Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer
File:                     533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer (raw, json)
Hash identifier:          jrImwXx8ZSK2vXg7+qOlvF8siDjwV5M5f+nq3WryDEo=
Subject key identifier:   53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       43FDC50DF1A78B0E4EF2958F052F99C3F6A1444A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 31 Oct 2023 16:15:09 +0000
Certificate not after:    Tue 29 Oct 2024 16:20:09 +0000
Subordinate resources:    AS: 264969
                          IP: 170.0.112.0/22
                          IP: 2804:30b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:fd:c5:0d:f1:a7:8b:0e:4e:f2:95:8f:05:2f:99:c3:f6:a1:44:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 31 16:15:09 2023 GMT
            Not After : Oct 29 16:20:09 2024 GMT
        Subject: CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:38:1b:55:3c:53:ee:9f:ad:7e:73:e9:4d:1c:
                    7c:75:93:d1:77:c1:51:83:44:df:7f:49:92:de:c2:
                    66:57:29:47:90:11:28:35:a7:8c:37:bd:08:ed:f4:
                    04:98:ee:2d:23:64:84:d1:be:9a:20:6d:7c:d3:73:
                    4b:95:c6:07:e0:b8:87:da:52:27:fb:3a:68:f4:c2:
                    52:cd:13:42:9a:16:b1:50:cf:e9:6f:f6:be:2a:5e:
                    25:c7:36:6b:07:e9:c1:2e:cb:af:51:5d:d5:38:08:
                    ce:48:ae:a3:e9:38:e3:8e:0c:e2:f0:ee:1a:46:b8:
                    ab:c6:53:b8:18:13:7b:04:48:b3:2b:5f:65:ad:65:
                    ad:cb:2d:38:25:e9:a0:fa:8b:aa:aa:b9:bc:82:ca:
                    83:96:8c:cc:55:87:0e:12:58:13:c3:1d:24:9a:e3:
                    ea:8f:d6:80:fd:cb:40:b2:dd:24:66:e9:e1:26:9f:
                    b6:4f:97:56:5e:59:ab:10:76:ce:0e:3b:29:55:9e:
                    ca:ae:f2:03:72:7f:d1:45:46:5a:ef:b9:f3:c4:5f:
                    c2:9e:5d:2d:19:0e:61:99:70:f0:c2:9a:59:82:ce:
                    0c:b3:28:6b:3c:1d:d1:10:9e:00:20:38:9e:86:15:
                    11:25:47:d1:46:54:14:e4:8b:ed:40:a7:43:62:72:
                    ec:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.112.0/22
                IPv6:
                  2804:30b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264969

    Signature Algorithm: sha256WithRSAEncryption
         54:be:ed:7d:30:85:2b:ed:f1:cf:39:3c:48:5b:41:57:f3:46:
         2b:3d:21:b7:1c:ab:81:b5:dc:38:de:1c:db:66:fe:1e:a4:aa:
         cd:29:dc:14:f3:05:08:94:32:9e:a6:e0:f2:38:09:39:8b:ed:
         ac:98:92:6f:84:f7:74:0c:ff:f1:5b:38:f4:bf:72:3a:77:0a:
         20:db:3a:a8:61:3e:37:e3:56:57:ae:a5:7c:44:a6:ad:70:4b:
         47:bf:18:d6:c7:02:75:fc:77:43:4d:ca:ec:8c:d3:66:d0:05:
         72:f1:6c:d5:63:ad:eb:9c:9c:38:8e:f1:e5:7f:8b:a5:6b:30:
         33:b1:01:04:f4:85:96:5e:9f:95:41:3a:26:71:47:ac:a3:ae:
         cc:e3:5f:13:60:ae:45:4d:9b:fd:6c:3b:7e:42:a9:ce:af:83:
         10:3a:bd:11:55:90:a8:81:a9:c3:10:89:10:08:7e:2c:18:96:
         f1:4c:cb:bf:2f:77:f4:85:e8:06:60:ff:7a:e5:cc:73:40:ed:
         44:9f:4b:0c:0c:ed:ab:82:db:6d:f3:fd:7e:5e:e4:f1:d0:9c:
         2c:bb:ef:fa:7b:fb:c3:4f:cb:e8:11:58:3d:c0:dc:68:e7:a1:
         ab:0c:7e:15:35:86:fb:96:36:70:b2:ce:d9:45:ba:dd:24:ea:
         2e:f7:56:0d
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUQ/3FDfGniw5O8pWPBS+Zw/ahREowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMzExNjE1MDlaFw0yNDEwMjkxNjIwMDlaMDMxMTAvBgNV
BAMTKDUzM0JCNjFDNzZGNDNFRThFMDZBRTM4QTdEODY4RTQ1QjVFOUYzQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdOBtVPFPun61+c+lNHHx1k9F3
wVGDRN9/SZLewmZXKUeQESg1p4w3vQjt9ASY7i0jZITRvpogbXzTc0uVxgfguIfa
Uif7Omj0wlLNE0KaFrFQz+lv9r4qXiXHNmsH6cEuy69RXdU4CM5IrqPpOOOODOLw
7hpGuKvGU7gYE3sESLMrX2WtZa3LLTgl6aD6i6qqubyCyoOWjMxVhw4SWBPDHSSa
4+qP1oD9y0Cy3SRm6eEmn7ZPl1ZeWasQds4OOylVnsqu8gNyf9FFRlrvufPEX8Ke
XS0ZDmGZcPDCmlmCzgyzKGs8HdEQngAgOJ6GFRElR9FGVBTki+1Ap0NicuxTAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRTO7YcdvQ+6OBq
44p9ho5FtenzsDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84MTRRMnVyeDlDNFFKQVhLRW5zWHZkZGpocmtUU0RyMUFN
dkpaTUxDQmdUbS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vODE0UTJ1cng5QzRRSkFYS0Vuc1h2ZGRqaHJrVFNEcjFB
TXZKWk1MQ0JnVG0vMC81MzNCQjYxQzc2RjQzRUU4RTA2QUUzOEE3RDg2OEU0NUI1
RTlGM0IwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKqAHAwDQQCAAIwBwMF
ACgEMLAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAsJMA0GCSqGSIb3DQEBCwUA
A4IBAQBUvu19MIUr7fHPOTxIW0FX80YrPSG3HKuBtdw43hzbZv4epKrNKdwU8wUI
lDKepuDyOAk5i+2smJJvhPd0DP/xWzj0v3I6dwog2zqoYT4341ZXrqV8RKatcEtH
vxjWxwJ1/HdDTcrsjNNm0AVy8WzVY63rnJw4jvHlf4ulazAzsQEE9IWWXp+VQTom
cUeso67M418TYK5FTZv9bDt+QqnOr4MQOr0RVZCoganDEIkQCH4sGJbxTMu/L3f0
hegGYP965cxzQO1En0sMDO2rgttt8/1+XuTx0Jwsu+/6e/vDT8voEVg9wNxo56Gr
DH4VNYb7ljZwss7ZRbrdJOou91YN
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org