Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/517D1F1818A72DB5B8781751B5D74DCA53883B0C.cer
File:                     517D1F1818A72DB5B8781751B5D74DCA53883B0C.cer (raw, json)
Hash identifier:          ht8sOJDDaJTYz3q3FCnP7+eT0morwm5ztkDx3Hxhy+w=
Subject key identifier:   51:7D:1F:18:18:A7:2D:B5:B8:78:17:51:B5:D7:4D:CA:53:88:3B:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       785CB7DB281C4039E005CDEFC768A8ED8E6EF6A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/517D1F1818A72DB5B8781751B5D74DCA53883B0C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Nov 2023 20:56:26 +0000
Certificate not after:    Wed 27 Nov 2024 21:01:26 +0000
Subordinate resources:    AS: 268088
                          IP: 45.168.100.0/22
                          IP: 2804:57d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:5c:b7:db:28:1c:40:39:e0:05:cd:ef:c7:68:a8:ed:8e:6e:f6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 29 20:56:26 2023 GMT
            Not After : Nov 27 21:01:26 2024 GMT
        Subject: CN=517D1F1818A72DB5B8781751B5D74DCA53883B0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ca:85:f0:73:19:31:ee:9d:2c:8f:6e:45:ae:
                    45:f8:f5:58:f3:b0:2b:aa:af:2c:2b:b6:20:ba:b8:
                    ae:32:27:36:61:70:87:a0:27:0b:ad:92:8c:be:cc:
                    a9:4a:70:73:85:ba:1e:45:f2:97:cb:de:b8:20:b3:
                    04:09:bb:a2:9e:e3:6e:a6:0f:5e:22:ba:72:79:d1:
                    3d:8e:a3:13:a8:81:a6:24:32:fb:b6:b9:13:e6:6e:
                    41:e2:c9:2e:2f:7d:fe:f6:3f:5c:6f:96:c2:98:05:
                    9b:87:77:bb:78:c4:94:eb:ce:49:14:b2:07:5b:16:
                    06:ac:18:89:aa:f8:69:d4:b3:7c:0a:33:c0:e1:90:
                    08:80:22:e5:6e:3e:3d:0f:d7:1b:dc:91:48:f3:47:
                    3c:27:da:3c:b9:49:43:76:2f:40:6d:21:2d:42:cd:
                    81:51:01:03:dc:55:a3:af:86:43:5a:d2:7d:f8:9d:
                    f9:5f:db:c3:3a:31:e1:e0:cd:72:ab:ba:e2:bf:69:
                    96:eb:8b:3e:aa:a3:ed:c5:10:a1:1c:c0:e2:66:56:
                    2b:06:da:14:61:f3:7b:f8:74:87:4c:bd:6f:67:29:
                    ed:d5:ef:98:3d:c2:a4:4e:97:db:1b:76:07:41:1e:
                    e4:68:ba:09:23:b2:37:c1:6b:cd:8c:df:fb:c3:98:
                    0d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:7D:1F:18:18:A7:2D:B5:B8:78:17:51:B5:D7:4D:CA:53:88:3B:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/517D1F1818A72DB5B8781751B5D74DCA53883B0C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.100.0/22
                IPv6:
                  2804:57d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268088

    Signature Algorithm: sha256WithRSAEncryption
         6a:62:90:31:4c:b2:21:f6:5a:9d:2c:14:87:49:f9:f1:9d:12:
         23:83:b9:00:f3:60:9d:2b:18:fd:6e:a1:39:32:e0:e5:4e:88:
         0b:a1:f1:9e:4d:9e:0d:13:26:53:61:c4:f8:ab:15:a1:21:3d:
         fb:14:7f:a7:5e:ab:7e:95:ca:55:b2:5f:1f:95:86:55:71:db:
         5b:cb:02:cc:72:7a:c3:e3:64:79:1a:57:09:81:ae:34:78:95:
         71:09:f7:b1:aa:bf:4c:37:13:47:e3:c1:30:7c:6d:0e:13:a3:
         c4:a4:cb:fa:eb:54:a5:29:5e:e6:a2:f2:30:22:0c:0c:74:47:
         a5:d5:61:09:fd:75:67:7a:d7:ad:3c:2a:75:e4:39:b2:82:72:
         33:0d:8c:af:d4:07:49:88:d2:1e:9b:5b:00:0a:7f:91:e1:52:
         96:8e:95:5a:51:b4:4f:05:fa:ab:20:d5:0d:e8:60:4a:c8:4d:
         62:ec:59:34:e6:e8:18:7a:9d:fb:19:08:23:ed:9d:88:9e:38:
         b3:d0:6f:73:6a:d3:44:b5:64:28:1c:9f:b7:86:8e:b7:cc:29:
         20:74:e4:24:f6:ef:31:a7:6e:a4:28:20:c9:9d:fc:6e:31:bc:
         aa:fd:22:90:2d:5a:38:59:d3:7d:09:bd:54:a2:2c:35:58:87:
         9a:f0:b5:3a
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUeFy32ygcQDngBc3vx2io7Y5u9qAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMjkyMDU2MjZaFw0yNDExMjcyMTAxMjZaMDMxMTAvBgNV
BAMTKDUxN0QxRjE4MThBNzJEQjVCODc4MTc1MUI1RDc0RENBNTM4ODNCMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZyoXwcxkx7p0sj25FrkX49Vjz
sCuqrywrtiC6uK4yJzZhcIegJwutkoy+zKlKcHOFuh5F8pfL3rggswQJu6Ke426m
D14iunJ50T2OoxOogaYkMvu2uRPmbkHiyS4vff72P1xvlsKYBZuHd7t4xJTrzkkU
sgdbFgasGImq+GnUs3wKM8DhkAiAIuVuPj0P1xvckUjzRzwn2jy5SUN2L0BtIS1C
zYFRAQPcVaOvhkNa0n34nflf28M6MeHgzXKruuK/aZbriz6qo+3FEKEcwOJmVisG
2hRh83v4dIdMvW9nKe3V75g9wqROl9sbdgdBHuRougkjsjfBa82M3/vDmA3bAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRRfR8YGKcttbh4
F1G1103KU4g7DDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EdnhyVUNtblllVGtoMVFEalByb0d0QlAzM0VXbkFXaTRC
RUZCS3RNeHJ1RS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRHZ4clVDbW5ZZVRraDFRRGpQcm9HdEJQMzNFV25BV2k0
QkVGQkt0TXhydUUvMC81MTdEMUYxODE4QTcyREI1Qjg3ODE3NTFCNUQ3NERDQTUz
ODgzQjBDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItqGQwDQQCAAIwBwMF
ACgEV9AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBc4MA0GCSqGSIb3DQEBCwUA
A4IBAQBqYpAxTLIh9lqdLBSHSfnxnRIjg7kA82CdKxj9bqE5MuDlTogLofGeTZ4N
EyZTYcT4qxWhIT37FH+nXqt+lcpVsl8flYZVcdtbywLMcnrD42R5GlcJga40eJVx
Cfexqr9MNxNH48EwfG0OE6PEpMv661SlKV7movIwIgwMdEel1WEJ/XVnetetPCp1
5DmygnIzDYyv1AdJiNIem1sACn+R4VKWjpVaUbRPBfqrINUN6GBKyE1i7Fk05ugY
ep37GQgj7Z2Injiz0G9zatNEtWQoHJ+3ho63zCkgdOQk9u8xp26kKCDJnfxuMbyq
/SKQLVo4WdN9Cb1Uoiw1WIea8LU6
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org