Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/29072BA890B785A2AF87059E92B220B8E949DDB0.cer
File:                     29072BA890B785A2AF87059E92B220B8E949DDB0.cer (raw, json)
Hash identifier:          krPgtd6s9KnBzXVTWqJn9O8w9cpo2JJfmfGxnJZ7X6w=
Subject key identifier:   29:07:2B:A8:90:B7:85:A2:AF:87:05:9E:92:B2:20:B8:E9:49:DD:B0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6C2BE533A2004EB2F73449BFAB41D63943130245
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/29072BA890B785A2AF87059E92B220B8E949DDB0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 May 2023 19:31:38 +0000
Certificate not after:    Wed 08 May 2024 19:36:38 +0000
Subordinate resources:    AS: 268135
                          IP: 45.170.4.0/22
                          IP: 2804:588c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2b:e5:33:a2:00:4e:b2:f7:34:49:bf:ab:41:d6:39:43:13:02:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 10 19:31:38 2023 GMT
            Not After : May  8 19:36:38 2024 GMT
        Subject: CN=29072BA890B785A2AF87059E92B220B8E949DDB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1a:7c:6c:84:02:f0:af:63:51:b1:f7:c9:28:
                    2a:ca:c9:cb:95:a2:c0:6e:da:3f:23:c3:e9:53:da:
                    8e:3b:71:ca:10:01:44:0f:f0:5b:be:6e:15:ea:ff:
                    f4:58:e7:a9:b1:4b:12:bf:e8:67:5a:e1:44:1d:11:
                    db:db:47:e6:f4:c3:d5:e4:31:2c:95:c0:ef:f2:40:
                    db:5e:f2:f0:ea:dd:e0:d1:f7:57:1e:e0:bf:74:0d:
                    a7:d1:f0:0b:eb:62:c9:be:2d:6d:c0:ae:00:c2:24:
                    eb:0f:40:b4:84:58:85:12:a3:48:bf:b1:a3:dc:90:
                    bf:45:1d:05:53:64:be:36:a3:e5:e1:ff:41:db:1e:
                    00:3a:bf:e4:78:12:b6:67:b6:42:0b:12:77:99:a9:
                    48:0a:c9:77:15:78:b8:dc:85:93:3a:fc:df:3e:18:
                    b8:f9:ea:3f:b0:fb:1a:57:81:d3:8a:d2:eb:e4:b6:
                    5a:c3:89:58:e7:92:02:12:9c:19:6d:ed:5d:7b:ca:
                    d8:f0:35:eb:c6:fe:1a:61:8b:96:48:7f:65:b0:55:
                    7e:ac:9f:9c:8d:2e:54:8a:bc:a5:81:bd:14:3d:db:
                    88:09:44:7a:1d:7b:15:ff:6a:d6:3e:16:10:01:92:
                    e7:45:50:3d:b3:1b:ae:5d:e0:18:34:4d:e3:ea:5f:
                    20:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:07:2B:A8:90:B7:85:A2:AF:87:05:9E:92:B2:20:B8:E9:49:DD:B0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/29072BA890B785A2AF87059E92B220B8E949DDB0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.4.0/22
                IPv6:
                  2804:588c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268135

    Signature Algorithm: sha256WithRSAEncryption
         6b:00:93:1a:2f:5f:7a:f4:16:f9:9d:a9:95:c2:b8:3f:00:bc:
         16:96:23:09:f0:0c:4d:6c:31:52:79:f0:a5:f3:c6:4e:ca:a8:
         db:19:16:b3:60:c8:49:6a:5d:55:5f:e2:d3:de:90:3a:ff:4f:
         3c:76:2f:6c:c2:45:e1:05:07:0d:2a:db:74:9c:08:f3:75:55:
         f9:c3:54:41:98:d5:90:8e:b0:16:dd:df:c5:84:ae:5e:aa:43:
         6e:51:2f:12:04:76:ba:97:c7:3f:a3:3a:89:83:de:a1:a0:94:
         d5:2c:fd:58:1b:83:68:08:d0:ea:8a:22:0f:f8:f1:80:90:39:
         d4:3e:70:27:50:98:89:09:e6:a3:2e:9f:de:54:18:52:59:5f:
         38:43:d9:2a:52:fa:9c:c4:40:38:85:96:d5:b3:18:3a:95:a0:
         71:f0:66:5f:d5:18:cf:9f:5b:54:f9:58:49:a8:bf:2a:9c:2c:
         97:41:79:cb:ab:70:9a:56:61:6d:85:bf:dc:96:b3:da:57:d5:
         72:57:85:7d:c3:a3:f9:41:da:00:02:92:6d:4e:51:18:db:c1:
         45:6e:5b:1b:07:3d:72:f7:b6:45:bf:bb:57:54:dd:27:50:87:
         b8:d2:d3:30:e9:4f:2f:86:56:84:42:e3:bb:cc:20:31:45:b5:
         d8:bd:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org