Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/99A22935239FC46D167B07A0FBAB7A827D2D8E27.cer
File:                     99A22935239FC46D167B07A0FBAB7A827D2D8E27.cer (raw, json)
Hash identifier:          c/Me6eeEDQDv5u3hdHciyZRKY7YvuVYMsS0eSWm6WNg=
Subject key identifier:   99:A2:29:35:23:9F:C4:6D:16:7B:07:A0:FB:AB:7A:82:7D:2D:8E:27
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       29938C61734C5FD8B1099D6208E1D3799AA8EBA2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/99A22935239FC46D167B07A0FBAB7A827D2D8E27.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 25 Dec 2022 13:14:05 +0000
Certificate not after:    Sun 24 Dec 2023 13:19:05 +0000
Subordinate resources:    AS: 61885
                          IP: 131.0.140.0/22
                          IP: 2804:1ac8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:93:8c:61:73:4c:5f:d8:b1:09:9d:62:08:e1:d3:79:9a:a8:eb:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 25 13:14:05 2022 GMT
            Not After : Dec 24 13:19:05 2023 GMT
        Subject: CN=99A22935239FC46D167B07A0FBAB7A827D2D8E27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:af:b6:fe:e4:ba:da:e7:08:06:e6:c5:f7:c0:
                    7d:ea:eb:62:16:ef:00:7e:7a:2c:b5:92:25:57:54:
                    fa:0e:ba:e1:d0:fb:b0:06:23:b8:5d:dc:f6:e7:52:
                    a0:8c:fc:98:41:00:41:3c:a8:e0:e1:96:f2:ef:36:
                    3a:88:6a:6a:db:91:b2:8e:01:97:d2:94:fc:73:23:
                    64:d3:51:70:26:60:07:bd:64:75:f6:34:02:e2:e1:
                    b2:6b:3a:cb:ca:0d:98:14:9a:40:85:8d:20:91:6f:
                    d9:39:7f:4a:03:63:b6:ba:a4:fa:19:64:b6:69:16:
                    16:9a:bb:93:f0:88:92:03:7a:05:73:49:8e:49:bd:
                    c1:0f:e5:52:27:c5:54:30:cd:27:d9:19:8f:b5:e3:
                    7c:3b:b4:c6:75:36:51:15:d0:ed:55:1d:b1:1d:a3:
                    97:4b:80:62:86:39:da:65:79:44:6d:59:c8:95:cd:
                    f5:16:88:98:7e:fc:c7:4e:51:2d:fe:05:57:b9:43:
                    26:cf:74:6a:76:c5:fd:1b:35:90:80:ff:13:fc:45:
                    bb:10:92:9e:e8:b9:1c:69:1f:a9:0b:0c:74:04:c7:
                    f5:ba:0e:d6:d6:91:4e:f6:8d:59:ae:eb:c3:65:29:
                    00:51:7f:ac:80:79:b7:0c:eb:f4:71:8b:17:9e:d8:
                    ae:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:A2:29:35:23:9F:C4:6D:16:7B:07:A0:FB:AB:7A:82:7D:2D:8E:27
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/99A22935239FC46D167B07A0FBAB7A827D2D8E27.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.140.0/22
                IPv6:
                  2804:1ac8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61885

    Signature Algorithm: sha256WithRSAEncryption
         05:ff:02:5e:1c:8e:ed:0f:27:67:b8:f0:36:f4:46:30:05:b6:
         4f:13:bb:44:63:da:3e:40:3c:34:7a:25:2b:14:f4:bd:90:97:
         8f:d6:f0:7a:ec:95:6e:6e:66:b0:fc:60:79:ab:53:9f:4e:ce:
         fd:0a:b0:8e:05:11:7f:5c:9f:3e:97:b1:1d:c7:c5:92:5a:f1:
         39:9a:3e:2c:f1:c3:e8:fb:20:03:8f:2c:89:1f:83:21:50:ce:
         fe:2b:56:bf:eb:2a:95:f6:07:ba:77:80:66:71:d0:58:de:c5:
         a9:35:e0:fd:e1:9d:1b:13:e5:a8:5d:49:95:97:d0:2d:5c:d9:
         07:88:fb:db:d6:c7:52:bf:e4:e2:6d:fd:66:98:2f:ee:71:0a:
         2a:9e:ad:3a:de:c3:f0:67:b1:41:94:84:3e:c0:49:f5:15:cf:
         2a:a7:f1:0b:ae:34:88:83:fd:2e:1b:11:14:cd:ac:2c:f5:6f:
         34:30:0e:c4:8e:23:f5:35:59:c5:2d:cb:96:6d:44:f8:9f:a4:
         83:32:43:2e:00:72:a9:81:98:a8:fb:f0:f2:63:c0:2a:32:ae:
         b5:ef:13:03:a1:b8:96:23:55:0b:08:66:5c:85:7b:9e:9b:a9:
         b7:44:03:e6:ca:57:49:51:37:3b:b2:45:83:d6:17:6d:80:e4:
         56:fb:99:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org