:ef:
                    a8:b2:43:d2:c3:d5:a6:24:f3:7d:5b:74:77:84:88:
                    af:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:B3:9A:B7:3E:A8:3A:81:BA:76:D8:27:05:7D:E5:05:23:2F:86:00
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/0/C2B39AB73EA83A81BA76D827057DE505232F8600.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.100.0/22
                IPv6:
                  2804:3540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266277

    Signature Algorithm: sha256WithRSAEncryption
         4c:8c:f1:02:f8:bb:12:69:1d:70:14:84:3e:b8:f5:4e:37:ae:
         e7:41:65:2f:bd:07:0e:11:49:73:9c:4c:85:fe:46:f5:52:ca:
         8a:fa:47:75:cb:af:d6:b9:5e:dd:e6:b1:36:90:5f:24:62:b7:
         3c:95:a5:09:21:d2:84:4f:0f:4a:20:04:98:69:c4:23:c9:83:
         b9:bf:fa:96:c6:8b:a7:bd:e8:9d:f3:f4:a4:e6:4f:c1:59:65:
         06:b4:3a:9f:5a:e0:09:b0:39:b7:74:6a:03:83:c9:21:96:1f:
         04:6e:10:07:d3:33:9b:bc:1a:7d:56:0e:33:3d:f3:94:de:5b:
         53:f0:77:3c:8b:95:14:d7:b2:8f:75:86:e5:f6:c5:1c:1d:0e:
         3f:6f:6d:fe:6c:0e:02:7e:e7:3c:d9:7b:11:04:27:60:23:04:
         4c:45:94:ee:3a:99:16:70:09:42:b2:85:d2:65:49:d3:7e:b1:
         a2:8c:d1:36:76:50:cc:5a:30:ef:22:26:40:57:b1:a0:ef:02:
         84:a6:6f:28:57:a9:ab:ea:3c:91:98:76:0e:bf:8a:05:4b:30:
         a4:1b:8a:2b:a2:9c:db:49:19:59:8e:d3:00:dd:a1:d0:1d:db:
         27:e8:34:e1:1e:cd:2f:6a:9a:fc:5b:84:67:41:59:5e:8a:60:
         cc:70:0b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org