Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/551C8D694782953B26464AA2E96089A434D823FC.cer
File:                     551C8D694782953B26464AA2E96089A434D823FC.cer (raw, json)
Hash identifier:          pk44g7ahVXZaGuH4KuB6ljGFA8RaQbvqhAA5RHsEwJY=
Subject key identifier:   55:1C:8D:69:47:82:95:3B:26:46:4A:A2:E9:60:89:A4:34:D8:23:FC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3B9046470F2CF23A4DB4F975C4A3398373BA5605
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/0/551C8D694782953B26464AA2E96089A434D823FC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 09:20:17 +0000
Certificate not after:    Tue 21 May 2024 09:25:17 +0000
Subordinate resources:    AS: 266096
                          IP: 45.5.104.0/22
                          IP: 2804:3a90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:90:46:47:0f:2c:f2:3a:4d:b4:f9:75:c4:a3:39:83:73:ba:56:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 09:20:17 2023 GMT
            Not After : May 21 09:25:17 2024 GMT
        Subject: CN=551C8D694782953B26464AA2E96089A434D823FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:27:23:c0:c9:06:45:62:87:b3:d3:f7:d1:c3:
                    4a:25:68:c0:8d:44:1c:c4:b7:d5:0d:3a:60:b2:26:
                    77:9c:9d:e8:34:c2:b0:da:12:4e:0a:f5:1c:ea:d6:
                    4d:02:45:86:54:c4:c6:d4:e3:ba:1b:e3:82:93:3c:
                    91:da:8b:87:2e:a3:39:17:18:94:42:40:c9:00:79:
                    e5:6e:da:c8:ca:5f:1a:d8:d1:5a:33:b4:73:f0:43:
                    ff:57:f7:42:aa:39:d9:d3:da:8f:ec:66:ff:35:35:
                    89:0d:02:77:e1:84:24:b7:67:a6:b5:13:79:d2:a7:
                    7f:bb:46:81:d3:b0:86:d3:8b:91:2f:d5:9e:fa:4f:
                    36:cf:c4:86:3f:20:91:52:2d:52:41:d0:51:9f:56:
                    48:a2:b2:d3:7a:56:02:dc:2b:fa:50:5a:2b:c8:71:
                    86:48:e3:35:7c:aa:d7:c1:62:02:d5:23:36:42:8b:
                    da:6f:ab:30:78:56:83:a3:41:c9:9d:b8:22:cb:b4:
                    56:e3:f8:9d:52:57:bf:eb:16:93:23:ad:df:f6:ee:
                    41:48:ab:4f:1d:c1:9c:50:86:c4:03:19:68:c5:24:
                    93:e9:cc:83:00:0e:94:b0:a6:8a:02:ec:0e:1a:ba:
                    45:1a:a2:d5:f0:09:ee:e4:54:f1:e8:41:4d:c2:19:
                    9b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:1C:8D:69:47:82:95:3B:26:46:4A:A2:E9:60:89:A4:34:D8:23:FC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/0/551C8D694782953B26464AA2E96089A434D823FC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.104.0/22
                IPv6:
                  2804:3a90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266096

    Signature Algorithm: sha256WithRSAEncryption
         56:a5:e8:89:e9:67:6a:55:b0:64:db:6a:85:e7:8e:9b:f8:c6:
         e4:c6:3c:9a:8f:41:8a:48:2e:67:12:11:68:31:51:2a:be:72:
         09:59:18:2b:da:16:73:5f:7d:b2:ec:aa:a8:3b:f1:21:ff:a4:
         e3:21:aa:15:71:d4:bf:7f:5d:b1:99:e9:3b:90:c6:1b:53:58:
         6c:87:6f:e4:5f:f3:1d:fd:d9:3d:55:43:cf:1a:ab:8b:0c:9d:
         79:86:a7:76:55:c0:86:5e:9d:06:95:eb:ca:9c:53:2b:83:ef:
         05:9f:e2:64:4c:e9:fb:8f:a5:5a:fa:59:30:68:2c:85:c5:9e:
         b6:25:77:00:45:bd:a5:bb:89:7c:0c:6e:9d:57:68:63:af:77:
         e2:04:d8:ac:94:c8:9d:67:33:c0:f8:a9:a2:fa:b9:08:f2:14:
         38:03:fe:15:35:f4:67:f0:47:3f:32:df:14:fd:07:0f:1d:15:
         0d:27:66:da:f2:ac:20:fe:ba:ba:82:a6:e2:07:8f:bc:cf:54:
         5e:76:4d:ac:76:d4:02:0c:38:ee:6d:47:24:22:99:92:cf:73:
         ef:27:1f:76:5b:66:bf:fd:59:b0:68:2a:00:4c:09:32:a4:67:
         e2:f1:8a:c3:d8:6b:37:bb:05:22:a1:5b:60:2d:11:d1:4b:0f:
         b5:a3:83:e7
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUO5BGRw8s8jpNtPl1xKM5g3O6VgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjMwOTIwMTdaFw0yNDA1MjEwOTI1MTdaMDMxMTAvBgNV
BAMTKDU1MUM4RDY5NDc4Mjk1M0IyNjQ2NEFBMkU5NjA4OUE0MzREODIzRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqJyPAyQZFYoez0/fRw0olaMCN
RBzEt9UNOmCyJnecneg0wrDaEk4K9Rzq1k0CRYZUxMbU47ob44KTPJHai4cuozkX
GJRCQMkAeeVu2sjKXxrY0VoztHPwQ/9X90KqOdnT2o/sZv81NYkNAnfhhCS3Z6a1
E3nSp3+7RoHTsIbTi5Ev1Z76TzbPxIY/IJFSLVJB0FGfVkiistN6VgLcK/pQWivI
cYZI4zV8qtfBYgLVIzZCi9pvqzB4VoOjQcmduCLLtFbj+J1SV7/rFpMjrd/27kFI
q08dwZxQhsQDGWjFJJPpzIMADpSwpooC7A4aukUaotXwCe7kVPHoQU3CGZs/AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRVHI1pR4KVOyZG
SqLpYImkNNgj/DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ITHRHaDd1WlFwcU5mbVF2VzlCdXpGMkZEV0hxQWtLNDRR
WUVRNVBQQkpwZS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSEx0R2g3dVpRcHFOZm1Rdlc5QnV6RjJGRFdIcUFrSzQ0
UVlFUTVQUEJKcGUvMC81NTFDOEQ2OTQ3ODI5NTNCMjY0NjRBQTJFOTYwODlBNDM0
RDgyM0ZDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItBWgwDQQCAAIwBwMF
ACgEOpAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBA9wMA0GCSqGSIb3DQEBCwUA
A4IBAQBWpeiJ6WdqVbBk22qF546b+Mbkxjyaj0GKSC5nEhFoMVEqvnIJWRgr2hZz
X32y7KqoO/Eh/6TjIaoVcdS/f12xmek7kMYbU1hsh2/kX/Md/dk9VUPPGquLDJ15
hqd2VcCGXp0GlevKnFMrg+8Fn+JkTOn7j6Va+lkwaCyFxZ62JXcARb2lu4l8DG6d
V2hjr3fiBNislMidZzPA+Kmi+rkI8hQ4A/4VNfRn8Ec/Mt8U/QcPHRUNJ2ba8qwg
/rq6gqbiB4+8z1Redk2sdtQCDDjubUckIpmSz3PvJx92W2a//VmwaCoATAkypGfi
8YrD2Gs3uwUioVtgLRHRSw+1o4Pn
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org