Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2FE3B3CC4B39550DB1B02D4AF1ACF5461BC71ADD.cer
File:                     2FE3B3CC4B39550DB1B02D4AF1ACF5461BC71ADD.cer (raw, json)
Hash identifier:          ctMd4x2c31R9ASx6+/dz+Yz9ruv87pVD7F1ZXO5krPg=
Subject key identifier:   2F:E3:B3:CC:4B:39:55:0D:B1:B0:2D:4A:F1:AC:F5:46:1B:C7:1A:DD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       431C9A7F3DE5CC7E3A67B3D65627C8E6A445DF2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/2FE3B3CC4B39550DB1B02D4AF1ACF5461BC71ADD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 09:20:18 +0000
Certificate not after:    Tue 21 May 2024 09:25:18 +0000
Subordinate resources:    AS: 268485
                          IP: 45.162.8.0/22
                          IP: 2804:51ec::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:1c:9a:7f:3d:e5:cc:7e:3a:67:b3:d6:56:27:c8:e6:a4:45:df:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 09:20:18 2023 GMT
            Not After : May 21 09:25:18 2024 GMT
        Subject: CN=2FE3B3CC4B39550DB1B02D4AF1ACF5461BC71ADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0e:0c:2e:e9:11:7c:0e:0f:b5:52:55:df:1e:
                    f7:27:5b:06:8c:10:f4:bb:05:27:da:e0:81:c3:84:
                    8e:02:3b:ef:b9:ba:cd:68:a1:dc:8f:5d:66:56:35:
                    cf:95:d7:7b:a7:86:f5:64:4a:29:63:a6:47:ce:06:
                    59:e1:b5:dc:d2:29:b9:7e:f7:48:ce:24:d8:03:fe:
                    ba:7c:be:22:44:e8:f6:7f:54:61:dd:3d:57:d4:39:
                    ac:0a:87:73:9d:41:79:a3:f5:15:a8:86:be:c2:60:
                    d5:f2:77:db:a0:8a:56:ae:58:16:d9:d2:19:b2:7a:
                    d4:64:ba:3d:c9:d0:52:0d:c1:ab:86:da:89:a5:4f:
                    62:ae:9b:55:6d:6b:5d:7e:1d:98:0c:37:3b:06:22:
                    29:fe:f4:19:da:1b:dd:c8:52:c1:8f:43:7c:04:60:
                    6e:db:95:c5:8d:1e:2e:20:b7:ff:15:0f:97:07:0c:
                    f2:b7:59:88:c4:da:07:d3:bb:e9:72:fc:9e:aa:a3:
                    cf:d3:2a:ba:2a:f7:94:4c:83:c3:a9:40:d7:87:29:
                    4a:69:a1:c9:7a:5e:d0:b1:dd:15:ae:15:f9:1a:38:
                    f3:b4:07:a0:c3:9e:f0:16:b1:85:68:29:1e:af:ad:
                    58:3d:98:06:3f:bb:c5:5a:dd:40:1d:42:fa:5a:11:
                    49:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:E3:B3:CC:4B:39:55:0D:B1:B0:2D:4A:F1:AC:F5:46:1B:C7:1A:DD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/2FE3B3CC4B39550DB1B02D4AF1ACF5461BC71ADD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.8.0/22
                IPv6:
                  2804:51ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268485

    Signature Algorithm: sha256WithRSAEncryption
         7e:5a:97:c3:53:53:2d:f7:12:d7:69:10:0b:53:63:01:16:fc:
         30:fa:47:3f:cf:18:d1:25:9b:eb:57:7d:31:97:92:9d:e3:f1:
         78:b2:ca:da:bf:7f:98:85:1d:a6:f1:35:58:3d:57:12:e3:97:
         c2:39:b2:8c:28:de:43:29:85:86:57:f1:a3:b1:f7:4e:54:e2:
         e2:dd:77:e2:10:c2:01:81:89:36:87:73:8b:98:04:17:2c:05:
         3a:c0:ee:6a:a8:8d:11:7a:98:fe:d7:f5:ce:13:62:d2:39:e0:
         b8:bd:8d:15:98:b2:90:ca:bf:63:9c:2a:ec:89:9a:a7:3c:fe:
         95:7e:0a:7f:59:62:73:8b:b1:50:45:53:24:ab:0c:7e:1f:95:
         d5:1b:59:5e:47:c9:e4:d1:37:2f:36:b2:ac:1c:64:1f:50:70:
         71:f2:cb:4c:c5:79:0e:85:b5:35:24:4c:dd:44:d2:56:f1:1d:
         08:c1:c8:fc:50:07:9a:fc:d2:4c:77:f3:1c:a5:0e:5f:b6:5b:
         42:e5:ab:56:36:aa:27:62:9b:84:8b:a8:74:6c:cb:9b:55:ca:
         b7:10:0b:00:c1:9d:69:b3:09:c5:59:17:bb:70:86:6d:c5:49:
         03:f6:27:c7:74:2f:7e:17:eb:87:00:03:22:f6:fc:ab:bb:d1:
         e9:95:05:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 16:49:04 2025 by rpki-client