Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CB2BBC7B704952D83ABE1F000792E1D77CD9BA2F.cer
File:                     CB2BBC7B704952D83ABE1F000792E1D77CD9BA2F.cer (raw, json)
Hash identifier:          OcJEP3LDa2IExIx9JwDIbMkK5gNRH9Zk1hbCiAXDWRo=
Subject key identifier:   CB:2B:BC:7B:70:49:52:D8:3A:BE:1F:00:07:92:E1:D7:7C:D9:BA:2F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       44224E5BAD118092E5DBDE93FAEB2BBF8CC6678C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5MunSkbtD1tKo57W3ryJKjvSbJGpi36cHJ4nL25ebhz9/0/CB2BBC7B704952D83ABE1F000792E1D77CD9BA2F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5MunSkbtD1tKo57W3ryJKjvSbJGpi36cHJ4nL25ebhz9/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Feb 2022 12:52:53 +0000
Certificate not after:    Thu 02 Feb 2023 12:57:53 +0000
Subordinate resources:    AS: 272574
                          IP: 2804:855c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:22:4e:5b:ad:11:80:92:e5:db:de:93:fa:eb:2b:bf:8c:c6:67:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  3 12:52:53 2022 GMT
            Not After : Feb  2 12:57:53 2023 GMT
        Subject: CN=CB2BBC7B704952D83ABE1F000792E1D77CD9BA2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:47:f3:e3:a0:18:02:9c:8b:95:c1:5e:83:18:
                    3a:e0:32:01:7e:d9:cf:78:e9:14:71:ea:0d:94:52:
                    f6:58:87:7e:f2:4f:70:7b:c4:af:0a:c7:83:81:85:
                    c6:dd:39:3f:ce:8c:65:99:b0:a1:09:aa:f6:67:95:
                    44:24:e4:d0:64:12:2d:7c:0d:74:ec:6f:cf:b7:65:
                    5d:51:1f:1c:ba:57:d9:33:ec:f0:68:c5:0d:9f:23:
                    a5:ce:4a:fa:11:98:45:1f:66:bc:e5:ad:c8:ca:26:
                    da:ec:7f:f3:ce:c9:dd:73:d3:4b:ed:16:b3:e9:5f:
                    30:15:10:77:8d:60:ed:67:25:64:e2:b6:50:63:09:
                    75:18:8e:da:20:68:f9:a3:98:31:e2:b1:61:c1:73:
                    3b:4b:77:74:e0:30:b6:34:a3:14:17:af:04:60:4f:
                    75:89:e8:55:4f:a3:dc:82:d6:52:75:37:02:59:ee:
                    e7:3a:f6:91:29:07:3a:36:c6:fe:63:cc:51:9d:4b:
                    1b:ab:64:39:c3:2e:c7:28:61:21:ca:7c:06:67:06:
                    4a:2f:fe:9d:e8:26:36:9f:e1:a3:fd:d6:7f:57:67:
                    ec:5d:79:68:ef:27:28:41:90:7a:b1:d8:45:56:37:
                    5e:99:69:a3:60:52:38:9f:9e:ea:35:46:27:9e:bd:
                    e0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:2B:BC:7B:70:49:52:D8:3A:BE:1F:00:07:92:E1:D7:7C:D9:BA:2F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5MunSkbtD1tKo57W3ryJKjvSbJGpi36cHJ4nL25ebhz9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5MunSkbtD1tKo57W3ryJKjvSbJGpi36cHJ4nL25ebhz9/0/CB2BBC7B704952D83ABE1F000792E1D77CD9BA2F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:855c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272574

