Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5489051296CE799761D50A1125A05964C2356CDC.cer
File:                     5489051296CE799761D50A1125A05964C2356CDC.cer (raw, json)
Hash identifier:          ogNz7iqfUxDKgi2nKcOeTG3nmDEWnu6eFVFNBpH2J2A=
Subject key identifier:   54:89:05:12:96:CE:79:97:61:D5:0A:11:25:A0:59:64:C2:35:6C:DC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       37675F5C710EBA59F963ECD344D4D237D2E73D28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/tnF2HwQqQZKxzeuGVAo1PtvXvWhhiHJbz5rMnN1Ko9R/0/5489051296CE799761D50A1125A05964C2356CDC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/tnF2HwQqQZKxzeuGVAo1PtvXvWhhiHJbz5rMnN1Ko9R/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Oct 2021 00:24:29 +0000
Certificate not after:    Tue 11 Oct 2022 00:29:29 +0000
Subordinate resources:    AS: 267524
                          IP: 201.182.172.0/22
                          IP: 2804:42c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:67:5f:5c:71:0e:ba:59:f9:63:ec:d3:44:d4:d2:37:d2:e7:3d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 12 00:24:29 2021 GMT
            Not After : Oct 11 00:29:29 2022 GMT
        Subject: CN=5489051296CE799761D50A1125A05964C2356CDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8b:e8:66:29:b4:a9:10:fa:c1:c8:07:da:57:
                    eb:32:ee:a7:17:20:b0:98:b0:3f:1c:d6:1a:df:1e:
                    9a:26:e9:63:e0:b4:b5:1d:c3:77:11:01:2a:00:1d:
                    78:e0:bf:5d:88:51:e4:2b:05:d0:4b:42:15:b5:24:
                    58:6b:0f:5d:75:ee:1c:7f:a4:a6:d0:b2:39:69:93:
                    f4:d9:1b:1a:3e:19:1b:c0:2d:c9:52:f0:1b:8a:8f:
                    a8:02:ce:27:44:38:9d:6c:01:18:54:a0:59:fe:54:
                    36:e4:b7:83:95:b1:6e:8b:43:09:ee:5b:75:ff:42:
                    44:58:70:e4:5d:a3:ef:fb:63:25:73:11:e2:34:ce:
                    60:e1:f8:10:2e:1c:53:b8:77:94:59:6a:5a:92:f3:
                    0b:e0:ee:23:25:59:4a:4d:e2:7f:27:d2:74:2f:c2:
                    69:45:dc:63:6c:d2:ec:cc:24:3b:0e:2c:76:b3:18:
                    d3:2c:b1:5a:36:04:aa:d3:66:4d:aa:a4:97:93:bf:
                    ba:7d:32:cc:22:4c:9c:1f:44:d1:3f:93:ea:92:aa:
                    25:6c:03:8f:71:9c:21:35:dd:36:d5:2d:4d:ec:75:
                    c4:2b:ab:ce:45:72:39:c0:25:4c:2b:9a:59:14:8e:
                    e1:f1:67:27:61:81:be:20:d1:04:17:7c:0b:25:f1:
                    47:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:89:05:12:96:CE:79:97:61:D5:0A:11:25:A0:59:64:C2:35:6C:DC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/tnF2HwQqQZKxzeuGVAo1PtvXvWhhiHJbz5rMnN1Ko9R/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/tnF2HwQqQZKxzeuGVAo1PtvXvWhhiHJbz5rMnN1Ko9R/0/5489051296CE799761D50A1125A05964C2356CDC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.172.0/22
                IPv6:
