Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.cer
File:                     992B05C81720767E0664B7CD34B7C18285D2C1E2.cer (raw, json)
Hash identifier:          Sx3QoUJdpaWc7wV9mBPO2ZY50hEUb/AHHBnjrln1gz0=
Subject key identifier:   99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       58F149D139EB14D74F0FE8D33FA7C35181810E18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Sep 2023 08:16:16 +0000
Certificate not after:    Fri 27 Sep 2024 08:21:16 +0000
Subordinate resources:    AS: 269597
                          IP: 45.71.208.0/22
                          IP: 45.181.36.0/22
                          IP: 45.189.176.0/22
                          IP: 2804:6700::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f1:49:d1:39:eb:14:d7:4f:0f:e8:d3:3f:a7:c3:51:81:81:0e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 29 08:16:16 2023 GMT
            Not After : Sep 27 08:21:16 2024 GMT
        Subject: CN=992B05C81720767E0664B7CD34B7C18285D2C1E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:02:33:b2:eb:f8:8c:b9:3b:ad:8d:05:06:a9:
                    63:e7:ae:f4:08:56:4c:20:93:46:d7:ba:f2:1b:34:
                    f0:40:42:74:05:8e:78:aa:6c:ac:fe:db:e7:72:d0:
                    d3:25:99:4c:08:f4:e6:32:76:bc:01:af:87:13:bf:
                    8b:c0:13:0b:5a:37:9d:c4:24:e7:b0:c9:35:dd:2b:
                    42:1b:dc:e7:28:f5:5a:12:90:61:16:54:70:07:b3:
                    a0:20:9c:85:4f:5b:af:37:b7:1e:77:f5:57:6a:68:
                    9a:33:90:0d:28:28:b8:9a:15:52:99:9b:44:53:6a:
                    9d:7e:cc:21:3b:6b:c7:c3:2a:0c:57:79:be:59:ce:
                    7c:9b:33:f4:46:e8:dd:ab:f6:6c:f4:90:10:25:c2:
                    f2:d7:66:25:4e:67:c2:6c:03:73:0b:4c:db:8b:48:
                    12:19:3f:cd:9f:ff:57:32:5a:86:35:f9:1f:18:c5:
                    7c:33:8b:a3:c9:d5:37:04:cb:18:cd:b8:25:75:e1:
                    f0:1b:d1:d9:ee:c2:8d:96:45:8d:59:89:fd:66:93:
                    c1:5f:bd:98:e0:57:67:87:71:6a:bb:bc:4e:56:ef:
                    dd:85:05:62:24:d5:4c:42:de:9e:51:99:56:d9:db:
                    3a:fc:aa:4e:eb:64:e8:1b:4e:d3:fb:d3:19:9f:aa:
                    3b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:2B:05:C8:17:20:76:7E:06:64:B7:CD:34:B7:C1:82:85:D2:C1:E2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/992B05C81720767E0664B7CD34B7C18285D2C1E2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.208.0/22
                  45.181.36.0/22
                  45.189.176.0/22
                IPv6:
                  2804:6700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269597

    Signature Algorithm: sha256WithRSAEncryption
         77:a3:3c:c7:3a:7a:35:45:2b:43:32:b5:65:3f:0d:ff:9d:f6:
         73:4b:42:72:58:41:cc:13:2c:d6:43:e9:bb:e4:b2:b8:b8:b9:
         c3:88:ba:23:87:61:f0:5c:ae:53:69:a0:05:0b:f4:fd:d7:30:
         e4:24:47:15:12:96:9b:80:2d:17:2f:84:80:d1:a1:5f:32:41:
         a4:4c:2a:50:44:c4:42:40:cd:19:97:44:a0:fa:77:79:28:b3:
         90:0e:ac:c5:f7:1f:fb:fd:d2:52:3e:77:12:eb:f8:09:8a:e2:
         83:88:c5:d4:82:33:e7:1e:4d:8a:09:7f:9e:8b:42:57:9a:ad:
         d0:61:e1:1d:17:f1:66:e3:7a:87:a7:a0:37:b0:63:69:e9:83:
         7c:a6:26:3c:91:40:48:0b:37:4f:16:28:15:11:8e:72:f9:e0:
         39:2b:10:27:a0:f3:8d:78:61:a9:27:70:05:11:87:7f:0a:46:
         11:e5:39:30:42:13:6c:89:28:40:76:c1:fc:78:9c:72:f4:d9:
         df:67:0c:33:57:3c:6b:93:c6:5f:5f:0b:fe:37:28:74:cb:24:
         0b:7e:83:7b:85:a4:d3:ec:1d:09:5c:8b:8f:56:5d:0f:8f:aa:
         da:1e:cc:19:55:31:80:bd:eb:fc:ae:9f:08:de:ae:dc:ca:e4:
         1f:f9:00:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org