    Signature Algorithm: sha256WithRSAEncryption
         14:d7:13:f7:32:8a:a2:fa:05:8d:68:43:df:cb:45:77:f7:d9:
         e3:dd:d6:4c:79:b0:85:31:df:02:18:18:28:e4:ab:00:ba:fa:
         ac:c2:70:ea:6d:55:c6:dd:0f:76:4b:ff:1b:eb:d1:e9:12:c1:
         0e:3c:4d:2d:5b:11:0b:f4:ae:20:92:f3:42:4a:ee:64:96:84:
         70:73:09:92:93:1d:bd:b3:52:4d:6c:eb:06:0d:a6:d5:b6:02:
         0c:b8:63:ad:8a:7f:0f:d7:7b:c3:26:b0:e8:69:fe:db:69:ce:
         1c:7a:ea:30:8d:57:ef:40:5e:ba:96:59:9e:2a:5d:ed:3e:3f:
         f0:06:7a:a2:22:a3:91:08:6a:b0:a3:5a:02:17:bb:a3:25:86:
         1b:8a:c5:f8:22:a2:db:c7:e9:99:93:28:e4:a4:48:df:0b:ac:
         5b:16:5f:86:bd:92:b7:60:78:73:da:50:60:fd:98:0a:69:70:
         2b:82:4e:f2:69:1e:f4:2b:b4:a9:92:6b:41:26:08:09:60:bc:
         94:f9:67:69:7f:c0:5c:f4:34:89:fa:52:c0:b8:ee:5c:17:56:
         9d:87:ac:90:10:fe:8c:c1:92:23:50:dc:d1:60:31:d5:73:d4:
         f0:c7:3c:b2:fe:c8:4c:65:cb:93:d9:0c:14:08:c4:ae:69:42:
         aa:1f:df:32
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgIURCJOW60RgJLl296T+usrv4zGZ4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjAyMDMxMjUyNTNaFw0yMzAyMDIxMjU3NTNaMDMxMTAvBgNV
BAMTKENCMkJCQzdCNzA0OTUyRDgzQUJFMUYwMDA3OTJFMUQ3N0NEOUJBMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTR/PjoBgCnIuVwV6DGDrgMgF+
2c946RRx6g2UUvZYh37yT3B7xK8Kx4OBhcbdOT/OjGWZsKEJqvZnlUQk5NBkEi18
DXTsb8+3ZV1RHxy6V9kz7PBoxQ2fI6XOSvoRmEUfZrzlrcjKJtrsf/POyd1z00vt
FrPpXzAVEHeNYO1nJWTitlBjCXUYjtogaPmjmDHisWHBcztLd3TgMLY0oxQXrwRg
T3WJ6FVPo9yC1lJ1NwJZ7uc69pEpBzo2xv5jzFGdSxurZDnDLscoYSHKfAZnBkov
/p3oJjaf4aP91n9XZ+xdeWjvJyhBkHqx2EVWN16ZaaNgUjifnuo1RieeveBJAgMB
AAGjggMMMIIDCDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTLK7x7cElS2Dq+
HwAHkuHXfNm6LzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81TXVuU2tidEQxdEtvNTdXM3J5SktqdlNiSkdwaTM2Y0hK
NG5MMjVlYmh6OS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81TXVuU2tidEQxdEtvNTdXM3J5SktqdlNiSkdwaTM2Y0hK
NG5MMjVlYmh6OS8wL0NCMkJCQzdCNzA0OTUyRDgzQUJFMUYwMDA3OTJFMUQ3N0NE
OUJBMkYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEhVwwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBCi+MA0GCSqGSIb3DQEBCwUAA4IBAQAU1xP3Moqi+gWN
aEPfy0V399nj3dZMebCFMd8CGBgo5KsAuvqswnDqbVXG3Q92S/8b69HpEsEOPE0t
WxEL9K4gkvNCSu5kloRwcwmSkx29s1JNbOsGDabVtgIMuGOtin8P13vDJrDoaf7b
ac4ceuowjVfvQF66llmeKl3tPj/wBnqiIqORCGqwo1oCF7ujJYYbisX4IqLbx+mZ
kyjkpEjfC6xbFl+GvZK3YHhz2lBg/ZgKaXArgk7yaR70K7SpkmtBJggJYLyU+Wdp
f8Bc9DSJ+lLAuO5cF1adh6yQEP6MwZIjUNzRYDHVc9Twxzyy/shMZcuT2QwUCMSu
aUKqH98y
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org