Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/99DE7BA6BC9BE54FCA330650814B8D01D9E16E82.cer
File:                     99DE7BA6BC9BE54FCA330650814B8D01D9E16E82.cer (raw, json)
Hash identifier:          x+q3F8bFFXcBPEpFNFGmjbdz/y3heZPxT1PskwJaDfs=
Subject key identifier:   99:DE:7B:A6:BC:9B:E5:4F:CA:33:06:50:81:4B:8D:01:D9:E1:6E:82
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D1C3E66393164395BC788C6016ABBCB6F0DBA21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/1/99DE7BA6BC9BE54FCA330650814B8D01D9E16E82.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 18 Aug 2023 02:13:25 +0000
Certificate not after:    Fri 16 Aug 2024 02:18:25 +0000
Subordinate resources:    AS: 271343
                          IP: 200.39.36.0/22
                          IP: 2804:7a08::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1c:3e:66:39:31:64:39:5b:c7:88:c6:01:6a:bb:cb:6f:0d:ba:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 18 02:13:25 2023 GMT
            Not After : Aug 16 02:18:25 2024 GMT
        Subject: CN=99DE7BA6BC9BE54FCA330650814B8D01D9E16E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3a:73:c2:b7:39:e6:d2:a9:da:53:93:d7:e6:
                    22:e4:c7:dc:51:d9:cd:73:5d:90:63:9d:71:55:89:
                    9b:48:b9:d5:14:93:c1:b6:cd:68:90:11:4d:e4:b1:
                    c0:b7:6e:43:74:81:c6:a3:62:50:b4:51:1b:80:27:
                    e8:02:13:a2:7f:04:f1:53:ba:6a:5d:45:ae:2d:c1:
                    5c:6f:fa:b0:65:a2:fb:98:cd:3b:46:86:9b:c4:46:
                    4d:15:e7:09:b5:81:56:81:b4:dc:84:c2:6e:37:a1:
                    08:3b:77:9f:fe:d7:66:37:5f:b0:55:0f:6d:cc:c6:
                    bb:e9:3b:c1:13:ff:34:9b:6d:c9:51:cf:55:b0:af:
                    7e:48:d5:10:15:b5:a6:55:a4:f4:54:7f:b6:40:ed:
                    77:f2:d4:53:15:61:9d:a7:50:b1:b6:49:a0:24:5c:
                    ff:89:5b:e5:29:de:81:56:50:07:e0:03:a9:db:75:
                    09:b6:fd:81:2e:9d:4a:bd:ef:78:92:d4:3c:5a:fc:
                    93:c8:d0:eb:ce:87:9a:1f:3d:da:0a:47:c1:17:62:
                    7c:02:4f:a4:c5:d6:b2:8b:19:fe:2a:be:e4:81:e2:
                    19:c2:05:87:f1:38:6f:ee:ef:f7:58:49:a4:b9:bc:
                    dc:ea:5a:e3:a3:d0:ea:33:4a:a3:d3:05:0a:27:b9:
                    44:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:DE:7B:A6:BC:9B:E5:4F:CA:33:06:50:81:4B:8D:01:D9:E1:6E:82
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/1/99DE7BA6BC9BE54FCA330650814B8D01D9E16E82.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.36.0/22
                IPv6:
                  2804:7a08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271343

    Signature Algorithm: sha256WithRSAEncryption
         6c:ea:5c:21:80:7d:1e:d2:60:b0:4f:62:c6:5c:be:56:73:69:
         61:78:b9:f3:5c:40:d2:1d:fd:60:c7:29:9c:b1:1d:fc:ab:80:
         49:43:87:a4:9e:76:b9:20:ee:d2:17:08:41:5d:ec:a3:df:aa:
         c9:5a:a3:88:d2:e9:75:cd:a1:a4:7b:99:8f:8a:ae:ec:e7:e0:
         97:d2:7a:89:3b:b3:4d:ec:fa:d5:d6:30:07:2e:97:ca:35:95:
         cf:a3:e9:5b:65:88:d5:47:7b:f4:92:38:16:9a:2e:62:16:7e:
         11:f6:84:9a:e0:14:f7:20:23:53:26:06:8f:60:0f:03:2f:fb:
         59:a9:57:5e:46:73:b5:46:65:00:ed:50:13:4e:38:ef:a5:b9:
         4f:41:a9:72:a7:5e:54:b3:a0:df:98:d2:55:64:9b:b4:58:20:
         b6:52:c2:71:17:6a:43:b6:68:21:27:ac:76:bc:b6:b8:47:3d:
         fd:63:3d:70:c3:dc:e3:d2:b7:e3:88:69:92:2a:54:68:17:b3:
         f7:bc:28:1b:f2:e1:f9:9c:9c:53:8b:1e:bc:69:e1:1c:e3:a2:
         73:89:cf:75:26:8d:bf:63:51:8f:d3:97:77:41:5a:75:02:c3:
         2e:58:32:27:81:fe:b4:00:1a:7c:e5:a3:09:0a:93:f8:2a:cb:
         61:d5:98:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org