Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5298BEF89784E172203A0E1E33315AA21F420297.cer
File:                     5298BEF89784E172203A0E1E33315AA21F420297.cer (raw, json)
Hash identifier:          wsiWAFc3Jl6vsPrHUdhmfWEzjFIvHs/mxgbbYauPbgs=
Subject key identifier:   52:98:BE:F8:97:84:E1:72:20:3A:0E:1E:33:31:5A:A2:1F:42:02:97
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       47E03303AB364892DFFF1312FE392315A680D5D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/5298BEF89784E172203A0E1E33315AA21F420297.mft
caRepository:             rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Jun 2023 15:44:31 +0000
Certificate not after:    Mon 24 Jun 2024 15:49:31 +0000
Subordinate resources:    AS: 267436
                          IP: 181.191.0.0/22
                          IP: 2804:417c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e0:33:03:ab:36:48:92:df:ff:13:12:fe:39:23:15:a6:80:d5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 26 15:44:31 2023 GMT
            Not After : Jun 24 15:49:31 2024 GMT
        Subject: CN=5298BEF89784E172203A0E1E33315AA21F420297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:96:5d:f8:91:f7:91:37:a8:b2:fc:6c:7e:
                    58:a0:68:ca:ce:8f:55:2a:84:bb:31:9a:5e:e7:d5:
                    7d:d9:58:a7:26:ad:db:b2:10:ec:2e:8d:3f:ee:bf:
                    5c:ad:4f:f2:80:4c:80:db:74:3d:73:48:8c:01:db:
                    48:23:9e:be:ef:95:e9:e9:95:68:88:28:12:06:36:
                    09:85:8a:50:5e:0d:00:57:65:b1:60:41:2b:4d:0b:
                    df:b8:e8:04:37:da:7c:e7:a3:57:4a:1e:e8:a5:d8:
                    3e:31:db:b1:ae:e7:90:86:4c:9f:81:49:41:8b:a3:
                    51:ff:fe:05:70:c8:5b:1a:fe:29:4f:d6:55:3c:76:
                    eb:5c:9c:e3:45:30:0d:e5:42:0f:22:f7:fb:a2:6d:
                    84:39:12:20:8a:ff:30:6c:71:2c:e1:35:3f:c0:35:
                    df:58:17:62:7e:a1:f8:1b:90:b0:ed:ce:3e:35:0e:
                    33:a8:21:ab:eb:a9:b0:94:80:c1:18:c9:0a:ce:f2:
                    b2:84:02:71:3f:a6:0d:87:8f:e3:71:59:a6:29:c8:
                    e5:25:27:3a:73:7c:6a:e4:e9:c9:b1:93:12:34:a7:
                    ae:fc:0f:8f:cd:ad:11:4d:7d:ff:74:bd:80:dd:89:
                    91:31:21:e6:d3:b5:9a:a7:a0:68:2d:ea:f3:a3:52:
                    dd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:98:BE:F8:97:84:E1:72:20:3A:0E:1E:33:31:5A:A2:1F:42:02:97
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/27hAC1SmsFLNA6MiFDwXGjouYh8oCmmcsfapvSpz1aMu/0/5298BEF89784E172203A0E1E33315AA21F420297.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.0.0/22
                IPv6:
