Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/29A6A2FF60626E59A62378CF687C23D703B20E16.cer
File:                     29A6A2FF60626E59A62378CF687C23D703B20E16.cer (raw, json)
Hash identifier:          SrrEN/ibdO+vZhTXgqL9iHCzqONAtsihA5R3zY9d7TA=
Subject key identifier:   29:A6:A2:FF:60:62:6E:59:A6:23:78:CF:68:7C:23:D7:03:B2:0E:16
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7B047594E11725C775B1D17505ACAF0D2C0696A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/54iJnEr5Ac9ppNYVCKbQ1Au5awrcDKjJUHdvpcyMwt3c/0/29A6A2FF60626E59A62378CF687C23D703B20E16.mft
caRepository:             rsync://rpki-repo.registro.br/repo/54iJnEr5Ac9ppNYVCKbQ1Au5awrcDKjJUHdvpcyMwt3c/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Nov 2022 13:31:23 +0000
Certificate not after:    Mon 20 Nov 2023 13:36:23 +0000
Subordinate resources:    AS: 267977
                          IP: 45.166.124.0/22
                          IP: 2804:561c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:04:75:94:e1:17:25:c7:75:b1:d1:75:05:ac:af:0d:2c:06:96:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 21 13:31:23 2022 GMT
            Not After : Nov 20 13:36:23 2023 GMT
        Subject: CN=29A6A2FF60626E59A62378CF687C23D703B20E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:46:6a:ea:fd:00:ae:fc:d9:bf:f3:14:f0:93:
                    fc:21:17:d3:dc:5a:3a:b6:60:ad:d5:37:36:74:8e:
                    a2:7d:a6:62:6c:ed:10:8d:6f:91:e2:66:4a:67:ab:
                    72:f4:d0:6a:04:55:4c:64:9f:89:55:ce:c1:a9:47:
                    1c:83:c2:4c:03:ce:16:89:97:c3:38:a4:93:8b:31:
                    4a:d3:77:c6:9e:d3:cf:38:4b:7e:fe:bf:e8:38:b5:
                    83:d9:ba:f5:76:fa:00:6e:e9:3a:df:1f:61:81:46:
                    e8:0d:f3:f0:d9:0c:a3:b8:9f:16:61:0e:69:b5:a1:
                    dd:0d:69:2f:04:e2:ba:74:10:da:9e:94:b9:a9:3d:
                    26:bf:45:8c:7b:c0:6e:5c:0a:ae:8b:fa:7b:78:8a:
                    97:f4:2d:cd:98:09:41:da:9e:41:4e:fb:9e:1c:f7:
                    ab:6c:05:12:d2:1b:9c:33:11:2d:c2:75:3e:83:46:
                    e4:71:ec:e0:84:d5:c4:21:b9:de:f7:0c:03:e1:bc:
                    8b:42:30:01:a5:43:cb:32:7e:28:df:dc:a0:d8:c1:
                    b2:28:c1:57:bf:2d:10:2a:cc:cf:b7:23:a5:01:95:
                    6d:da:2d:89:62:25:2b:11:a0:03:6c:d0:30:fd:12:
                    f8:51:fb:bc:34:c1:a9:86:61:5a:5c:ff:5b:a5:3e:
                    ed:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:A6:A2:FF:60:62:6E:59:A6:23:78:CF:68:7C:23:D7:03:B2:0E:16
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/54iJnEr5Ac9ppNYVCKbQ1Au5awrcDKjJUHdvpcyMwt3c/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/54iJnEr5Ac9ppNYVCKbQ1Au5awrcDKjJUHdvpcyMwt3c/0/29A6A2FF60626E59A62378CF687C23D703B20E16.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.124.0/22
                IPv6:
                  2804:561c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267977

    Signature Algorithm: sha256WithRSAEncryption
         22:4c:93:87:5b:d6:af:f0:6b:7d:9d:6b:d8:2e:f2:29:14:a1:
         07:0f:1d:28:4d:cf:27:68:52:8e:55:19:78:b6:f2:eb:e1:62:
         b2:78:ca:2f:72:67:11:20:85:0e:c8:e2:99:f9:d7:74:52:dc:
         2d:e1:d6:d2:f4:d1:90:04:9e:1f:ca:a8:2b:c0:95:a2:fc:e0:
         39:e2:5d:ac:be:cd:c7:d5:79:60:b8:17:76:36:50:11:bf:cd:
         24:cf:a4:63:83:8b:7a:39:9e:03:2b:5c:b1:27:91:31:62:63:
         0b:f7:3d:57:68:46:9c:80:4e:4e:dd:76:07:11:d6:37:f0:c2:
         a3:63:75:67:d2:75:e8:32:44:55:60:73:fb:bc:49:96:e8:f0:
         fe:ab:21:e2:7a:f6:23:3a:91:7f:1b:41:96:76:dd:4d:22:b8:
         a2:0a:92:57:83:f6:25:03:44:7c:df:85:1b:ab:e5:39:c3:a4:
         f7:4b:07:9f:0d:f8:14:ee:ba:f1:47:37:85:e2:07:78:3e:39:
         5e:21:2e:af:19:d4:e2:ba:9b:7f:49:47:28:c2:b7:36:49:53:
         3b:b9:5c:d3:0d:3c:f8:47:5c:92:3d:fe:01:3b:bf:84:1b:67:
         c5:36:e2:a3:3f:54:d3:41:46:8f:3f:14:0f:91:fa:e9:a2:7e:
         3c:f3:96:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org