Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52.cer
File:                     52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52.cer (raw, json)
Hash identifier:          9YLRLgbefpZuwcZBAbEPcA488fwHS19xvmWc31nf2TQ=
Subject key identifier:   52:E1:AA:55:28:EE:C0:8F:20:FB:CD:16:90:FC:E7:FB:06:DF:5A:52
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4C5F6BDCEA67F2D65033A1EC0FBB0ACCD88FEDF2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Feb 2024 16:54:16 +0000
Certificate not after:    Fri 07 Feb 2025 16:59:16 +0000
Subordinate resources:    AS: 270838
                          IP: 189.39.180.0/22
                          IP: 2804:7230::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5f:6b:dc:ea:67:f2:d6:50:33:a1:ec:0f:bb:0a:cc:d8:8f:ed:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  9 16:54:16 2024 GMT
            Not After : Feb  7 16:59:16 2025 GMT
        Subject: CN=52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:84:55:0f:0f:33:37:35:f8:cf:69:e9:80:a3:
                    f4:99:3a:01:f0:c1:6b:2b:e7:01:7e:00:a7:00:25:
                    2c:a2:3d:6a:c5:31:e1:6e:4e:21:c5:4b:3f:65:d2:
                    5c:94:67:51:13:da:97:ca:df:9c:ad:41:2d:a2:c9:
                    10:4c:12:b5:e9:5a:9e:d5:40:8b:82:1f:54:93:bb:
                    eb:16:e5:0f:a3:42:c2:9c:47:37:89:73:28:26:0c:
                    b3:7a:85:1d:2f:49:2c:76:1d:89:72:29:cf:c9:7d:
                    58:c0:c8:82:76:33:bb:f4:95:40:02:7f:8c:4c:5e:
                    b0:2b:bc:b8:8b:3f:a9:47:32:20:6b:f6:bd:4c:6b:
                    63:ae:44:f5:4b:ef:0e:c8:fb:3c:9b:a5:e9:e6:e8:
                    aa:77:c3:ff:2e:5f:aa:4d:08:52:36:b6:27:50:77:
                    dd:5f:d8:38:ff:8f:39:a5:ed:c1:73:c3:8f:7a:bd:
                    ca:4d:db:3a:ba:97:57:60:dc:fa:fe:38:1e:df:49:
                    83:51:84:47:d1:3c:68:60:f6:cb:2b:b3:8a:8a:01:
                    ea:86:8d:ca:3c:62:66:12:e4:fb:48:88:2e:63:30:
                    37:3d:d0:3c:02:11:22:96:d6:6c:f4:a5:16:47:b6:
                    db:70:71:b4:1c:54:0b:83:ee:98:65:b0:c3:bb:64:
                    b3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:E1:AA:55:28:EE:C0:8F:20:FB:CD:16:90:FC:E7:FB:06:DF:5A:52
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/52E1AA5528EEC08F20FBCD1690FCE7FB06DF5A52.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.180.0/22
                IPv6:
                  2804:7230::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270838

    Signature Algorithm: sha256WithRSAEncryption
         79:39:72:25:be:83:2d:a4:94:e3:86:6f:c0:6f:45:63:19:a3:
         01:54:ae:c9:49:11:71:3f:64:d5:d5:d0:5d:43:7c:0d:d7:53:
         0e:1c:9e:6e:78:05:cf:43:13:5e:57:54:07:05:6d:ec:37:ce:
         1e:cc:f1:96:89:84:a8:e2:27:b6:4f:0d:a9:58:3f:c5:ba:da:
         88:ba:8f:3d:bb:23:3f:99:f6:42:af:a0:39:66:6d:40:1b:36:
         4a:22:cc:70:2c:33:bd:fa:71:e4:0b:d9:85:6e:5f:61:be:55:
         d7:06:45:21:89:aa:44:0b:86:c0:3d:92:4c:83:c8:47:70:3e:
         0b:a6:96:17:97:3c:53:2c:e2:54:0b:32:0c:69:fd:7a:6e:ee:
         51:5f:cc:f1:15:32:37:65:80:87:02:8b:f2:91:25:39:9d:6b:
         28:3d:ec:be:ba:03:1d:31:cb:9d:4e:bd:79:c8:9c:fd:77:d6:
         ab:8a:57:11:a8:1e:eb:61:d0:e4:de:df:73:dd:61:d7:0e:e7:
         dd:d3:b2:65:15:4b:97:7c:b9:82:4b:8e:be:20:66:3a:71:7b:
         6b:15:66:24:30:1f:08:bc:09:19:a8:05:29:3c:2c:ff:48:54:
         26:bc:7a:de:31:b0:b1:78:3f:26:3a:ed:1a:9b:8c:ff:96:f6:
         db:62:e8:dd
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUTF9r3Opn8tZQM6HsD7sKzNiP7fIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMDkxNjU0MTZaFw0yNTAyMDcxNjU5MTZaMDMxMTAvBgNV
BAMTKDUyRTFBQTU1MjhFRUMwOEYyMEZCQ0QxNjkwRkNFN0ZCMDZERjVBNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzhFUPDzM3NfjPaemAo/SZOgHw
wWsr5wF+AKcAJSyiPWrFMeFuTiHFSz9l0lyUZ1ET2pfK35ytQS2iyRBMErXpWp7V
QIuCH1STu+sW5Q+jQsKcRzeJcygmDLN6hR0vSSx2HYlyKc/JfVjAyIJ2M7v0lUAC
f4xMXrArvLiLP6lHMiBr9r1Ma2OuRPVL7w7I+zybpenm6Kp3w/8uX6pNCFI2tidQ
d91f2Dj/jzml7cFzw496vcpN2zq6l1dg3Pr+OB7fSYNRhEfRPGhg9ssrs4qKAeqG
jco8YmYS5PtIiC5jMDc90DwCESKW1mz0pRZHtttwcbQcVAuD7phlsMO7ZLNHAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRS4apVKO7AjyD7
zRaQ/Of7Bt9aUjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CU3hiZXp6ZVpBWng5ZExSN0FqNkJnVHk4OFYyYzN4WFR6
UVloWnoyRDlpay8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQlN4YmV6emVaQVp4OWRMUjdBajZCZ1R5ODhWMmMzeFhU
elFZaFp6MkQ5aWsvMC81MkUxQUE1NTI4RUVDMDhGMjBGQkNEMTY5MEZDRTdGQjA2
REY1QTUyLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK9J7QwDQQCAAIwBwMF
ACgEcjAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCH2MA0GCSqGSIb3DQEBCwUA
A4IBAQB5OXIlvoMtpJTjhm/Ab0VjGaMBVK7JSRFxP2TV1dBdQ3wN11MOHJ5ueAXP
QxNeV1QHBW3sN84ezPGWiYSo4ie2Tw2pWD/FutqIuo89uyM/mfZCr6A5Zm1AGzZK
IsxwLDO9+nHkC9mFbl9hvlXXBkUhiapEC4bAPZJMg8hHcD4LppYXlzxTLOJUCzIM
af16bu5RX8zxFTI3ZYCHAovykSU5nWsoPey+ugMdMcudTr15yJz9d9arilcRqB7r
YdDk3t9z3WHXDufd07JlFUuXfLmCS46+IGY6cXtrFWYkMB8IvAkZqAUpPCz/SFQm
vHreMbCxeD8mOu0am4z/lvbbYujd
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org