Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/29C49981A06E753E7D8BA04379CF1A6C4CE85950.cer
File:                     29C49981A06E753E7D8BA04379CF1A6C4CE85950.cer (raw, json)
Hash identifier:          uhz9jnAxT4p1WqoO0hffgXts0SoyUVp7FTx5eZY5SaQ=
Subject key identifier:   29:C4:99:81:A0:6E:75:3E:7D:8B:A0:43:79:CF:1A:6C:4C:E8:59:50
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       05E6530B639731524D8CB04063F3C3FC3ED4F854
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/29C49981A06E753E7D8BA04379CF1A6C4CE85950.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Mar 2023 19:05:20 +0000
Certificate not after:    Fri 22 Mar 2024 19:10:20 +0000
Subordinate resources:    AS: 264297
                          IP: 138.121.136.0/22
                          IP: 168.197.220.0/22
                          IP: 2804:25b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e6:53:0b:63:97:31:52:4d:8c:b0:40:63:f3:c3:fc:3e:d4:f8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 24 19:05:20 2023 GMT
            Not After : Mar 22 19:10:20 2024 GMT
        Subject: CN=29C49981A06E753E7D8BA04379CF1A6C4CE85950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b3:3c:ef:31:26:79:fc:ab:e3:99:d9:a8:f7:
                    8d:da:cc:3e:93:0f:43:2d:53:ca:60:8b:3a:5e:97:
                    3d:6f:40:ad:1c:ae:b1:1d:db:cb:89:81:ae:f2:20:
                    c0:71:f3:71:78:3d:d5:3b:c8:35:45:a1:9c:1a:21:
                    f4:38:f7:0f:e3:02:6d:ff:65:1f:bd:bf:d9:1e:40:
                    ff:35:c4:38:5b:25:88:10:e5:4d:7e:96:d1:58:15:
                    7f:c9:57:af:95:5f:39:64:24:0e:71:c3:e1:d9:bd:
                    7d:cb:99:af:41:38:d5:0d:2c:51:d6:6c:c8:79:c3:
                    6d:72:73:30:85:c2:e7:ff:19:37:af:74:c0:b0:e6:
                    97:af:f7:ef:9d:9c:6b:8b:73:fc:95:cf:c3:e8:8a:
                    24:52:7a:21:8c:71:8c:4e:49:02:b0:e0:a4:f1:3f:
                    bc:da:45:e7:b8:1b:6d:16:cf:1c:3f:62:c7:3c:69:
                    c6:0b:aa:97:f1:77:94:4a:e7:1e:5c:99:b7:46:5a:
                    bb:bf:11:ea:94:55:5b:85:59:e4:68:68:4e:0d:3f:
                    78:3f:9a:34:e2:da:4c:aa:75:a3:d1:4a:ab:a9:13:
                    f1:71:d4:bc:c0:ac:9d:06:a8:9e:38:87:98:e1:23:
                    1a:90:c3:62:b8:95:23:38:c5:c8:51:66:11:d4:04:
                    e4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:C4:99:81:A0:6E:75:3E:7D:8B:A0:43:79:CF:1A:6C:4C:E8:59:50
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/29C49981A06E753E7D8BA04379CF1A6C4CE85950.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.136.0/22
                  168.197.220.0/22
                IPv6:
