Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.cer
File:                     51DAA39E5D48A044D7B76228DAA9660C6147723A.cer (raw, json)
Hash identifier:          VBvMsj44s9WQePHHfP00dIWWSDgb+KbF+4CGctyUp6I=
Subject key identifier:   51:DA:A3:9E:5D:48:A0:44:D7:B7:62:28:DA:A9:66:0C:61:47:72:3A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       368B80A8C2966A2E5F28569F5AB288A244E07DFE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Sep 2023 22:51:31 +0000
Certificate not after:    Mon 02 Sep 2024 22:56:31 +0000
Subordinate resources:    AS: 270932
                          IP: 138.59.36.0/22
                          IP: 2804:73b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:8b:80:a8:c2:96:6a:2e:5f:28:56:9f:5a:b2:88:a2:44:e0:7d:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  4 22:51:31 2023 GMT
            Not After : Sep  2 22:56:31 2024 GMT
        Subject: CN=51DAA39E5D48A044D7B76228DAA9660C6147723A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a9:af:75:a7:c6:60:a1:bd:e9:8b:9f:62:e0:
                    b3:f1:e8:97:d3:62:14:dd:f7:22:a5:13:e0:ca:98:
                    ec:14:04:bd:86:3c:10:b5:57:42:a1:6e:2e:7b:04:
                    38:a6:c5:48:93:7f:e6:d9:9f:89:58:f2:73:31:37:
                    c5:be:49:0a:e6:ec:28:aa:51:e0:f0:5b:a6:18:a5:
                    b0:10:67:f3:ec:d9:bb:f2:f8:f8:ea:45:b9:c5:96:
                    7a:ad:84:1a:cf:a2:c5:fa:6c:c0:73:c0:6f:98:85:
                    cd:2f:bf:c1:ae:6a:42:dd:3b:d0:49:46:f8:b6:8f:
                    79:ee:f2:38:e2:fc:e3:bc:4d:83:7e:73:71:c7:34:
                    97:b2:6f:e9:bc:c9:30:40:8b:f6:fa:8c:78:d7:11:
                    44:b6:27:b4:6f:ff:1b:1b:2c:e2:c2:e5:4a:26:b1:
                    7d:13:ab:da:d6:b3:90:10:7a:4d:c5:bc:5a:a1:56:
                    01:ba:1f:4d:00:1a:78:c3:87:b2:fa:25:01:a6:93:
                    13:87:e2:3d:38:4e:fe:34:9d:0b:11:fe:54:61:31:
                    3c:98:d7:17:1f:03:1e:8c:98:b6:55:3c:e6:d8:8c:
                    d2:8c:97:6b:18:c5:eb:ee:e4:da:ca:a0:70:f9:7c:
                    42:cf:07:33:08:b1:20:28:d9:90:ff:d4:c2:cc:78:
                    cf:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:DA:A3:9E:5D:48:A0:44:D7:B7:62:28:DA:A9:66:0C:61:47:72:3A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.36.0/22
                IPv6:
                  2804:73b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270932

    Signature Algorithm: sha256WithRSAEncryption
         3b:c3:07:c6:b3:fe:dc:a7:54:d2:af:ce:c2:b4:e6:91:16:9e:
         03:0f:10:9b:b6:43:49:65:02:fe:c4:ef:d4:de:5c:43:bc:5d:
         7f:06:53:2b:f3:f6:5b:22:00:9d:c6:d8:36:9e:08:cf:a3:e3:
         0a:ac:ad:72:25:a3:6c:5a:90:b6:64:6c:23:1f:35:4d:c8:10:
         a7:ca:e3:13:de:61:32:b9:be:99:de:78:4c:a5:ab:18:0b:31:
         d8:9c:5c:d1:0a:e6:6b:c4:3b:75:ad:9d:93:c3:21:b5:54:c4:
         f6:e0:89:3c:d2:3f:db:e2:b3:38:04:b3:a2:85:5d:61:6e:22:
         05:bb:6d:ae:11:2b:79:d7:a6:e4:ea:9c:a0:dc:a8:f1:43:ea:
         a2:1c:62:5f:a8:cd:7e:71:c6:d4:8a:9e:c7:b2:43:b0:04:b5:
         61:56:c3:e5:79:ad:77:3c:31:7d:2a:64:27:b0:f3:1f:8a:33:
         0f:48:bf:78:a8:b1:ad:5f:3b:33:bf:7f:cd:68:a0:b0:b0:5c:
         db:a7:e4:96:55:b0:42:e8:8e:01:2a:84:73:8c:29:91:af:d8:
         5f:6a:8d:d9:ac:a3:2e:74:fa:24:2e:dd:31:2f:28:b7:16:84:
         cc:67:2e:07:3a:8e:19:14:d1:10:da:a3:e9:92:a5:68:d3:c4:
         4c:ad:6a:64
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUNouAqMKWai5fKFafWrKIokTgff4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MDQyMjUxMzFaFw0yNDA5MDIyMjU2MzFaMDMxMTAvBgNV
BAMTKDUxREFBMzlFNUQ0OEEwNDREN0I3NjIyOERBQTk2NjBDNjE0NzcyM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdqa91p8Zgob3pi59i4LPx6JfT
YhTd9yKlE+DKmOwUBL2GPBC1V0Khbi57BDimxUiTf+bZn4lY8nMxN8W+SQrm7Ciq
UeDwW6YYpbAQZ/Ps2bvy+PjqRbnFlnqthBrPosX6bMBzwG+Yhc0vv8GuakLdO9BJ
Rvi2j3nu8jji/OO8TYN+c3HHNJeyb+m8yTBAi/b6jHjXEUS2J7Rv/xsbLOLC5Uom
sX0Tq9rWs5AQek3FvFqhVgG6H00AGnjDh7L6JQGmkxOH4j04Tv40nQsR/lRhMTyY
1xcfAx6MmLZVPObYjNKMl2sYxevu5NrKoHD5fELPBzMIsSAo2ZD/1MLMeM8XAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRR2qOeXUigRNe3
YijaqWYMYUdyOjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DVmZzWnFaZ0g2OWFhdHZ0S3BNRmVWTXdNTlk3RmdzMzU4
dFFLelhWVVVIZS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQ1Zmc1pxWmdINjlhYXR2dEtwTUZlVk13TU5ZN0ZnczM1
OHRRS3pYVlVVSGUvMC81MURBQTM5RTVENDhBMDQ0RDdCNzYyMjhEQUE5NjYwQzYx
NDc3MjNBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKKOyQwDQQCAAIwBwMF
ACgEc7QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCJUMA0GCSqGSIb3DQEBCwUA
A4IBAQA7wwfGs/7cp1TSr87CtOaRFp4DDxCbtkNJZQL+xO/U3lxDvF1/BlMr8/Zb
IgCdxtg2ngjPo+MKrK1yJaNsWpC2ZGwjHzVNyBCnyuMT3mEyub6Z3nhMpasYCzHY
nFzRCuZrxDt1rZ2TwyG1VMT24Ik80j/b4rM4BLOihV1hbiIFu22uESt516bk6pyg
3KjxQ+qiHGJfqM1+ccbUip7HskOwBLVhVsPlea13PDF9KmQnsPMfijMPSL94qLGt
Xzszv3/NaKCwsFzbp+SWVbBC6I4BKoRzjCmRr9hfao3ZrKMudPokLt0xLyi3FoTM
Zy4HOo4ZFNEQ2qPpkqVo08RMrWpk
-----END CERTIFICATE-----