Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/99E22FDE9968EA6E814D18C26D75AFE82C90F5F4.cer
File:                     99E22FDE9968EA6E814D18C26D75AFE82C90F5F4.cer (raw, json)
Hash identifier:          Wteu6kynYyhOXKBWIYHcFTrvfDf2Vr65cTzS0VHVIMo=
Subject key identifier:   99:E2:2F:DE:99:68:EA:6E:81:4D:18:C2:6D:75:AF:E8:2C:90:F5:F4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5B99166070946F0F20879DD162682342DDA48C92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/99E22FDE9968EA6E814D18C26D75AFE82C90F5F4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Mar 2024 12:06:41 +0000
Certificate not after:    Thu 27 Mar 2025 12:11:41 +0000
Subordinate resources:    AS: 271236
                          IP: 201.54.180.0/22
                          IP: 2804:7858::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:99:16:60:70:94:6f:0f:20:87:9d:d1:62:68:23:42:dd:a4:8c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 28 12:06:41 2024 GMT
            Not After : Mar 27 12:11:41 2025 GMT
        Subject: CN=99E22FDE9968EA6E814D18C26D75AFE82C90F5F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:d1:96:8f:8d:e7:7a:d7:6e:2f:6f:3f:66:
                    03:aa:af:3d:7c:00:ac:d2:a5:c3:5a:a3:5a:a9:c2:
                    05:95:39:4b:88:12:e2:47:6e:de:07:2f:33:8d:37:
                    c2:7d:c9:04:fa:d9:ac:c6:b4:28:13:94:79:c0:4c:
                    d3:53:7d:cc:2e:aa:bf:7f:ee:50:09:dc:40:59:a7:
                    a2:b1:a4:61:80:c5:c3:93:42:52:95:ba:44:56:bc:
                    f9:bf:d0:56:6b:2b:05:b2:d2:49:7d:df:2b:f3:7d:
                    d1:05:c3:93:75:0e:0f:be:7c:9a:8e:4a:97:52:40:
                    99:8b:26:b3:46:49:05:6d:43:66:85:51:95:79:da:
                    02:64:53:17:f7:10:63:be:2b:69:ba:a2:22:a5:f4:
                    0c:29:e0:bd:54:3e:33:1b:4c:4d:4b:9d:2e:66:15:
                    5c:40:43:94:8b:a5:15:43:43:9c:90:44:4d:b4:e1:
                    38:fc:52:bb:a9:77:c6:8f:74:38:2a:f8:05:31:40:
                    72:35:b7:81:64:ea:85:8e:f6:57:45:bb:56:cc:74:
                    be:ac:24:74:19:da:60:fe:0b:09:f3:d4:22:8c:cd:
                    d4:fd:a7:bc:0c:7d:1f:da:7b:e7:33:cd:20:b0:bc:
                    81:55:c1:7c:4f:a3:96:bc:b2:fe:3d:56:a9:3d:1d:
                    e5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:E2:2F:DE:99:68:EA:6E:81:4D:18:C2:6D:75:AF:E8:2C:90:F5:F4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/99E22FDE9968EA6E814D18C26D75AFE82C90F5F4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.180.0/22
                IPv6:
                  2804:7858::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271236

    Signature Algorithm: sha256WithRSAEncryption
         21:93:25:a5:d4:81:a4:ce:86:cc:f4:7a:2f:55:7d:fe:27:ba:
         55:a5:9f:ad:78:11:59:cb:05:dd:e4:9d:a4:85:99:ca:8f:61:
         3e:4e:4f:56:3c:4e:58:36:ac:17:7d:10:c1:46:f3:42:f6:c1:
         3d:11:66:1b:ca:2f:0d:14:55:d9:82:e1:de:b3:a6:8d:ef:64:
         09:41:83:a1:85:d0:f3:d5:9b:16:cf:2f:ce:b0:24:0d:13:6d:
         a7:0b:ea:93:c8:8b:87:89:38:61:95:18:a7:3a:50:cb:37:89:
         03:3f:2a:bd:60:34:93:62:ce:16:9b:89:04:6b:22:b7:a5:95:
         4f:51:81:34:a7:37:af:ed:6b:ff:f8:37:1d:eb:eb:32:be:1c:
         1d:f5:6c:a5:fd:40:02:79:08:6c:87:a5:88:a4:42:c0:0a:ad:
         8b:82:81:06:2f:f5:a8:39:e4:69:1b:72:cb:16:6c:b4:9d:62:
         80:f0:73:0c:1d:9b:8c:9a:ff:f9:db:fb:d6:ea:a4:77:89:16:
         23:2e:4d:ce:4b:a1:24:65:f5:35:db:74:cd:1a:38:88:f4:e9:
         95:ec:18:ba:66:f7:4c:f3:c0:45:b4:7c:22:e2:01:dc:a6:e6:
         d4:25:0c:29:23:32:95:33:a6:05:64:c9:53:de:77:7c:dc:76:
         b8:59:43:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org