                  2804:25b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264297

    Signature Algorithm: sha256WithRSAEncryption
         8c:9c:d5:35:9b:23:a3:29:06:bb:c4:15:16:05:37:4d:27:f1:
         44:cc:a5:27:5d:07:91:07:0d:db:9b:5d:ea:8d:48:77:e0:01:
         31:41:98:74:5d:0f:e2:63:9c:22:a7:27:ec:b2:af:76:29:90:
         d3:05:b6:c4:6b:bb:72:14:fd:f1:4f:3b:8c:ee:75:e5:19:70:
         24:c5:35:e0:23:e9:4a:5d:b7:7e:70:06:90:2a:30:a8:e9:86:
         1e:77:9c:41:c1:d1:7f:bc:aa:f6:61:ef:f2:80:6d:aa:07:bb:
         26:35:8f:60:a9:6a:ce:93:2d:b6:0e:69:32:11:62:76:96:a2:
         a2:b0:16:cf:27:b9:64:ac:c7:9e:b4:ec:42:c1:2d:37:26:10:
         9d:ca:15:50:70:32:b4:65:bf:5b:a2:7c:e6:a7:d8:89:94:12:
         d8:28:ab:26:7d:d3:e7:89:8a:ff:c3:6d:2f:be:a0:78:cd:02:
         90:bc:82:ea:2a:8c:00:07:5c:aa:fb:64:ee:96:08:02:6d:9a:
         58:11:0b:d4:b3:9e:9b:a5:74:49:84:c2:1b:95:72:cf:b7:6c:
         1d:09:17:98:b1:bd:93:05:30:19:c0:3f:fe:60:4a:84:9c:5d:
         1c:b8:01:16:57:48:5c:c9:73:9f:26:00:9b:a1:0a:2b:2b:17:
         e1:fa:f3:70
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUBeZTC2OXMVJNjLBAY/PD/D7U+FQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMjQxOTA1MjBaFw0yNDAzMjIxOTEwMjBaMDMxMTAvBgNV
BAMTKDI5QzQ5OTgxQTA2RTc1M0U3RDhCQTA0Mzc5Q0YxQTZDNENFODU5NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOszzvMSZ5/Kvjmdmo943azD6T
D0MtU8pgizpelz1vQK0crrEd28uJga7yIMBx83F4PdU7yDVFoZwaIfQ49w/jAm3/
ZR+9v9keQP81xDhbJYgQ5U1+ltFYFX/JV6+VXzlkJA5xw+HZvX3Lma9BONUNLFHW
bMh5w21yczCFwuf/GTevdMCw5pev9++dnGuLc/yVz8PoiiRSeiGMcYxOSQKw4KTx
P7zaRee4G20Wzxw/Ysc8acYLqpfxd5RK5x5cmbdGWru/EeqUVVuFWeRoaE4NP3g/
mjTi2kyqdaPRSqupE/Fx1LzArJ0GqJ44h5jhIxqQw2K4lSM4xchRZhHUBORHAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQpxJmBoG51Pn2L
oEN5zxpsTOhZUDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BUnlOeEo5M0pLZTdzc2I3eEtpNk5OMWNNc0ZwODFGd01v
R3dSWVpCN2d4dS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BUnlOeEo5M0pLZTdzc2I3eEtpNk5OMWNNc0ZwODFGd01v
R3dSWVpCN2d4dS8wLzI5QzQ5OTgxQTA2RTc1M0U3RDhCQTA0Mzc5Q0YxQTZDNENF
ODU5NTAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAop5iAMEAqjF3DANBAIA
AjAHAwUAKAQltDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECGkwDQYJKoZIhvcN
AQELBQADggEBAIyc1TWbI6MpBrvEFRYFN00n8UTMpSddB5EHDdubXeqNSHfgATFB
mHRdD+JjnCKnJ+yyr3YpkNMFtsRru3IU/fFPO4zudeUZcCTFNeAj6Updt35wBpAq
MKjphh53nEHB0X+8qvZh7/KAbaoHuyY1j2Cpas6TLbYOaTIRYnaWoqKwFs8nuWSs
x5607ELBLTcmEJ3KFVBwMrRlv1uifOan2ImUEtgoqyZ90+eJiv/DbS++oHjNApC8
guoqjAAHXKr7ZO6WCAJtmlgRC9SznpuldEmEwhuVcs+3bB0JF5ixvZMFMBnAP/5g
SoScXRy4ARZXSFzJc58mAJuhCisrF+H683A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org