Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/99C63C069ABD0025CC2109C1E136C48494DCE33B.cer
File:                     99C63C069ABD0025CC2109C1E136C48494DCE33B.cer (raw, json)
Hash identifier:          qy+4ZlDlCCDC6c33qIVG1lE4lvvMY8P82QL230eTFcA=
Subject key identifier:   99:C6:3C:06:9A:BD:00:25:CC:21:09:C1:E1:36:C4:84:94:DC:E3:3B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0B45118401C724041600500D5E716CDD24A1CC04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/99C63C069ABD0025CC2109C1E136C48494DCE33B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 May 2023 10:31:13 +0000
Certificate not after:    Fri 10 May 2024 10:36:13 +0000
Subordinate resources:    AS: 268205
                          IP: 45.236.48.0/22
                          IP: 2804:4d90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:45:11:84:01:c7:24:04:16:00:50:0d:5e:71:6c:dd:24:a1:cc:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 12 10:31:13 2023 GMT
            Not After : May 10 10:36:13 2024 GMT
        Subject: CN=99C63C069ABD0025CC2109C1E136C48494DCE33B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9d:c3:be:19:05:01:8b:b9:61:54:7b:34:d5:
                    40:e0:9e:ab:9c:f9:39:ba:67:a9:a3:45:f1:a0:f8:
                    bc:8a:bc:49:6e:31:d8:00:3a:a5:4d:5f:9f:2b:66:
                    16:a3:06:af:06:a5:cb:37:09:df:25:66:9e:49:3d:
                    cc:69:b6:21:94:c3:b7:ef:e3:08:37:ea:5f:73:57:
                    63:fc:d2:77:5e:94:9d:b1:43:eb:1f:5a:b1:87:62:
                    0f:34:f5:3d:3f:f4:a0:b0:57:6d:b0:2b:58:90:65:
                    b9:9a:cb:56:84:e2:fd:4c:ac:b8:ab:25:96:d0:0f:
                    5d:0d:1a:e4:af:66:0e:04:e7:53:d4:fb:33:1c:85:
                    eb:d3:8b:0a:7f:0c:31:62:7e:7c:0f:6a:f3:f5:5b:
                    94:99:db:c2:73:e2:97:65:3e:d4:94:05:41:3e:01:
                    9f:bf:03:b9:f1:82:4a:e2:0f:a1:11:56:ca:e5:e5:
                    69:b5:62:1f:95:f4:86:b6:d9:b0:bb:ec:bd:8a:d7:
                    05:0b:06:e2:3f:60:12:5c:e9:99:fc:5c:b4:5a:6e:
                    8f:29:3c:5d:d7:41:1e:35:56:73:14:25:4c:3c:76:
                    41:e5:55:a9:db:26:00:21:79:e9:c6:a3:ac:24:4d:
                    a7:63:25:31:06:e7:b7:38:3b:0d:87:1b:f2:3a:82:
                    89:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:C6:3C:06:9A:BD:00:25:CC:21:09:C1:E1:36:C4:84:94:DC:E3:3B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/99C63C069ABD0025CC2109C1E136C48494DCE33B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.48.0/22
                IPv6:
                  2804:4d90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268205

    Signature Algorithm: sha256WithRSAEncryption
         8a:16:6b:c7:55:b9:54:0b:a3:55:b6:60:6c:64:48:bd:01:bb:
         67:d6:4a:72:55:9d:e2:d6:ba:eb:23:f0:15:b8:71:23:e2:4d:
         92:bc:57:77:90:b2:71:7c:0d:f3:67:98:16:ed:fe:83:ee:de:
         cc:10:f5:d5:ce:87:f7:16:85:b1:a4:c9:5e:88:01:bd:c7:83:
         5d:5a:c2:bf:ac:4b:e6:e0:2b:72:21:9c:a9:01:f8:f4:e1:86:
         ef:3d:1d:2e:3f:fc:4e:12:a6:3d:c4:a4:92:1f:44:16:85:1e:
         33:38:cc:74:76:bc:19:8b:93:de:45:fd:0f:ae:07:9a:dd:52:
         6f:f0:54:6a:6d:fb:41:83:2e:14:d5:6a:05:46:31:76:2a:c2:
         6e:43:a7:80:f6:be:48:5f:d6:c9:35:e1:1e:1c:ee:37:cc:a2:
         6e:16:18:6c:e6:9b:fc:ea:c4:9a:1b:5f:56:64:0a:49:8b:a0:
         55:3e:c1:70:83:3b:77:87:7d:a0:5e:b4:7b:4a:9e:6f:95:b1:
         a6:51:88:21:20:79:43:f6:e6:6c:b7:6d:6e:03:41:f8:73:f9:
         16:0b:18:8b:35:fa:7a:fe:98:24:7a:a1:f4:f2:44:6f:a1:6e:
         4f:14:91:85:1b:10:01:80:64:bb:45:40:3a:73:b7:95:d2:9a:
         70:19:e7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org