Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/29768DA627CDA1EED461D93503E553A7242B3516.cer
File:                     29768DA627CDA1EED461D93503E553A7242B3516.cer (raw, json)
Hash identifier:          /2kFKtEccSwofEpHJqKl7BxDRC4/9+eFAt40UXY++14=
Subject key identifier:   29:76:8D:A6:27:CD:A1:EE:D4:61:D9:35:03:E5:53:A7:24:2B:35:16
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       420D09A68F5698F9D5DC367B4EC7158EB12339EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/1/29768DA627CDA1EED461D93503E553A7242B3516.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 13:16:45 +0000
Certificate not after:    Thu 03 Apr 2025 13:21:45 +0000
Subordinate resources:    AS: 262458
                          IP: 177.53.48.0/21
                          IP: 200.9.220.0/22
                          IP: 2804:4ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:0d:09:a6:8f:56:98:f9:d5:dc:36:7b:4e:c7:15:8e:b1:23:39:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  4 13:16:45 2024 GMT
            Not After : Apr  3 13:21:45 2025 GMT
        Subject: CN=29768DA627CDA1EED461D93503E553A7242B3516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:21:c8:3a:ae:40:7c:fe:be:83:0f:46:96:
                    05:45:91:46:4c:50:1b:e6:13:11:2f:a5:9b:c8:8f:
                    e6:fe:72:3d:b3:d9:16:27:71:b1:dc:7e:f8:27:a3:
                    01:46:ea:5c:5e:42:52:d0:ea:8e:ae:21:9f:d1:16:
                    5d:56:d4:a0:5d:23:cb:9b:00:1b:3a:e5:e4:23:57:
                    1b:0e:2c:62:59:5c:f5:38:48:00:7e:c7:22:1f:65:
                    ee:3e:37:b3:7d:5c:d3:b7:cf:e9:45:da:1a:5e:50:
                    2b:34:ad:65:7e:3f:88:9c:0d:79:7e:5a:97:e2:65:
                    9a:b8:68:f3:1e:ee:ab:2a:1e:cf:af:2b:f5:9b:68:
                    8a:56:f5:0c:96:70:c7:40:bf:3c:a5:02:8b:e4:5a:
                    dc:2d:ff:28:d0:74:76:03:a6:8c:a7:3a:25:07:14:
                    20:5e:0a:e5:16:e1:57:b7:2a:9b:fc:5f:83:63:52:
                    0f:b5:82:d3:01:89:60:4e:f1:34:d3:81:64:6d:da:
                    da:86:2d:86:3c:1c:6e:f7:77:6c:db:d5:f1:df:56:
                    3e:05:b2:29:5c:83:14:ab:dc:d3:51:bd:18:eb:c1:
                    2d:85:70:a2:a5:f7:02:cb:2e:0c:4b:83:b4:20:86:
                    db:18:c4:31:fa:74:0e:b1:69:95:e8:83:39:9d:8e:
                    5a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:76:8D:A6:27:CD:A1:EE:D4:61:D9:35:03:E5:53:A7:24:2B:35:16
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/1/29768DA627CDA1EED461D93503E553A7242B3516.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.48.0/21
                  200.9.220.0/22
                IPv6:
                  2804:4ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262458

    Signature Algorithm: sha256WithRSAEncryption
         20:64:66:55:8a:ff:3b:4c:6a:d1:0f:ff:55:ce:97:8b:2d:47:
         c4:0c:37:51:23:54:3b:16:01:4c:e4:56:4f:a6:7b:00:9b:aa:
         0c:02:0b:14:03:27:28:08:02:66:a9:4f:aa:a1:f2:78:82:49:
         af:8a:7a:f0:bf:b5:ea:04:38:3c:0b:d7:09:a9:59:2b:a2:51:
         9f:9f:1b:e7:25:fa:a8:e2:c5:47:cb:89:8f:5f:ca:2a:40:ef:
         40:cb:b4:1a:bf:9a:18:0e:59:eb:88:bb:dc:26:4e:1c:21:dc:
         ca:03:2a:1d:0a:09:31:30:1a:42:af:71:fd:70:5f:34:fa:a6:
         2c:4b:fe:6d:73:eb:18:a9:bb:ec:08:18:6c:6e:06:61:ab:92:
         b1:e8:7a:2c:9b:76:d7:96:90:a9:0c:7b:8d:4e:a6:d7:cb:90:
         83:1f:2b:8a:55:4f:42:26:5e:92:79:e7:7c:1a:ed:b1:6b:b0:
         12:ff:3e:1a:88:f0:38:05:2a:fd:4d:d3:13:dc:3e:54:0c:f4:
         ee:bd:4d:46:eb:b8:3f:99:5b:88:a9:64:5e:08:9f:e0:89:fb:
         7a:5c:eb:d7:8c:d4:24:99:8e:6b:79:a2:b7:43:3d:d0:41:d2:
         e6:7e:59:29:3e:89:cf:7b:f7:df:17:f7:8a:66:c9:a9:8d:4a:
         3a:56:74:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org