Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/992EBC162AFA257711721FED3599425F3A2B0077.cer
File:                     992EBC162AFA257711721FED3599425F3A2B0077.cer (raw, json)
Hash identifier:          BIYfJc83pQ6Cb+StZ1BgLFy9nf72XUbyw2aETDssaS4=
Subject key identifier:   99:2E:BC:16:2A:FA:25:77:11:72:1F:ED:35:99:42:5F:3A:2B:00:77
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2FB9A4863D57A7B34291E30D03C3BA486D97C57D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/992EBC162AFA257711721FED3599425F3A2B0077.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Mar 2024 20:21:21 +0000
Certificate not after:    Thu 06 Mar 2025 20:26:21 +0000
Subordinate resources:    AS: 268077
                          IP: 45.168.168.0/22
                          IP: 2804:57a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b9:a4:86:3d:57:a7:b3:42:91:e3:0d:03:c3:ba:48:6d:97:c5:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  7 20:21:21 2024 GMT
            Not After : Mar  6 20:26:21 2025 GMT
        Subject: CN=992EBC162AFA257711721FED3599425F3A2B0077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:46:b4:ff:d6:02:3a:4a:c0:d2:ed:d0:3c:d1:
                    eb:a7:8c:77:a1:f5:f3:98:ac:23:44:03:3c:ad:8f:
                    0c:e1:87:2e:a9:05:5d:b0:f2:1b:51:ed:06:65:2a:
                    ac:87:48:f4:ba:5f:29:5f:6a:be:c1:8a:40:79:d6:
                    ea:36:b2:2c:79:26:4a:b3:d7:8b:a1:39:21:55:59:
                    19:0f:33:05:b8:a0:07:74:47:2d:67:4f:10:46:1d:
                    c4:1a:04:ec:6b:0d:07:a8:b1:f7:b6:05:a2:5a:fa:
                    f8:08:04:e5:15:23:63:38:0c:29:33:91:a2:d0:83:
                    59:a1:74:d8:3c:54:a4:13:16:ec:68:0d:01:68:a2:
                    f8:2a:3b:81:c9:d2:c3:5e:11:d8:bd:ee:f4:f2:dc:
                    c0:86:f6:f9:08:15:0b:06:0c:8d:29:e5:44:96:be:
                    9e:8e:95:3c:39:8b:7c:ba:7a:76:fe:80:e9:18:d6:
                    79:d9:7a:91:66:a1:32:21:20:72:64:6f:5d:97:52:
                    1f:f0:90:f1:6c:9f:b6:9d:6f:40:46:73:c8:93:5e:
                    92:96:d9:8b:48:dc:58:49:e1:3e:b4:94:9b:92:04:
                    68:49:43:db:51:df:75:f5:a6:e1:d2:10:df:6e:7b:
                    03:1c:d1:74:32:9a:49:1d:f0:f7:31:5f:4e:60:8e:
                    0e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:2E:BC:16:2A:FA:25:77:11:72:1F:ED:35:99:42:5F:3A:2B:00:77
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/0/992EBC162AFA257711721FED3599425F3A2B0077.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.168.0/22
                IPv6:
                  2804:57a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268077

    Signature Algorithm: sha256WithRSAEncryption
         62:a3:12:fc:08:79:3e:fa:a4:f6:3e:90:16:06:17:dc:ab:27:
         58:5e:43:ff:38:2e:cc:4f:5f:f0:5a:15:16:d5:78:3d:a2:55:
         4d:3b:5b:92:83:c5:b4:6a:0e:96:64:e1:4d:24:a1:b0:d0:bb:
         41:9d:38:2d:c7:52:2b:61:62:af:49:f6:6c:0b:d3:57:98:b0:
         19:cd:7a:4e:36:2c:da:bd:48:d9:3b:11:1a:57:2d:40:de:6e:
         9c:a9:77:83:9f:c1:6a:85:79:86:be:f1:2c:e2:15:c1:a4:4d:
         64:f1:af:18:1e:04:05:90:d9:c1:b5:ea:19:86:01:cf:2d:9d:
         2a:fe:98:50:bc:48:55:de:f2:fc:c7:4c:fd:89:b7:c1:1a:31:
         89:1e:2a:f8:78:df:18:63:b3:7d:79:44:b5:1f:83:75:f7:74:
         66:36:ee:e2:28:55:fc:8d:47:f4:bc:2d:34:60:a6:93:f8:79:
         a6:48:3d:fe:cd:48:30:3b:3a:33:24:9c:f0:e5:c5:1f:81:07:
         9b:76:c2:0c:58:79:a1:ab:7e:c9:af:a4:21:71:20:09:28:aa:
         93:b7:2c:0e:2c:45:fb:b0:7e:11:6c:22:7d:d8:db:e4:58:69:
         c4:dc:f2:72:dc:83:e5:15:46:e0:8a:1c:2f:65:fa:a5:63:32:
         7d:f1:c8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org