Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B29355F34D84FEFB940F79B0B63F241ED834BDD3.cer
File:                     B29355F34D84FEFB940F79B0B63F241ED834BDD3.cer (raw, json)
Hash identifier:          9Krf5KwKCcVQ17By4RVM1Ec7kKtlu+D3G65nFtFOSJg=
Subject key identifier:   B2:93:55:F3:4D:84:FE:FB:94:0F:79:B0:B6:3F:24:1E:D8:34:BD:D3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       19D2920B618D16E836D036404AD99141AA4214FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/B29355F34D84FEFB940F79B0B63F241ED834BDD3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Feb 2024 18:08:00 +0000
Certificate not after:    Wed 12 Feb 2025 18:13:00 +0000
Subordinate resources:    AS: 61697
                          IP: 201.7.212.0/22
                          IP: 2804:1ae4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d2:92:0b:61:8d:16:e8:36:d0:36:40:4a:d9:91:41:aa:42:14:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 14 18:08:00 2024 GMT
            Not After : Feb 12 18:13:00 2025 GMT
        Subject: CN=B29355F34D84FEFB940F79B0B63F241ED834BDD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:66:a9:db:6d:82:fa:61:95:ba:15:9e:1e:70:
                    84:e4:78:ed:db:b9:de:3b:53:d6:44:77:24:1f:55:
                    82:cb:46:a3:e7:4c:19:ca:87:9b:b0:52:19:9f:d4:
                    76:ff:29:ac:3b:2d:5e:fd:e4:a8:a8:d0:8a:26:17:
                    90:8c:12:82:32:0d:19:ab:a6:74:84:ba:39:47:fe:
                    21:36:48:11:15:4d:2e:6a:36:54:b3:90:08:ef:00:
                    b9:17:87:29:57:92:75:59:d6:31:23:52:5a:2d:65:
                    5f:62:59:5b:2e:8e:f4:a9:09:f6:52:f8:f8:ba:d4:
                    e2:1d:5f:d2:86:58:c4:76:05:a9:b3:32:a1:52:05:
                    51:e4:19:6e:06:da:8d:62:75:88:fa:ab:ae:6b:75:
                    0a:15:71:40:9c:52:e2:d3:b6:86:be:2e:25:fc:fd:
                    85:a3:7c:45:41:3c:79:00:86:c7:73:d7:fe:c5:67:
                    de:60:e8:b0:c3:8d:bd:d0:07:ea:b9:0b:05:cb:05:
                    d1:5f:5b:ae:53:93:e8:22:d1:81:8c:9f:d8:34:dc:
                    85:46:31:2c:79:c5:9d:b5:34:61:ed:ad:d9:8f:62:
                    09:e6:93:15:18:29:73:9d:25:93:7f:13:d6:90:c6:
                    4a:24:25:bf:98:f1:09:f2:43:2e:63:bc:08:76:5d:
                    11:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B2:93:55:F3:4D:84:FE:FB:94:0F:79:B0:B6:3F:24:1E:D8:34:BD:D3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/B29355F34D84FEFB940F79B0B63F241ED834BDD3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.7.212.0/22
                IPv6:
                  2804:1ae4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61697

    Signature Algorithm: sha256WithRSAEncryption
         12:5a:8f:c6:8e:92:9e:65:21:2f:71:9b:d7:2e:77:86:84:8e:
         b4:ff:fb:db:f7:6a:2c:45:dd:77:d9:47:b4:e7:63:27:41:02:
         e7:44:f3:a3:93:e2:b4:88:d5:1c:d2:16:ce:f0:e1:79:83:af:
         a2:30:af:74:71:4d:31:3c:d8:8a:60:43:89:77:e7:1f:74:87:
         cc:19:c6:23:04:87:8d:64:a0:32:d2:fd:73:56:47:95:cd:2f:
         6c:2e:77:44:98:09:c3:18:ef:4e:ec:ea:a7:f7:cf:5e:de:ea:
         51:3f:bc:0d:ac:8c:f7:ca:8d:93:d1:d0:d2:11:db:1d:a6:d1:
         a8:7a:3b:3e:60:ef:02:dd:d6:04:59:cb:3e:2e:41:7f:97:1f:
         d8:98:db:24:53:9e:a9:03:50:a0:46:28:9f:c8:48:63:55:76:
         67:4f:7a:14:88:ea:b8:ab:db:34:b3:94:60:5a:dc:b7:0c:52:
         7f:a9:26:a5:da:95:db:f2:b9:14:42:c6:31:42:10:d6:86:0c:
         53:6f:40:66:50:b1:c0:63:23:a4:11:6c:28:0a:d0:3c:9f:6a:
         72:b9:83:af:8b:38:a2:2b:2a:b4:32:0c:5e:5e:af:93:74:1b:
         6a:0b:c6:b9:c0:38:db:ae:fb:04:3e:22:1c:bc:aa:80:f5:76:
         4d:fc:1e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org