Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.cer
File:                     06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.cer (raw, json)
Hash identifier:          k5fa8bjrcIC5+U4JaahNXnWEvForkrGhQZbeA7D0Q6s=
Subject key identifier:   06:C5:81:6B:AB:9F:3F:3A:B1:4C:DB:0A:4F:09:F6:FD:D0:56:D4:FB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       561FA55F015C32EBC1B170EFFB538ED10DE38DA2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Dec 2023 18:26:04 +0000
Certificate not after:    Tue 24 Dec 2024 18:31:04 +0000
Subordinate resources:    AS: 267077
                          IP: 45.228.104.0/22
                          IP: 2804:47cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1f:a5:5f:01:5c:32:eb:c1:b1:70:ef:fb:53:8e:d1:0d:e3:8d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 26 18:26:04 2023 GMT
            Not After : Dec 24 18:31:04 2024 GMT
        Subject: CN=06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b6:2b:e8:bd:5b:e3:77:3d:63:bc:d0:2b:1c:
                    12:ad:bf:67:0d:64:3e:32:b2:2f:0d:d9:97:73:92:
                    54:75:ba:aa:7c:ac:f4:23:7a:b5:2d:ba:31:a1:68:
                    24:df:bf:55:cf:50:15:a2:44:8a:f8:97:cb:5a:c9:
                    91:75:e0:8b:a5:2e:14:83:62:e9:4e:fb:e0:6c:ed:
                    6d:91:6a:40:65:62:6a:ff:6f:82:62:87:3f:16:01:
                    14:0b:08:b0:ec:7e:e2:b9:12:8a:2b:4c:3b:73:00:
                    04:7f:79:60:e1:2e:99:19:dd:86:3e:43:3d:ed:c2:
                    82:1b:17:f5:d0:a9:49:4d:3a:c4:dc:b6:c1:bc:13:
                    b1:7d:82:38:ac:5b:92:30:6a:c8:b2:cc:85:42:52:
                    46:f1:4a:bc:e4:85:16:9b:bf:ea:c5:fa:55:a7:57:
                    b9:33:4e:cf:d4:50:7c:00:c2:d1:2e:31:8c:1f:1f:
                    41:d7:cb:89:a2:2f:54:3a:a1:61:d7:5d:d4:ac:4e:
                    7d:5f:61:ed:fc:e1:f8:49:fd:0c:ed:b4:f5:e5:b2:
                    01:8d:a1:40:ff:c9:6f:b5:f7:3d:ce:ea:e8:25:0a:
                    3d:81:0d:a3:50:35:4d:41:f7:05:ba:21:ac:9c:28:
                    65:f4:da:55:97:02:87:40:18:e1:69:ad:86:56:2e:
                    15:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:C5:81:6B:AB:9F:3F:3A:B1:4C:DB:0A:4F:09:F6:FD:D0:56:D4:FB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/06C5816BAB9F3F3AB14CDB0A4F09F6FDD056D4FB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.104.0/22
                IPv6:
                  2804:47cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267077

    Signature Algorithm: sha256WithRSAEncryption
         81:66:f1:23:87:62:60:a9:00:50:f2:f7:3e:a7:09:73:cc:11:
         83:88:ef:21:c6:a5:04:4a:73:e7:99:69:e5:29:af:51:38:c0:
         6c:58:46:ff:c8:31:76:03:05:af:d5:74:f4:b0:cb:de:50:56:
         16:07:1f:84:44:75:bd:4e:7f:3b:32:63:75:f1:19:3f:40:89:
         2c:40:b9:b1:69:59:39:25:65:f6:38:56:75:09:34:96:47:be:
         0f:97:a2:30:41:5c:7b:6a:d6:cf:82:ad:b6:8b:37:c4:07:03:
         78:ac:37:39:8a:bc:8a:e2:2e:95:8c:41:7b:9b:0f:84:6b:cd:
         fe:e0:5e:75:3a:2f:d4:f6:cf:d5:c7:73:c6:57:6f:2e:04:d2:
         e8:64:f1:be:4d:a8:b8:a5:15:d8:20:81:6e:ae:44:04:69:0b:
         3c:2d:5a:4d:6f:ad:fd:19:4a:73:d9:34:15:d2:c9:aa:ae:80:
         e6:f2:90:f0:98:0f:ac:64:48:bd:44:6c:b3:dd:99:65:a1:0b:
         88:35:07:4f:8f:7f:18:17:b3:f2:25:dc:49:9c:9f:8d:f2:4d:
         ba:19:4d:5e:b9:f3:b9:49:72:6f:40:01:ba:a8:38:35:4e:8a:
         a3:9a:97:29:db:98:b0:81:be:17:1c:79:29:4a:a1:b2:f4:7d:
         fc:83:e2:9b
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUVh+lXwFcMuvBsXDv+1OO0Q3jjaIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMjYxODI2MDRaFw0yNDEyMjQxODMxMDRaMDMxMTAvBgNV
BAMTKDA2QzU4MTZCQUI5RjNGM0FCMTRDREIwQTRGMDlGNkZERDA1NkQ0RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRtivovVvjdz1jvNArHBKtv2cN
ZD4ysi8N2ZdzklR1uqp8rPQjerUtujGhaCTfv1XPUBWiRIr4l8tayZF14IulLhSD
YulO++Bs7W2RakBlYmr/b4Jihz8WARQLCLDsfuK5EoorTDtzAAR/eWDhLpkZ3YY+
Qz3twoIbF/XQqUlNOsTctsG8E7F9gjisW5IwasiyzIVCUkbxSrzkhRabv+rF+lWn
V7kzTs/UUHwAwtEuMYwfH0HXy4miL1Q6oWHXXdSsTn1fYe384fhJ/QzttPXlsgGN
oUD/yW+19z3O6uglCj2BDaNQNU1B9wW6IaycKGX02lWXAodAGOFprYZWLhUTAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQGxYFrq58/OrFM
2wpPCfb90FbU+zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84WmFVSkFnTVhqWXRaOHBlb0syeUJjSGR4akpTQVkyYjlT
elhzNDc2M0sxSi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5
U3pYczQ3NjNLMUovMC8wNkM1ODE2QkFCOUYzRjNBQjE0Q0RCMEE0RjA5RjZGREQw
NTZENEZCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt5GgwDQQCAAIwBwMF
ACgER8wwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBNFMA0GCSqGSIb3DQEBCwUA
A4IBAQCBZvEjh2JgqQBQ8vc+pwlzzBGDiO8hxqUESnPnmWnlKa9ROMBsWEb/yDF2
AwWv1XT0sMveUFYWBx+ERHW9Tn87MmN18Rk/QIksQLmxaVk5JWX2OFZ1CTSWR74P
l6IwQVx7atbPgq22izfEBwN4rDc5iryK4i6VjEF7mw+Ea83+4F51Oi/U9s/Vx3PG
V28uBNLoZPG+Tai4pRXYIIFurkQEaQs8LVpNb639GUpz2TQV0smqroDm8pDwmA+s
ZEi9RGyz3ZlloQuINQdPj38YF7PyJdxJnJ+N8k26GU1eufO5SXJvQAG6qDg1Toqj
mpcp25iwgb4XHHkpSqGy9H38g+Kb
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org