Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CA298D59E7C66D747401ACF553288EF82DA95796.cer
File:                     CA298D59E7C66D747401ACF553288EF82DA95796.cer (raw, json)
Hash identifier:          nd10BVN7CTcUfbBZU+TB3qeexjkb2q+ipGvVfanCw44=
Subject key identifier:   CA:29:8D:59:E7:C6:6D:74:74:01:AC:F5:53:28:8E:F8:2D:A9:57:96
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       674667572EC99D78ED3DCEF737C92228230EC771
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/CA298D59E7C66D747401ACF553288EF82DA95796.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Mar 2024 13:43:05 +0000
Certificate not after:    Thu 06 Mar 2025 13:48:05 +0000
Subordinate resources:    AS: 272753
                          IP: 187.109.112.0/22
                          IP: 2804:8824::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:46:67:57:2e:c9:9d:78:ed:3d:ce:f7:37:c9:22:28:23:0e:c7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  7 13:43:05 2024 GMT
            Not After : Mar  6 13:48:05 2025 GMT
        Subject: CN=CA298D59E7C66D747401ACF553288EF82DA95796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:71:15:54:e6:00:8f:da:08:2e:db:e0:b2:
                    ba:3b:e2:70:70:0c:10:99:80:68:52:d4:1d:dd:c2:
                    51:2e:bc:14:68:4d:79:00:ef:36:78:da:7f:fb:fb:
                    da:f3:0e:28:c5:08:b6:61:d9:62:99:b8:64:af:f3:
                    8d:ff:60:21:aa:ac:02:2c:b1:10:09:c5:91:76:1b:
                    f1:39:9b:40:e7:e9:3c:b0:8b:a9:05:31:4f:24:b8:
                    43:0e:1e:ff:f4:91:3a:17:be:d7:d4:76:64:36:e6:
                    4b:96:a0:63:64:29:a9:6c:6f:9a:50:59:0b:a5:a4:
                    d7:3f:5b:4c:7f:36:0d:04:34:10:7d:23:8d:b0:f9:
                    47:9e:1f:33:0e:e0:91:a5:e1:16:d3:49:f7:2e:da:
                    cd:6e:a5:86:f5:e4:1d:4a:2f:d9:32:14:10:0e:d6:
                    c6:27:15:28:dc:b1:77:ce:71:2d:5d:38:68:2e:54:
                    1c:a0:7c:07:53:9f:c2:51:ab:d6:fc:11:91:ed:67:
                    5d:6f:46:6e:fb:38:0f:99:b4:e3:06:2d:a7:10:20:
                    ab:1b:ae:a8:9b:90:4a:f4:db:1e:39:b5:6f:d2:e5:
                    27:3f:bb:5b:c0:8e:50:bd:f3:27:9a:11:be:b8:ff:
                    a5:90:cb:87:53:c7:82:04:bb:06:b5:91:71:df:22:
                    64:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:29:8D:59:E7:C6:6D:74:74:01:AC:F5:53:28:8E:F8:2D:A9:57:96
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/CA298D59E7C66D747401ACF553288EF82DA95796.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.112.0/22
                IPv6:
                  2804:8824::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272753

    Signature Algorithm: sha256WithRSAEncryption
         2b:76:00:92:2b:91:e7:a2:32:14:9a:9b:12:82:f1:b7:fc:87:
         7c:25:21:c1:fe:7f:40:19:d1:66:90:5f:d6:b8:a0:75:b4:0f:
         2b:3c:82:cf:1a:1e:2b:a5:5a:8f:22:67:53:53:6b:c3:02:5c:
         1d:46:e7:cc:d8:2f:67:12:17:d7:8c:b3:09:35:78:87:7f:4e:
         0a:23:c9:03:c6:e0:61:50:aa:f1:47:6f:f3:d4:c6:dc:f8:85:
         cc:9f:fa:c3:b7:e8:72:4f:0d:69:a9:5c:13:e1:f7:05:f6:e2:
         20:95:b0:50:c1:bb:31:92:0f:75:41:65:6c:73:ae:28:14:bf:
         0d:7e:2b:5a:20:e2:4d:9c:eb:28:f0:78:66:aa:27:7c:87:0b:
         af:84:dc:43:bb:50:12:b2:74:89:60:1b:3f:69:d1:be:bf:c5:
         6f:a5:9b:ab:e6:71:49:f7:58:a3:24:bd:a0:45:77:b4:c1:70:
         be:ac:24:13:d0:3d:02:c7:0c:22:bd:df:fa:9b:ad:a9:85:dc:
         ec:a8:fe:96:a7:2e:5a:f9:51:80:f5:53:79:9c:9a:c0:36:85:
         dc:a5:d3:54:fa:4a:76:c6:bf:d6:3f:3d:25:e5:06:51:fd:a7:
         1f:7f:d2:0b:76:03:de:63:96:e0:89:4e:71:b1:ec:51:ea:f0:
         1c:af:13:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org