Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/99F2926A1E8256108ADA6266745789A0F7A94858.cer
File:                     99F2926A1E8256108ADA6266745789A0F7A94858.cer (raw, json)
Hash identifier:          zMyTJLSbcpfmWAHgSPqCb697nKhYNCfyzAJwCkyUX5E=
Subject key identifier:   99:F2:92:6A:1E:82:56:10:8A:DA:62:66:74:57:89:A0:F7:A9:48:58
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       21931C2E5368DC64A858F0A4D0DD1A12DD305B74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/0/99F2926A1E8256108ADA6266745789A0F7A94858.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Feb 2024 17:38:08 +0000
Certificate not after:    Mon 03 Feb 2025 17:43:08 +0000
Subordinate resources:    AS: 263498
                          IP: 168.195.140.0/22
                          IP: 191.243.52.0/22
                          IP: 2804:12c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:93:1c:2e:53:68:dc:64:a8:58:f0:a4:d0:dd:1a:12:dd:30:5b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  5 17:38:08 2024 GMT
            Not After : Feb  3 17:43:08 2025 GMT
        Subject: CN=99F2926A1E8256108ADA6266745789A0F7A94858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d0:40:8a:9e:e3:c8:5e:e2:3c:be:af:5f:b1:
                    89:27:79:2b:b6:71:41:1f:c5:af:5c:da:17:b2:8e:
                    0b:d5:e9:ca:73:96:d3:c1:c2:54:17:0c:10:01:c5:
                    05:de:9d:8a:b5:88:a2:f8:9b:af:ab:04:d5:84:95:
                    d5:f7:fa:44:0f:42:01:49:d8:2f:c3:5d:d0:b0:31:
                    92:4a:b3:cd:1a:c1:86:3c:75:5b:7a:96:93:56:4d:
                    d5:3e:53:9d:b0:f0:5c:86:0f:ab:4d:88:a6:05:1c:
                    46:0b:d7:41:02:28:4d:03:65:60:bf:b1:59:1b:2d:
                    86:7d:38:32:06:5e:c5:b2:32:9f:dd:ef:03:98:b2:
                    91:bc:8a:2f:7d:69:84:26:4e:30:e6:ed:05:3f:ad:
                    e4:78:74:ac:61:bf:6b:5c:ac:3a:be:f4:c8:ad:b5:
                    b1:f2:07:a7:c8:f7:4c:4a:37:84:9e:bf:d9:cd:82:
                    3a:f6:45:04:f8:d9:e1:61:71:e3:ee:73:dd:02:14:
                    86:3a:84:ef:b4:d3:61:df:c9:c4:b4:f0:9f:0c:a3:
                    42:6b:64:2f:72:13:c8:da:c5:87:60:3e:d6:a6:29:
                    db:41:f1:27:96:24:44:21:6a:c6:e0:f9:c5:aa:db:
                    9d:38:d3:e1:eb:6d:43:d2:f0:d3:79:55:5e:5c:5f:
                    8f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:F2:92:6A:1E:82:56:10:8A:DA:62:66:74:57:89:A0:F7:A9:48:58
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/0/99F2926A1E8256108ADA6266745789A0F7A94858.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.140.0/22
                  191.243.52.0/22
                IPv6:
                  2804:12c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263498

    Signature Algorithm: sha256WithRSAEncryption
         a5:97:e7:8c:01:6b:68:0b:35:23:84:8d:3a:9d:ef:9c:91:da:
         85:25:a1:76:6c:e3:de:f0:7b:03:71:05:33:77:82:67:f1:4d:
         26:18:b7:7c:3b:0c:00:dc:94:b6:cf:a7:18:a2:14:e9:97:ff:
         5a:17:42:43:58:07:fe:f2:90:a5:f6:bf:79:3a:3c:47:bf:f5:
         eb:46:65:e7:f9:e8:50:90:2c:60:11:ad:01:96:1c:58:64:4b:
         74:63:d7:9c:6e:95:a9:30:8c:d3:5c:39:9c:26:dd:9d:46:ed:
         76:2c:f0:f7:3f:45:68:08:45:0e:4f:31:a6:91:73:a6:99:c8:
         4c:57:82:40:ce:92:f7:bd:f2:81:b3:df:92:95:73:16:32:dc:
         99:16:5b:74:aa:c7:cc:61:ce:d1:f7:47:37:02:5e:a5:92:a7:
         b3:c0:08:05:7a:22:cc:f7:e7:7c:c5:1d:30:58:96:c2:72:ff:
         19:c0:41:17:d5:ed:0c:a7:92:c2:bd:8f:7f:6e:d5:66:bf:95:
         6c:9d:a5:9b:a2:0a:95:a7:95:10:36:b9:29:6a:4f:5a:b2:2d:
         68:5a:e9:65:83:60:2a:83:84:0b:70:59:04:07:22:cf:1b:5b:
         62:9d:09:69:b7:a0:43:6e:06:f4:77:67:70:3e:7f:d8:9d:94:
         07:2b:7c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org