                  2804:417c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267436

    Signature Algorithm: sha256WithRSAEncryption
         39:b0:98:3f:72:d9:6f:05:de:2e:09:d1:0f:bf:c5:6e:f9:87:
         f5:92:e7:ff:5a:f8:7e:c1:8c:69:71:43:f1:7e:32:8d:b6:ef:
         ba:4f:f4:57:aa:08:51:5c:21:a8:e5:cf:95:a9:ff:79:eb:5e:
         b4:db:69:57:1b:5c:04:35:b9:cd:b5:a6:22:fa:f4:45:e1:a9:
         8f:ed:45:dc:c8:33:03:f2:fd:f4:a7:0d:e9:20:d9:65:a4:fb:
         e3:de:60:d2:6a:95:f0:df:d2:ca:cd:7c:b7:47:03:58:8e:0b:
         c3:cd:47:8e:8f:84:90:3f:95:47:30:8d:d1:47:bd:d6:bb:fc:
         38:1a:99:fb:be:ca:12:00:75:ab:5c:c3:4c:ce:9b:d0:63:9b:
         c1:de:36:ea:2b:27:7b:bb:2c:48:72:91:59:ef:cb:06:d8:bb:
         7b:5a:11:be:b8:2a:ed:39:7f:9d:66:6f:27:d7:31:b4:ab:b6:
         84:95:64:30:31:38:44:f4:64:7b:23:cf:18:35:0d:ff:53:16:
         34:a9:e3:94:bd:6a:c7:ec:35:e1:d5:a1:84:26:92:23:4d:21:
         16:0e:90:34:69:a3:1d:64:92:d2:ae:ec:9e:da:0a:fd:77:57:
         9b:32:d1:1f:86:3f:60:69:76:b2:ac:01:c8:0e:a9:fa:e5:96:
         0d:dd:c4:53
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUR+AzA6s2SJLf/xMS/jkjFaaA1dgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MjYxNTQ0MzFaFw0yNDA2MjQxNTQ5MzFaMDMxMTAvBgNV
BAMTKDUyOThCRUY4OTc4NEUxNzIyMDNBMEUxRTMzMzE1QUEyMUY0MjAyOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8JpZd+JH3kTeosvxsfligaMrO
j1UqhLsxml7n1X3ZWKcmrduyEOwujT/uv1ytT/KATIDbdD1zSIwB20gjnr7vlenp
lWiIKBIGNgmFilBeDQBXZbFgQStNC9+46AQ32nzno1dKHuil2D4x27Gu55CGTJ+B
SUGLo1H//gVwyFsa/ilP1lU8dutcnONFMA3lQg8i9/uibYQ5EiCK/zBscSzhNT/A
Nd9YF2J+ofgbkLDtzj41DjOoIavrqbCUgMEYyQrO8rKEAnE/pg2Hj+NxWaYpyOUl
JzpzfGrk6cmxkxI0p678D4/NrRFNff90vYDdiZExIebTtZqnoGgt6vOjUt2hAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRSmL74l4ThciA6
Dh4zMVqiH0IClzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yN2hBQzFTbXNGTE5BNk1pRkR3WEdqb3VZaDhvQ21tY3Nm
YXB2U3B6MWFNdS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMjdoQUMxU21zRkxOQTZNaUZEd1hHam91WWg4b0NtbWNz
ZmFwdlNwejFhTXUvMC81Mjk4QkVGODk3ODRFMTcyMjAzQTBFMUUzMzMxNUFBMjFG
NDIwMjk3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK1vwAwDQQCAAIwBwMF
ACgEQXwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBSsMA0GCSqGSIb3DQEBCwUA
A4IBAQA5sJg/ctlvBd4uCdEPv8Vu+Yf1kuf/Wvh+wYxpcUPxfjKNtu+6T/RXqghR
XCGo5c+Vqf95616022lXG1wENbnNtaYi+vRF4amP7UXcyDMD8v30pw3pINllpPvj
3mDSapXw39LKzXy3RwNYjgvDzUeOj4SQP5VHMI3RR73Wu/w4Gpn7vsoSAHWrXMNM
zpvQY5vB3jbqKyd7uyxIcpFZ78sG2Lt7WhG+uCrtOX+dZm8n1zG0q7aElWQwMThE
9GR7I88YNQ3/UxY0qeOUvWrH7DXh1aGEJpIjTSEWDpA0aaMdZJLSruye2gr9d1eb
MtEfhj9gaXayrAHIDqn65ZYN3cRT
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org