Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/990B8DA2C2CB0E8E6A8AA9480757E2444306CC62.cer
File:                     990B8DA2C2CB0E8E6A8AA9480757E2444306CC62.cer (raw, json)
Hash identifier:          mYtRgW1yZWcHRX//PuUKCikexUC1bZENfSZDZvie+y4=
Subject key identifier:   99:0B:8D:A2:C2:CB:0E:8E:6A:8A:A9:48:07:57:E2:44:43:06:CC:62
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       68C52C4065636E246C54B4FD13389522D6BF85FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/990B8DA2C2CB0E8E6A8AA9480757E2444306CC62.mft
caRepository:             rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 23:13:47 +0000
Certificate not after:    Thu 11 Jul 2024 23:18:47 +0000
Subordinate resources:    AS: 269206
                          IP: 45.181.252.0/22
                          IP: 2804:6104::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c5:2c:40:65:63:6e:24:6c:54:b4:fd:13:38:95:22:d6:bf:85:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 23:13:47 2023 GMT
            Not After : Jul 11 23:18:47 2024 GMT
        Subject: CN=990B8DA2C2CB0E8E6A8AA9480757E2444306CC62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:50:53:a8:21:8b:0e:78:32:8d:4b:09:71:ac:
                    95:72:a8:2b:f0:1a:3a:c6:f9:84:c4:74:fc:89:2d:
                    6e:25:02:38:6d:e8:79:5a:10:ba:19:f1:12:6f:56:
                    23:35:55:df:de:06:b4:50:82:69:fe:2b:f2:c0:af:
                    5d:35:64:0f:65:d8:8f:72:e4:a1:32:ca:6c:23:82:
                    99:71:fc:38:55:80:db:6f:e1:fb:48:0d:b6:d6:cd:
                    ae:8f:bb:40:38:e9:cd:22:4c:a6:1a:35:2b:03:21:
                    08:e4:f4:92:e0:90:4b:bb:5f:fa:af:8d:6c:20:90:
                    e1:f9:8b:45:82:eb:b0:7b:e8:b8:c3:38:c8:eb:aa:
                    07:ab:9f:c0:50:07:42:54:d7:93:52:53:3a:f3:ff:
                    33:5c:35:c8:98:ab:88:93:7a:85:d4:3c:bf:8f:56:
                    04:da:2c:90:ac:a2:6a:69:84:f8:9b:bb:00:4e:a1:
                    09:ff:58:22:bd:e6:9e:9f:db:51:b4:86:ec:15:9b:
                    79:a1:86:07:e0:80:ca:53:1c:20:de:80:3b:7b:a3:
                    72:72:63:90:6e:66:a4:d3:c9:d8:8a:05:4a:09:9b:
                    68:1b:af:8d:03:80:4d:f4:84:4c:11:38:dc:18:2e:
                    ed:ac:d0:f6:83:68:78:4b:c0:cf:6f:f6:2f:06:20:
                    d3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:0B:8D:A2:C2:CB:0E:8E:6A:8A:A9:48:07:57:E2:44:43:06:CC:62
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/0/990B8DA2C2CB0E8E6A8AA9480757E2444306CC62.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.252.0/22
                IPv6:
                  2804:6104::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269206

    Signature Algorithm: sha256WithRSAEncryption
         40:e8:f2:2f:f3:c4:8a:59:e8:3e:ab:8c:8b:1b:01:b9:53:3e:
         8b:6d:47:0d:48:bd:5e:52:b6:72:cd:33:67:c4:57:69:10:67:
         9a:0e:2c:98:0e:4f:c9:2b:de:06:3a:22:54:2b:ea:75:93:0c:
         19:70:0c:32:90:ae:ca:68:ab:81:d6:fd:00:20:03:af:88:84:
         1d:5f:b4:d7:c4:ac:c4:d4:b4:07:21:4b:3b:d5:24:06:6f:8d:
         4e:cf:a0:10:24:c2:5f:dc:a2:ee:96:e9:25:8e:49:8d:c9:2a:
         4d:d5:43:f4:7a:0f:cd:a8:46:f6:60:a5:a7:c4:41:fe:16:ad:
         61:de:76:bc:a8:4a:66:32:a2:56:1a:88:d0:98:4a:76:01:e9:
         a9:a0:4c:23:8b:81:8c:94:cd:cf:70:7f:0d:e8:e5:c5:82:7b:
         41:3b:e9:d2:df:bc:c2:3d:cd:27:8e:a2:7b:da:b8:4f:7e:bc:
         1c:74:1c:e7:70:ed:71:34:35:48:b2:d0:2d:87:21:27:b5:48:
         24:27:08:15:8b:e3:5a:d0:0a:1f:d1:cb:fa:08:af:6f:9c:70:
         b7:1b:c5:32:e1:92:e6:4c:39:3b:6d:6a:a0:63:f1:e8:27:8a:
         cf:f1:2d:6f:f4:2d:a2:41:0d:63:20:f5:1f:24:4b:c9:a8:d1:
         16:eb:57:8d
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUaMUsQGVjbiRsVLT9EziVIta/hf4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MTMyMzEzNDdaFw0yNDA3MTEyMzE4NDdaMDMxMTAvBgNV
BAMTKDk5MEI4REEyQzJDQjBFOEU2QThBQTk0ODA3NTdFMjQ0NDMwNkNDNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUFOoIYsOeDKNSwlxrJVyqCvw
GjrG+YTEdPyJLW4lAjht6HlaELoZ8RJvViM1Vd/eBrRQgmn+K/LAr101ZA9l2I9y
5KEyymwjgplx/DhVgNtv4ftIDbbWza6Pu0A46c0iTKYaNSsDIQjk9JLgkEu7X/qv
jWwgkOH5i0WC67B76LjDOMjrqgern8BQB0JU15NSUzrz/zNcNciYq4iTeoXUPL+P
VgTaLJCsompphPibuwBOoQn/WCK95p6f21G0huwVm3mhhgfggMpTHCDegDt7o3Jy
Y5BuZqTTydiKBUoJm2gbr40DgE30hEwRONwYLu2s0PaDaHhLwM9v9i8GINPJAgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSZC42iwssOjmqK
qUgHV+JEQwbMYjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9nY0wzVUVucUVCSzlkQkNKeTJnUDF6V1hnTTZKN3pjeGl2
Q2p3U3pwM2NqLzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9nY0wzVUVucUVCSzlkQkNKeTJnUDF6V1hnTTZKN3pjeGl2
Q2p3U3pwM2NqLzAvOTkwQjhEQTJDMkNCMEU4RTZBOEFBOTQ4MDc1N0UyNDQ0MzA2
Q0M2Mi5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLbX8MA0EAgACMAcDBQAo
BGEEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQbljANBgkqhkiG9w0BAQsFAAOC
AQEAQOjyL/PEilnoPquMixsBuVM+i21HDUi9XlK2cs0zZ8RXaRBnmg4smA5PySve
BjoiVCvqdZMMGXAMMpCuymirgdb9ACADr4iEHV+018SsxNS0ByFLO9UkBm+NTs+g
ECTCX9yi7pbpJY5JjckqTdVD9HoPzahG9mClp8RB/hatYd52vKhKZjKiVhqI0JhK
dgHpqaBMI4uBjJTNz3B/DejlxYJ7QTvp0t+8wj3NJ46ie9q4T368HHQc53DtcTQ1
SLLQLYchJ7VIJCcIFYvjWtAKH9HL+givb5xwtxvFMuGS5kw5O21qoGPx6CeKz/Et
b/QtokENYyD1HyRLyajRFutXjQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org