                  2804:42c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267524

    Signature Algorithm: sha256WithRSAEncryption
         20:57:28:b3:87:54:bd:e3:da:16:df:35:ef:ff:2d:99:a1:0d:
         49:69:3f:09:6c:5c:15:01:f3:14:37:97:d2:52:93:23:3e:99:
         b6:ab:99:d3:46:ef:8d:25:f9:1e:8a:f4:90:25:1a:a1:94:17:
         92:96:99:6c:d0:9a:4d:ba:d1:1e:88:c3:35:eb:18:ce:69:b0:
         7a:df:d5:98:a7:a9:a3:97:47:c4:68:44:2e:ec:ec:80:12:17:
         0d:ab:75:ce:20:f3:66:3b:12:20:c5:73:78:94:3c:cf:d9:05:
         3b:f5:d5:81:fd:83:c3:54:be:5f:3e:df:ae:50:15:55:bb:34:
         f3:05:f3:f3:45:67:ad:ff:70:aa:53:1a:0c:57:4c:52:30:52:
         e3:26:27:96:98:35:32:45:b6:2e:21:9b:0e:41:08:73:d4:9e:
         a8:f5:94:01:29:1a:5e:f7:3f:b1:35:0b:cd:7a:68:9f:37:2a:
         15:34:9a:97:bd:3f:e0:ac:ac:9a:e5:96:f9:1a:8f:f2:65:95:
         4c:3f:af:f3:c5:81:e2:c0:42:22:ae:b3:d1:26:1b:81:44:1a:
         49:80:3b:28:fa:86:8c:9d:ed:ca:31:3a:e9:86:9e:80:5f:18:
         59:dc:68:be:36:9d:7c:5c:9d:33:00:f6:4c:9e:29:af:a1:4d:
         87:8d:bd:f9
-----BEGIN CERTIFICATE-----
MIIGDjCCBPagAwIBAgIUN2dfXHEOuln5Y+zTRNTSN9LnPSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMTEwMTIwMDI0MjlaFw0yMjEwMTEwMDI5MjlaMDMxMTAvBgNV
BAMTKDU0ODkwNTEyOTZDRTc5OTc2MUQ1MEExMTI1QTA1OTY0QzIzNTZDREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWi+hmKbSpEPrByAfaV+sy7qcX
ILCYsD8c1hrfHpom6WPgtLUdw3cRASoAHXjgv12IUeQrBdBLQhW1JFhrD1117hx/
pKbQsjlpk/TZGxo+GRvALclS8BuKj6gCzidEOJ1sARhUoFn+VDbkt4OVsW6LQwnu
W3X/QkRYcORdo+/7YyVzEeI0zmDh+BAuHFO4d5RZalqS8wvg7iMlWUpN4n8n0nQv
wmlF3GNs0uzMJDsOLHazGNMssVo2BKrTZk2qpJeTv7p9MswiTJwfRNE/k+qSqiVs
A49xnCE13TbVLU3sdcQrq85FcjnAJUwrmlkUjuHxZydhgb4g0QQXfAsl8UfTAgMB
AAGjggMYMIIDFDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRUiQUSls55l2HV
ChEloFlkwjVs3DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPQYIKwYB
BQUHAQsEggEvMIIBKzBcBggrBgEFBQcwBYZQcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby90bkYySHdRcVFaS3h6ZXVHVkFvMVB0dlh2V2hoaUhKYno1
ck1uTjFLbzlSLzAwgYkGCCsGAQUFBzAKhn1yc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvL3RuRjJId1FxUVpLeHpldUdWQW8xUHR2WHZXaGhpSEpiejVy
TW5OMUtvOVIvMC81NDg5MDUxMjk2Q0U3OTk3NjFENTBBMTEyNUEwNTk2NEMyMzU2
Q0RDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u
YnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALJtqwwDQQCAAIwBwMFACgE
QsQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBUEMA0GCSqGSIb3DQEBCwUAA4IB
AQAgVyizh1S949oW3zXv/y2ZoQ1JaT8JbFwVAfMUN5fSUpMjPpm2q5nTRu+NJfke
ivSQJRqhlBeSlpls0JpNutEeiMM16xjOabB639WYp6mjl0fEaEQu7OyAEhcNq3XO
IPNmOxIgxXN4lDzP2QU79dWB/YPDVL5fPt+uUBVVuzTzBfPzRWet/3CqUxoMV0xS
MFLjJieWmDUyRbYuIZsOQQhz1J6o9ZQBKRpe9z+xNQvNemifNyoVNJqXvT/grKya
5Zb5Go/yZZVMP6/zxYHiwEIirrPRJhuBRBpJgDso+oaMne3KMTrphp6AXxhZ3Gi+
Np18XJ0zAPZMnimvoU2Hjb35
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org