Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/29A77F8F885A2F253F4307C78B11CC052A9ADA14.cer
File:                     29A77F8F885A2F253F4307C78B11CC052A9ADA14.cer (raw, json)
Hash identifier:          pI7oxr3oNQvmF+ZS34AF6XOgC6lFF1rjwlZsFqYuqXo=
Subject key identifier:   29:A7:7F:8F:88:5A:2F:25:3F:43:07:C7:8B:11:CC:05:2A:9A:DA:14
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E4DD53EDF9D3032D6B6D6C09B7718DA40937F72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CBVXyuX6D8eE3FUAB97qDMCeiaWvxJ9HbptK7txek33N/0/29A77F8F885A2F253F4307C78B11CC052A9ADA14.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CBVXyuX6D8eE3FUAB97qDMCeiaWvxJ9HbptK7txek33N/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 16:32:02 +0000
Certificate not after:    Tue 03 Dec 2024 16:37:02 +0000
Subordinate resources:    AS: 271059
                          IP: 179.48.236.0/22
                          IP: 2804:75a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4d:d5:3e:df:9d:30:32:d6:b6:d6:c0:9b:77:18:da:40:93:7f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 16:32:02 2023 GMT
            Not After : Dec  3 16:37:02 2024 GMT
        Subject: CN=29A77F8F885A2F253F4307C78B11CC052A9ADA14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1d:a6:7c:de:50:d2:93:49:c3:9c:79:17:6a:
                    62:43:58:df:1e:09:9c:44:71:50:bc:c3:66:a2:b2:
                    f9:4a:df:4b:94:65:c5:ce:9a:ea:60:77:4a:66:ff:
                    59:a9:d4:1e:24:19:50:01:67:c2:a2:19:0c:be:ca:
                    03:7e:51:b7:cb:a6:2e:14:f3:9f:6c:35:ee:a2:ed:
                    16:1d:22:bb:9c:6e:1f:67:1b:e9:72:a6:4b:93:f5:
                    cd:72:d8:83:f5:6d:1c:9c:bc:63:2e:94:74:a6:03:
                    f3:0c:ff:c8:a8:46:ee:da:78:7b:6b:1e:ed:1d:dd:
                    e2:96:a1:75:32:37:e6:9d:e2:4a:eb:0f:65:f2:0f:
                    53:89:26:c6:19:9f:ef:bc:74:d8:b5:8d:a2:e2:02:
                    4e:f1:6b:73:f7:88:0f:9d:75:43:31:85:0f:61:08:
                    62:31:60:4e:94:0f:a7:8b:ea:75:36:18:67:da:3c:
                    2f:ce:e1:1e:b1:8b:97:b0:52:87:c6:56:9b:56:cd:
                    95:7b:6d:5d:4b:31:e3:c6:e1:b5:ed:44:9b:a6:d2:
                    2d:02:3f:f0:6f:21:c7:5c:17:f2:85:1a:96:dc:1c:
                    bc:3c:06:a1:fe:7a:7d:d9:f9:24:7b:c6:a3:b4:8e:
                    d8:63:37:2d:f3:95:03:95:ad:89:95:a3:5c:0a:b5:
                    19:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:A7:7F:8F:88:5A:2F:25:3F:43:07:C7:8B:11:CC:05:2A:9A:DA:14
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CBVXyuX6D8eE3FUAB97qDMCeiaWvxJ9HbptK7txek33N/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CBVXyuX6D8eE3FUAB97qDMCeiaWvxJ9HbptK7txek33N/0/29A77F8F885A2F253F4307C78B11CC052A9ADA14.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.236.0/22
                IPv6:
                  2804:75a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271059

    Signature Algorithm: sha256WithRSAEncryption
         68:b5:7f:a8:35:ca:0a:5e:bb:3a:ce:97:93:51:7e:56:ce:80:
         d5:23:ee:28:1c:43:bc:7a:d2:47:fd:5c:4a:ad:6c:35:3a:49:
         18:82:b8:2d:55:d2:c1:b1:dc:4a:89:12:c2:92:a6:c4:de:bd:
         04:ef:69:3e:fd:89:13:b6:33:50:b7:89:c6:c8:09:70:c0:3b:
         c6:ec:2b:8e:61:98:e4:ca:03:56:02:70:44:02:28:6f:40:53:
         e6:b7:8f:85:70:cc:6b:22:86:27:f2:10:52:c3:a5:f0:cc:8c:
         eb:4a:3c:72:80:22:93:a5:49:5e:fb:2d:e5:bb:e1:99:da:1c:
         e9:55:48:41:ca:03:10:d7:e2:3a:7e:b7:ff:6e:e6:a6:2c:cd:
         10:eb:9a:8b:00:b9:39:96:62:45:a6:b3:09:e2:f9:15:1f:9a:
         d8:df:40:8f:fe:31:d0:6b:bb:4c:20:3f:4f:f2:cb:45:23:a7:
         7b:cd:40:97:70:0e:24:01:d1:2b:a3:f3:f5:9f:cc:71:b9:e7:
         5e:e6:e9:6a:a4:77:50:8d:56:a9:05:f3:89:d1:5d:ea:51:ec:
         32:7c:15:30:aa:a1:87:d4:94:6b:79:f5:4a:8b:4b:5c:52:79:
         31:a6:d5:42:0a:bc:61:78:ab:4e:03:5c:bc:50:69:39:7d:2d:
         7a:1a:43:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org