Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer
File:                     CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer (raw, json)
Hash identifier:          kerZWF3EhGnFzZJn37+P53+csZo835u9kK+DgSDPc/E=
Subject key identifier:   CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7C3E4CFC9B827E9D835549E3BE5720674CD02DB1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.mft
caRepository:             rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Sep 2023 20:32:59 +0000
Certificate not after:    Fri 13 Sep 2024 20:37:59 +0000
Subordinate resources:    AS: 61751
                          IP: 131.72.252.0/22
                          IP: 168.228.40.0/22
                          IP: 2804:1bcc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3e:4c:fc:9b:82:7e:9d:83:55:49:e3:be:57:20:67:4c:d0:2d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 15 20:32:59 2023 GMT
            Not After : Sep 13 20:37:59 2024 GMT
        Subject: CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b1:e9:2b:ac:c8:6c:94:55:1b:2b:30:ff:c5:
                    6f:60:6c:48:69:99:a3:3e:b4:bc:6d:22:25:99:5c:
                    72:c4:9e:9d:b3:41:fb:4b:99:e1:0f:bc:43:78:82:
                    ad:9a:c8:08:05:5b:92:7e:c8:4f:8d:ee:8f:1b:ed:
                    74:43:06:83:24:2b:34:17:6d:74:72:35:c9:8f:5d:
                    49:74:46:4f:ab:b0:f8:52:98:a2:c9:54:72:e7:11:
                    29:26:5c:26:3a:03:cf:ea:f7:56:37:20:56:c9:f6:
                    1a:83:c3:69:64:e7:0f:75:8f:34:c0:73:cd:ae:8f:
                    0a:eb:58:ea:27:09:4a:96:36:c3:5b:e6:fc:7c:92:
                    0b:74:5d:4f:d6:8f:29:97:97:ce:9c:89:49:8e:bc:
                    d4:97:6b:07:f8:28:ff:23:51:e3:64:6b:4c:81:bf:
                    d1:47:4c:33:4e:9b:6f:49:e1:80:c6:b8:b0:7d:26:
                    56:37:d2:64:4a:1c:c9:ce:0c:f2:04:b8:27:99:20:
                    48:f6:e8:6e:65:c4:bf:af:ab:09:75:ce:85:6f:30:
                    58:a9:a7:55:ac:4a:cc:4d:f2:2a:1b:3b:a2:90:b7:
                    da:4c:b0:eb:a6:74:24:f3:8e:f6:51:e1:ba:e3:d6:
                    44:8d:fd:90:cc:81:fc:e3:a0:ce:8b:f1:52:b1:ad:
                    c1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.252.0/22
                  168.228.40.0/22
                IPv6:
                  2804:1bcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61751

    Signature Algorithm: sha256WithRSAEncryption
         67:e0:79:a4:36:e7:0b:d8:ae:c5:aa:0c:22:19:c5:e3:e9:61:
         e1:ba:ef:02:c1:c0:18:3b:25:5d:5a:74:ca:e0:dc:d0:48:fd:
         14:66:b4:5d:36:d0:cd:de:ab:a1:f9:f7:61:72:6c:37:e7:31:
         34:c0:f9:ee:16:d3:38:e7:68:b5:88:23:71:fd:2a:fa:f3:eb:
         b2:5b:25:ad:97:4f:32:82:74:2e:29:4b:e7:c1:46:78:f3:18:
         ea:52:b9:05:60:eb:ac:eb:c3:2d:d0:22:1c:4c:9d:13:0b:a3:
         e6:98:72:79:1b:b4:26:da:52:93:7d:1e:73:ce:8d:a4:10:b2:
         67:f6:fe:4d:4b:d6:07:2b:47:62:93:de:e7:9e:4b:6d:74:07:
         05:81:c4:c7:bc:20:64:b0:df:28:cb:1e:b3:30:72:48:ea:56:
         8d:35:01:c8:c9:ee:dd:78:b8:c6:4a:54:2c:e8:ff:bf:b9:6f:
         1b:89:fd:0d:f6:c3:de:cf:31:c3:0b:89:59:01:07:05:55:c6:
         dc:47:ca:11:4f:cd:b5:91:d1:f5:36:fb:27:c5:57:7a:b3:4d:
         fe:ca:9c:c4:6b:b6:3d:7f:ce:3b:f4:ca:6d:d4:67:b4:56:4a:
         51:a9:d4:ee:1e:3f:5c:84:2a:a3:0a:74:4f:43:5f:f4:d2:b9:
         63:bd:b8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org