Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/995CA671BCB4BF29859E88524A16F3FB15F9BD0C.cer
File:                     995CA671BCB4BF29859E88524A16F3FB15F9BD0C.cer (raw, json)
Hash identifier:          0xV0jN9o6R83ZG2SbPx2k75piv8v0dLc0Eanj1xYMps=
Subject key identifier:   99:5C:A6:71:BC:B4:BF:29:85:9E:88:52:4A:16:F3:FB:15:F9:BD:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       31D7EA83B811BE532D140ACF17D249F83A861165
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/995CA671BCB4BF29859E88524A16F3FB15F9BD0C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Feb 2024 17:29:33 +0000
Certificate not after:    Tue 25 Feb 2025 17:34:33 +0000
Subordinate resources:    AS: 270305
                          IP: 201.216.120.0/22
                          IP: 2804:6a00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d7:ea:83:b8:11:be:53:2d:14:0a:cf:17:d2:49:f8:3a:86:11:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 27 17:29:33 2024 GMT
            Not After : Feb 25 17:34:33 2025 GMT
        Subject: CN=995CA671BCB4BF29859E88524A16F3FB15F9BD0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3b:47:7d:9f:f4:98:49:91:35:1a:1e:66:a0:
                    a2:c5:4b:ab:d8:4f:25:0c:19:fc:77:2d:92:87:25:
                    9a:36:f2:34:cd:22:86:a4:7e:b8:7f:40:08:2a:a6:
                    93:b6:ad:f2:61:9e:15:85:bb:01:59:be:21:3d:cc:
                    34:cc:00:64:cc:87:46:13:97:f1:32:5b:42:b4:d3:
                    fd:e9:24:4f:c7:f4:df:b3:5d:54:f4:ab:f1:2d:9c:
                    6c:c2:89:72:e1:ef:4d:f0:0b:9a:b4:f5:40:44:d4:
                    16:eb:de:96:73:d1:e8:58:56:b2:67:9d:9e:67:48:
                    5f:56:b0:12:1c:49:f1:4b:56:0b:ab:5e:b5:2a:21:
                    6a:10:ad:8f:ce:ab:5b:c9:9d:93:1c:81:e5:b6:30:
                    e8:17:52:f2:01:d5:b1:64:10:00:3a:bb:a8:ff:77:
                    43:b1:c5:7b:7b:9e:09:80:de:96:cd:05:2e:b6:c6:
                    c2:9c:f0:84:8f:18:f8:78:e9:cc:33:f9:4e:2b:75:
                    0e:6f:31:e5:d4:a9:b8:c5:de:14:22:db:a8:c5:1c:
                    ed:fd:5d:77:52:e8:30:84:fc:fa:89:91:47:f4:84:
                    75:ba:f4:19:dd:2f:e4:a9:f6:03:23:e6:5b:e3:84:
                    83:cb:49:91:e7:64:44:a3:d0:cd:ce:0b:ca:e0:3f:
                    fc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:5C:A6:71:BC:B4:BF:29:85:9E:88:52:4A:16:F3:FB:15:F9:BD:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/995CA671BCB4BF29859E88524A16F3FB15F9BD0C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.120.0/22
                IPv6:
                  2804:6a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270305

    Signature Algorithm: sha256WithRSAEncryption
         b2:4b:c2:b3:33:ce:91:22:00:f9:45:b7:14:44:93:17:32:d0:
         8f:44:6a:0f:33:f4:10:a0:45:df:fa:aa:86:2a:f4:de:17:79:
         f7:5d:cf:2f:56:eb:1c:4c:ba:eb:5a:a4:61:ac:23:2e:e5:fd:
         8b:34:a0:15:09:81:27:34:95:dc:80:52:7f:dd:ba:ea:2c:a2:
         f3:59:65:8c:9c:25:09:93:e0:98:31:be:2a:49:f5:f9:a0:21:
         1c:44:33:c6:55:f1:72:fd:0e:17:1d:09:97:ab:bc:90:62:73:
         21:53:93:8f:ad:85:11:ed:1b:bf:a3:77:a3:31:65:3a:7b:eb:
         11:e0:29:f4:ff:81:dd:a0:b0:ed:23:1c:cd:b1:9e:73:ce:c0:
         5d:3c:97:bb:b0:3a:8b:48:71:11:de:fe:c2:36:79:08:4a:61:
         10:5e:f4:54:1b:18:d4:9c:03:6f:cc:be:5a:44:00:bf:26:e0:
         24:8d:06:0d:a2:8b:f2:c4:d7:78:16:ac:29:a7:6d:b1:e3:58:
         80:64:ed:2c:57:d3:08:7c:a6:37:12:b4:bb:af:36:64:76:87:
         f2:58:1d:76:bd:d5:46:ec:ac:a9:9e:47:bc:62:10:c8:74:57:
         1e:d6:85:fd:ce:48:1f:25:05:cc:fd:9d:72:fe:b7:8b:e6:e0:
         7e:80:0f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org