Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/999929A8883AD7E8D9D48AC57A08777F5F0757DE.cer
File:                     999929A8883AD7E8D9D48AC57A08777F5F0757DE.cer (raw, json)
Hash identifier:          rZX8NDhvOEBRymzVfH4HEiPUs1kSdMXa+q8UB6knPNg=
Subject key identifier:   99:99:29:A8:88:3A:D7:E8:D9:D4:8A:C5:7A:08:77:7F:5F:07:57:DE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5A909A8691371301646A2C2CCD08138A9B7C14AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gvh2oYGds1N6jhtMSrDbf5Z4ikTcmqoZL9M772ZYzr1R/0/999929A8883AD7E8D9D48AC57A08777F5F0757DE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gvh2oYGds1N6jhtMSrDbf5Z4ikTcmqoZL9M772ZYzr1R/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 09 Dec 2023 16:55:09 +0000
Certificate not after:    Sat 07 Dec 2024 17:00:09 +0000
Subordinate resources:    AS: 268895
                          IP: 45.174.96.0/23
                          IP: 2804:5c38::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:90:9a:86:91:37:13:01:64:6a:2c:2c:cd:08:13:8a:9b:7c:14:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  9 16:55:09 2023 GMT
            Not After : Dec  7 17:00:09 2024 GMT
        Subject: CN=999929A8883AD7E8D9D48AC57A08777F5F0757DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0a:a8:b6:6a:24:7c:3d:09:68:77:cd:fe:58:
                    16:fe:71:18:17:c7:e5:99:84:b4:4b:68:48:42:ba:
                    6e:f6:74:56:ce:c9:04:75:d8:1f:3d:d1:84:58:22:
                    a9:3e:5f:70:2a:05:46:79:d4:99:2e:0f:d8:f7:ce:
                    3a:b9:c1:40:fa:21:4f:0c:21:e2:14:78:47:ea:39:
                    35:d5:84:5d:90:66:b5:70:ef:fb:22:a9:32:48:71:
                    a9:33:f1:49:56:1f:35:e5:8f:62:2d:31:be:fe:3b:
                    10:59:15:e4:59:5c:1e:48:ac:95:95:72:53:95:0d:
                    60:52:e8:72:b7:8f:66:61:60:ab:13:d4:4c:3d:5b:
                    e5:43:1e:76:01:52:56:f3:dd:89:c1:5d:12:81:f7:
                    90:9b:b9:0a:ce:ee:0b:bd:4c:e8:38:98:9c:54:51:
                    dd:65:f2:c9:4e:91:c4:24:a4:b7:64:04:0c:a7:5c:
                    78:25:a5:cc:49:32:b7:5d:c1:28:90:17:4e:19:89:
                    42:d7:09:42:7b:e8:c3:fe:1b:9d:07:b3:ce:aa:89:
                    80:51:0a:30:f7:64:14:eb:e3:c2:46:6f:55:0c:1e:
                    da:43:e4:69:42:ad:14:66:b3:29:33:69:66:74:62:
                    a2:e0:9e:69:5a:48:ef:a7:4e:b3:74:44:e5:22:85:
                    a4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:99:29:A8:88:3A:D7:E8:D9:D4:8A:C5:7A:08:77:7F:5F:07:57:DE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gvh2oYGds1N6jhtMSrDbf5Z4ikTcmqoZL9M772ZYzr1R/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gvh2oYGds1N6jhtMSrDbf5Z4ikTcmqoZL9M772ZYzr1R/0/999929A8883AD7E8D9D48AC57A08777F5F0757DE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.96.0/23
