Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/29C9D754F8BEED45A868D3E229FE1DE3FB0A6FC8.cer
File:                     29C9D754F8BEED45A868D3E229FE1DE3FB0A6FC8.cer (raw, json)
Hash identifier:          QEGjf16ZeLxVcu9ZPHyMOb/YQsBwY+Z3fgMeiVtQgdI=
Subject key identifier:   29:C9:D7:54:F8:BE:ED:45:A8:68:D3:E2:29:FE:1D:E3:FB:0A:6F:C8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       61FDF02E11D1B6876417E32C0213CC0195122933
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/29C9D754F8BEED45A868D3E229FE1DE3FB0A6FC8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Apr 2023 18:18:35 +0000
Certificate not after:    Thu 25 Apr 2024 18:23:35 +0000
Subordinate resources:    AS: 265408
                          IP: 168.195.44.0/22
                          IP: 2804:33a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fd:f0:2e:11:d1:b6:87:64:17:e3:2c:02:13:cc:01:95:12:29:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 27 18:18:35 2023 GMT
            Not After : Apr 25 18:23:35 2024 GMT
        Subject: CN=29C9D754F8BEED45A868D3E229FE1DE3FB0A6FC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8b:bd:1d:5f:2b:7b:d7:94:ef:06:8a:87:6f:
                    00:3e:40:b6:ff:bc:80:a3:87:bb:e6:fb:d0:88:b9:
                    7d:8a:71:e7:09:be:ba:fe:7f:7e:8d:ea:5d:0e:80:
                    69:9c:04:e2:df:a7:e6:5e:a8:dd:b4:9b:20:94:f1:
                    1f:42:55:36:c3:c1:34:42:bb:03:16:cc:6f:eb:2c:
                    6d:d7:26:60:f8:82:ad:9b:a5:b8:b8:f6:90:63:ba:
                    94:6e:1b:89:e5:52:ab:e7:53:ad:fc:b8:a3:ce:d6:
                    6a:37:4a:8c:61:f1:c2:d9:2d:45:6f:05:ae:11:67:
                    e2:06:87:6c:22:dc:9e:c9:7b:bf:12:32:7f:2d:b8:
                    0b:e7:e9:9a:ae:11:60:1a:7b:4d:5c:24:77:ac:1b:
                    c5:93:5a:d6:fb:3c:07:6b:74:38:f4:b7:11:38:7a:
                    4e:c5:cb:86:63:0e:0f:ac:00:e6:fc:38:53:a9:d3:
                    8b:1e:77:aa:5f:a1:b4:a9:ed:b6:95:ae:99:cc:06:
                    d5:1c:f5:d2:f5:7c:1e:fc:3d:96:30:e6:98:9c:c9:
                    e0:43:f6:23:8b:24:a5:e8:3c:2d:14:48:fc:ac:0e:
                    52:30:60:16:9c:14:9c:d2:8e:07:ae:fb:c8:c9:7f:
                    38:02:05:f9:eb:a3:4b:46:29:51:08:b5:d4:40:eb:
                    45:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:C9:D7:54:F8:BE:ED:45:A8:68:D3:E2:29:FE:1D:E3:FB:0A:6F:C8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/29C9D754F8BEED45A868D3E229FE1DE3FB0A6FC8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.44.0/22
                IPv6:
                  2804:33a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265408

    Signature Algorithm: sha256WithRSAEncryption
         53:0c:71:5a:3b:01:d8:46:24:23:42:fb:3f:31:96:5d:4d:bc:
         87:5e:f1:79:af:25:7e:8d:2c:5e:8c:f8:e5:b9:0e:60:bb:0a:
         9d:2a:8c:31:42:51:f0:e6:16:f4:f1:6e:fb:46:35:ae:61:a9:
         ae:4f:a2:d9:b4:79:42:f4:7f:9e:22:10:16:58:b3:37:4c:f3:
         58:66:7e:05:dc:1b:48:06:f6:12:a8:31:7e:8b:3c:fb:5d:2c:
         ae:6f:2e:70:b2:97:2b:55:5b:b0:fe:cb:3a:a2:80:ce:fb:49:
         9c:15:e3:0a:21:2e:d5:f3:cd:14:dc:37:d6:b8:72:2d:21:be:
         81:6c:a1:f1:4b:38:d2:37:31:ed:f7:9a:95:23:ea:73:cb:47:
         6d:37:a7:bf:36:16:db:27:28:05:92:64:15:7e:4b:3d:4a:31:
         e6:52:fe:98:9b:8a:51:cd:7c:9d:0c:2c:a5:3d:0c:98:ae:7e:
         01:28:0b:b3:f8:da:99:0a:27:66:fe:97:4a:ef:39:52:04:b1:
         92:f0:64:82:c9:59:64:07:a0:c4:34:08:79:ea:94:9f:68:5a:
         54:41:3a:fc:5f:27:16:4d:93:f5:86:96:31:a1:f5:ec:56:ff:
         9d:a6:cf:1e:5f:81:c1:7f:1a:a6:21:08:e7:34:9a:e8:c9:d4:
         2c:0a:94:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org