Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/29C5E3E5D4E59C518A3EB1107D3DFCC49084B839.cer
File:                     29C5E3E5D4E59C518A3EB1107D3DFCC49084B839.cer (raw, json)
Hash identifier:          Ongd1UuyD3S/QR0fIb7Sm8j7+1GzUxuw+OCCx6+rTe0=
Subject key identifier:   29:C5:E3:E5:D4:E5:9C:51:8A:3E:B1:10:7D:3D:FC:C4:90:84:B8:39
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5229E26F845D9E17ADB4B8AB11081207A87AC83E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/29C5E3E5D4E59C518A3EB1107D3DFCC49084B839.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 17:42:38 +0000
Certificate not after:    Mon 01 Apr 2024 17:47:38 +0000
Subordinate resources:    AS: 265027
                          IP: 170.150.96.0/22
                          IP: 2804:31a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:29:e2:6f:84:5d:9e:17:ad:b4:b8:ab:11:08:12:07:a8:7a:c8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  3 17:42:38 2023 GMT
            Not After : Apr  1 17:47:38 2024 GMT
        Subject: CN=29C5E3E5D4E59C518A3EB1107D3DFCC49084B839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6b:97:33:eb:79:37:eb:a6:d7:f8:ba:da:a2:
                    da:52:c3:d9:54:28:d5:2c:da:ba:e1:dd:9c:84:c4:
                    8c:fa:4c:97:cd:1c:80:58:2c:69:a8:49:98:dd:1a:
                    46:c7:d4:b9:88:4e:47:e5:3b:12:e5:84:a7:2c:55:
                    58:cf:1a:5e:23:14:76:41:c1:bf:28:0d:e9:12:f2:
                    d0:55:57:67:2a:67:10:e5:ed:16:bd:cb:0c:51:48:
                    ca:47:ba:36:5f:81:38:92:3e:77:6d:94:a7:85:14:
                    fc:a1:bd:54:ae:02:74:31:4e:47:65:6e:f1:5d:c9:
                    8f:43:3e:0e:a0:1d:bb:d0:18:e6:43:2a:c1:b5:5b:
                    75:eb:99:c3:ce:59:cf:c7:16:ec:85:d5:c2:19:f2:
                    4a:29:13:04:0d:d3:91:1a:6c:51:21:5b:66:ce:5e:
                    b7:72:fa:48:34:6b:f1:9e:e7:b2:1c:57:c8:af:34:
                    db:9e:4d:80:d9:32:43:14:d5:27:08:67:7b:9e:7d:
                    66:0d:a9:93:d6:a5:6c:e1:84:a5:5a:9b:2e:2d:d2:
                    40:ba:b7:f1:94:87:63:c2:6a:2b:66:ca:fe:71:88:
                    5b:c9:01:3a:6c:c0:10:59:c0:11:25:1d:c2:c3:ff:
                    96:87:53:45:22:50:b3:9f:a4:fa:57:47:e8:d6:c2:
                    34:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:C5:E3:E5:D4:E5:9C:51:8A:3E:B1:10:7D:3D:FC:C4:90:84:B8:39
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gisg1ZgroB3iKFMrmXBuBfvm3cLASMDzP8vgGiTR4c2z/0/29C5E3E5D4E59C518A3EB1107D3DFCC49084B839.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.96.0/22
                IPv6:
                  2804:31a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265027

    Signature Algorithm: sha256WithRSAEncryption
         a1:ce:02:f0:42:32:20:f3:ee:5b:af:af:ba:5c:ad:ea:69:9c:
         df:82:6f:bf:bb:4f:07:78:04:84:51:7e:35:45:70:af:fa:84:
         e7:f7:fd:5e:da:86:9f:38:b7:a7:70:7a:1f:82:c0:de:78:40:
         0c:dc:1d:aa:f6:48:db:31:20:ee:56:d8:64:0d:c8:1f:f4:c6:
         4c:bb:40:79:3e:24:55:f2:f8:b0:72:d7:2e:b1:e4:7a:7d:ec:
         7d:f8:63:3c:3d:be:f3:2d:74:7b:b6:47:2a:3c:08:6e:3a:3b:
         d4:ca:b5:5a:17:2c:7e:49:fd:ca:68:3c:e2:e3:bc:a2:f4:92:
         ee:13:8b:1d:88:db:2e:55:58:de:08:32:4b:aa:cf:39:f6:2d:
         ee:83:39:57:72:7e:c4:a1:63:80:2e:d2:15:c4:10:61:bc:6e:
         35:27:1d:41:85:3a:a7:8a:33:1a:d4:7c:dc:b4:50:b1:f3:c1:
         97:40:99:bc:4f:46:46:ec:a9:3a:05:93:26:c0:49:7c:a1:a5:
         7a:07:f8:a3:db:4a:f3:e9:03:97:c0:aa:77:6a:b2:7f:49:25:
         bc:f7:1f:92:78:9f:52:12:19:27:0d:84:eb:bb:9c:26:0e:c0:
         23:e3:3d:e9:97:8b:b8:da:c1:21:0c:44:1a:33:87:04:01:13:
         8a:49:7a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:58:00 2025 by rpki-client