                IPv6:
                  2804:5c38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268895

    Signature Algorithm: sha256WithRSAEncryption
         12:ae:24:84:52:33:fd:59:36:a7:ea:f9:fa:f7:d8:7c:f9:98:
         04:20:4f:a7:29:13:42:d2:7a:1c:3c:58:9f:71:d6:de:80:58:
         ab:ca:cb:f7:60:49:97:f1:b5:b2:0a:cf:06:af:b1:53:b5:7d:
         3f:8e:d3:83:30:f5:2e:85:d7:8e:54:a2:4c:6a:bc:4d:2e:14:
         f8:bf:20:40:5d:31:64:47:a9:86:80:ec:bd:77:ed:8c:9c:86:
         35:40:4b:04:b0:77:7b:00:3e:78:8d:fe:f2:48:6c:11:38:a6:
         5c:06:14:b0:46:66:33:80:e5:7e:8c:55:b8:75:5a:9d:d4:b0:
         b9:d2:c3:2b:31:e4:8c:28:ad:09:ed:4d:f8:c5:4c:f5:60:eb:
         03:d8:5d:c8:54:4f:6e:79:7c:ab:bb:6c:42:a9:fa:1b:e4:02:
         35:ca:7d:42:2f:24:97:72:20:be:f8:74:5f:da:0b:f2:92:e4:
         43:a6:e5:46:67:a0:9a:5b:3a:90:b7:46:da:18:ec:f3:c4:8b:
         09:63:2a:6a:2e:04:9f:96:a2:8f:a6:3c:d0:36:d7:09:d2:5c:
         be:58:bf:29:8a:d9:11:99:88:1d:40:64:74:ea:66:4f:cc:9d:
         2f:47:3c:02:e0:79:6b:bf:c7:e9:90:99:52:0d:99:01:a3:3e:
         fc:3c:6c:ed
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUWpCahpE3EwFkaiwszQgTipt8FK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMDkxNjU1MDlaFw0yNDEyMDcxNzAwMDlaMDMxMTAvBgNV
BAMTKDk5OTkyOUE4ODgzQUQ3RThEOUQ0OEFDNTdBMDg3NzdGNUYwNzU3REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Cqi2aiR8PQlod83+WBb+cRgX
x+WZhLRLaEhCum72dFbOyQR12B890YRYIqk+X3AqBUZ51JkuD9j3zjq5wUD6IU8M
IeIUeEfqOTXVhF2QZrVw7/siqTJIcakz8UlWHzXlj2ItMb7+OxBZFeRZXB5IrJWV
clOVDWBS6HK3j2ZhYKsT1Ew9W+VDHnYBUlbz3YnBXRKB95CbuQrO7gu9TOg4mJxU
Ud1l8slOkcQkpLdkBAynXHglpcxJMrddwSiQF04ZiULXCUJ76MP+G50Hs86qiYBR
CjD3ZBTr48JGb1UMHtpD5GlCrRRmsykzaWZ0YqLgnmlaSO+nTrN0ROUihaRDAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSZmSmoiDrX6NnU
isV6CHd/XwdX3jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Hdmgyb1lHZHMxTjZqaHRNU3JEYmY1WjRpa1RjbXFvWkw5
TTc3MlpZenIxUi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vR3ZoMm9ZR2RzMU42amh0TVNyRGJmNVo0aWtUY21xb1pM
OU03NzJaWXpyMVIvMC85OTk5MjlBODg4M0FEN0U4RDlENDhBQzU3QTA4Nzc3RjVG
MDc1N0RFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAEtrmAwDQQCAAIwBwMF
ACgEXDgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBpfMA0GCSqGSIb3DQEBCwUA
A4IBAQASriSEUjP9WTan6vn699h8+ZgEIE+nKRNC0nocPFifcdbegFirysv3YEmX
8bWyCs8Gr7FTtX0/jtODMPUuhdeOVKJMarxNLhT4vyBAXTFkR6mGgOy9d+2MnIY1
QEsEsHd7AD54jf7ySGwROKZcBhSwRmYzgOV+jFW4dVqd1LC50sMrMeSMKK0J7U34
xUz1YOsD2F3IVE9ueXyru2xCqfob5AI1yn1CLySXciC++HRf2gvykuRDpuVGZ6Ca
WzqQt0baGOzzxIsJYypqLgSflqKPpjzQNtcJ0ly+WL8pitkRmYgdQGR06mZPzJ0v
RzwC4Hlrv8fpkJlSDZkBoz78PGzt
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org