Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F59BFABDE7582A143051984BBF1D175614A6022E.cer
File:                     F59BFABDE7582A143051984BBF1D175614A6022E.cer (raw, json)
Hash identifier:          wtSlGzqp7TIgGVwIKt995MpVLLPw9VTRqjFnTLSE5lo=
Subject key identifier:   F5:9B:FA:BD:E7:58:2A:14:30:51:98:4B:BF:1D:17:56:14:A6:02:2E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5BBACCF92FF3E4CD57658203650C2E0951779FD4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/F59BFABDE7582A143051984BBF1D175614A6022E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Sep 2023 13:12:30 +0000
Certificate not after:    Fri 27 Sep 2024 13:17:30 +0000
Subordinate resources:    AS: 271573
                          IP: 200.0.179.0/24
                          IP: 200.6.134.0/23
                          IP: 201.131.106.0/24
                          IP: 2804:7da0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ba:cc:f9:2f:f3:e4:cd:57:65:82:03:65:0c:2e:09:51:77:9f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 29 13:12:30 2023 GMT
            Not After : Sep 27 13:17:30 2024 GMT
        Subject: CN=F59BFABDE7582A143051984BBF1D175614A6022E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:5a:0c:64:be:65:1c:c4:81:08:c8:81:76:
                    73:2d:52:b3:53:c8:82:c1:49:0d:5b:57:58:cb:f2:
                    24:10:9a:22:91:b5:06:07:63:61:60:6c:3a:5d:7b:
                    a7:18:a4:8b:ef:f7:7c:0d:47:4f:75:13:ce:bb:07:
                    41:f1:90:56:72:c2:f3:4e:13:25:3b:1e:b4:f5:ce:
                    61:8e:92:53:85:80:80:47:6c:7b:c3:a3:a1:e5:b9:
                    0e:a9:34:0e:ec:b6:bf:69:4e:86:ab:de:d8:8a:19:
                    b5:25:86:81:0a:f2:83:82:3b:7e:f2:f1:66:53:43:
                    18:67:00:fd:0e:07:5b:7d:18:7b:35:38:21:a9:67:
                    5a:30:d8:84:4a:94:80:35:b2:e5:a8:fa:c6:25:f0:
                    9b:5a:06:06:13:ce:6b:e0:1b:62:de:ef:e4:8f:ba:
                    8f:7c:94:ec:3c:7b:49:d3:a6:c4:2d:76:ce:da:2d:
                    45:04:d6:5f:20:f0:84:71:dc:c3:6e:35:19:59:85:
                    d3:b6:4b:65:0c:6a:54:72:85:63:79:48:d4:0a:66:
                    e3:e1:75:13:da:24:3e:9b:b3:9b:9e:b2:cd:3c:4f:
                    46:7e:3b:21:28:bc:99:e3:a1:c1:21:3c:ad:3c:e5:
                    5e:56:93:13:18:ef:6c:cc:d2:1b:3e:54:b9:d5:cc:
                    04:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:9B:FA:BD:E7:58:2A:14:30:51:98:4B:BF:1D:17:56:14:A6:02:2E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/F59BFABDE7582A143051984BBF1D175614A6022E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.179.0/24
                  200.6.134.0/23
                  201.131.106.0/24
