Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2999B96DB8D72DDF0F04D7BD30F77D09BB2A3818.cer
File:                     2999B96DB8D72DDF0F04D7BD30F77D09BB2A3818.cer (raw, json)
Hash identifier:          /0O863N18WhjBRZCCTIm5rBbkLLARxb7tOJiqw9qaAg=
Subject key identifier:   29:99:B9:6D:B8:D7:2D:DF:0F:04:D7:BD:30:F7:7D:09:BB:2A:38:18
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0E38DF2DAC593CFD440F565A714611E21DBBE7CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/0/2999B96DB8D72DDF0F04D7BD30F77D09BB2A3818.mft
caRepository:             rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Jan 2024 18:50:42 +0000
Certificate not after:    Mon 06 Jan 2025 18:55:42 +0000
Subordinate resources:    AS: 264403
                          IP: 131.161.248.0/22
                          IP: 2804:1df0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:38:df:2d:ac:59:3c:fd:44:0f:56:5a:71:46:11:e2:1d:bb:e7:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  8 18:50:42 2024 GMT
            Not After : Jan  6 18:55:42 2025 GMT
        Subject: CN=2999B96DB8D72DDF0F04D7BD30F77D09BB2A3818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:c1:88:7d:9e:5f:c8:5d:c7:80:7a:1e:bf:
                    f9:c5:83:77:4b:9a:56:65:a8:f7:b7:83:0a:01:c1:
                    7f:94:5e:6a:90:38:b2:a8:a6:86:a7:2a:0b:5f:61:
                    5d:db:1f:3a:9b:a6:26:81:f2:0b:2c:a4:6b:a0:9b:
                    a5:8f:cb:00:56:38:e0:70:41:6c:b7:b4:0b:83:12:
                    5c:6f:ea:5d:7e:2b:29:84:83:9b:0f:0e:05:a1:5d:
                    d9:ea:2b:6d:f6:4a:53:65:4d:8a:dd:08:56:78:ce:
                    e4:9e:d5:14:d3:41:b7:cd:d1:a7:53:7c:b8:c7:9d:
                    f0:91:f3:e9:94:f6:fd:ea:10:c9:9c:77:8f:d9:6d:
                    88:06:2d:3a:15:d0:28:56:5e:71:3f:c4:05:31:14:
                    0a:93:f3:93:08:68:3a:e6:89:a4:9b:e0:24:bc:f5:
                    56:35:74:dc:d1:9e:ea:17:51:97:35:dd:31:73:01:
                    bc:8f:53:31:7d:a7:e3:78:09:9e:ad:02:b1:eb:a8:
                    8e:4e:aa:cb:1a:28:a4:41:43:ca:bb:bd:9d:0d:34:
                    5a:11:3e:20:16:3b:af:c8:12:14:d3:37:b9:cf:95:
                    df:91:29:d3:2c:ae:66:d9:e1:06:a7:36:52:c2:6f:
                    58:49:14:73:da:e7:31:55:72:22:3a:cc:2b:8e:25:
                    51:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:99:B9:6D:B8:D7:2D:DF:0F:04:D7:BD:30:F7:7D:09:BB:2A:38:18
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/0/2999B96DB8D72DDF0F04D7BD30F77D09BB2A3818.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.248.0/22
                IPv6:
                  2804:1df0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264403

    Signature Algorithm: sha256WithRSAEncryption
         88:dc:58:75:f6:2a:af:aa:5d:2d:26:22:99:0e:92:89:85:01:
         eb:b9:90:7c:89:2d:8d:0d:45:8e:46:b2:fe:d7:85:6f:69:59:
         83:c0:94:4d:53:a9:01:2a:6f:01:c2:18:ad:81:86:73:22:80:
         b7:62:99:5f:b2:32:18:17:f1:99:71:60:8b:bf:aa:55:19:21:
         41:6c:3c:5e:27:f6:4f:aa:00:6a:a8:cc:8f:76:38:b1:0f:23:
         d2:25:e0:57:45:ca:81:70:fa:3f:b7:30:f5:6f:03:4c:48:0b:
         86:74:b6:d1:7f:29:95:58:86:1d:5e:9b:73:e1:52:31:a9:16:
         fb:18:c7:3a:ae:92:73:33:ea:fa:c3:57:ae:c1:8d:dc:af:36:
         8f:b2:fe:63:e6:a5:58:f0:89:4f:ee:5e:d5:d7:4c:1c:57:fc:
         05:06:1d:7e:92:fb:0a:1c:35:1e:0f:26:85:cd:bf:66:52:f7:
         9b:e4:c0:6c:22:64:85:00:db:c0:65:a6:dc:5e:58:77:8d:20:
         c0:46:2f:65:5c:ca:1f:38:8a:33:6b:d8:03:0c:e5:ba:2e:de:
         ec:16:94:0d:77:9d:29:66:36:2d:00:10:cc:d5:fb:f9:6d:0d:
         44:37:cd:5a:1b:d2:2e:cc:4b:06:0b:c8:35:30:94:99:c8:11:
         81:29:7c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org