                IPv6:
                  2804:7da0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271573

    Signature Algorithm: sha256WithRSAEncryption
         6d:a9:72:15:cc:f0:0d:3d:f8:17:08:2a:17:1a:a2:d0:26:42:
         12:86:55:19:b0:fe:1e:38:08:2a:6d:dc:18:c6:fa:45:b5:e1:
         6d:3b:d7:4e:b7:f4:39:74:30:05:b5:58:f4:2a:66:f5:23:e8:
         0c:c6:34:ab:ac:d5:eb:a7:e4:79:fa:45:68:9e:a3:56:56:3c:
         ab:5e:54:a8:1d:f2:72:31:b7:41:7e:2c:91:c2:04:ce:a3:1b:
         20:36:75:7a:ce:1f:6e:49:c5:b1:d1:52:9c:a6:31:cc:65:cc:
         d4:d3:93:6c:ad:2a:d8:24:8b:85:3e:1d:a7:58:d4:14:51:20:
         71:da:34:fb:a6:43:9e:a3:6d:86:0f:f6:68:32:8b:22:40:66:
         64:88:b6:9f:02:59:9a:a6:c0:45:e0:e3:7d:8e:c9:71:06:bb:
         41:67:bc:d5:5b:71:db:5b:97:e7:c5:6c:69:ff:af:7c:d1:0e:
         6f:68:5c:d4:35:66:06:10:6b:10:46:b4:99:b8:15:ee:9b:dd:
         84:a1:5c:dc:d0:74:28:3e:75:36:b7:1c:00:db:85:e2:da:b2:
         c9:27:52:6c:5d:05:70:02:d4:22:55:cf:3d:39:7b:08:08:27:
         2d:13:0a:0c:e1:be:49:7a:80:b0:6d:da:6f:d8:b3:1f:bc:25:
         60:a9:df:86
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIUW7rM+S/z5M1XZYIDZQwuCVF3n9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MjkxMzEyMzBaFw0yNDA5MjcxMzE3MzBaMDMxMTAvBgNV
BAMTKEY1OUJGQUJERTc1ODJBMTQzMDUxOTg0QkJGMUQxNzU2MTRBNjAyMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRAFoMZL5lHMSBCMiBdnMtUrNT
yILBSQ1bV1jL8iQQmiKRtQYHY2FgbDpde6cYpIvv93wNR091E867B0HxkFZywvNO
EyU7HrT1zmGOklOFgIBHbHvDo6HluQ6pNA7str9pToar3tiKGbUlhoEK8oOCO37y
8WZTQxhnAP0OB1t9GHs1OCGpZ1ow2IRKlIA1suWo+sYl8JtaBgYTzmvgG2Le7+SP
uo98lOw8e0nTpsQtds7aLUUE1l8g8IRx3MNuNRlZhdO2S2UMalRyhWN5SNQKZuPh
dRPaJD6bs5uess08T0Z+OyEovJnjocEhPK085V5WkxMY72zM0hs+VLnVzASXAgMB
AAGjggMnMIIDIzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT1m/q951gqFDBR
mEu/HRdWFKYCLjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GaEJzcVVUS1U3Vkt6a0JjSlFScEROQ2lnclRnY2JWWFpw
dld6TjNuYTUzcC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRmhCc3FVVEtVN1ZLemtCY0pRUnBETkNpZ3JUZ2NiVlha
cHZXek4zbmE1M3AvMC9GNTlCRkFCREU3NTgyQTE0MzA1MTk4NEJCRjFEMTc1NjE0
QTYwMjJFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBADIALMDBAHIBoYDBADJ
g2owDQQCAAIwBwMFACgEfaAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCTVMA0G
CSqGSIb3DQEBCwUAA4IBAQBtqXIVzPANPfgXCCoXGqLQJkIShlUZsP4eOAgqbdwY
xvpFteFtO9dOt/Q5dDAFtVj0Kmb1I+gMxjSrrNXrp+R5+kVonqNWVjyrXlSoHfJy
MbdBfiyRwgTOoxsgNnV6zh9uScWx0VKcpjHMZczU05NsrSrYJIuFPh2nWNQUUSBx
2jT7pkOeo22GD/ZoMosiQGZkiLafAlmapsBF4ON9jslxBrtBZ7zVW3HbW5fnxWxp
/6980Q5vaFzUNWYGEGsQRrSZuBXum92EoVzc0HQoPnU2txwA24Xi2rLJJ1JsXQVw
AtQiVc89OXsICCctEwoM4b5JeoCwbdpv2LMfvCVgqd+G
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org