Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/55212F835697ABAC028A6E823F57460D04D5F2B1.cer
File:                     55212F835697ABAC028A6E823F57460D04D5F2B1.cer (raw, json)
Hash identifier:          6hKsa1/ZiV9rTte0s57gI59GL/OncKJWI9X10me+/rE=
Subject key identifier:   55:21:2F:83:56:97:AB:AC:02:8A:6E:82:3F:57:46:0D:04:D5:F2:B1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       362521C3428772619B560AE95ACF1E9522A16706
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/55212F835697ABAC028A6E823F57460D04D5F2B1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Mar 2024 14:49:20 +0000
Certificate not after:    Thu 06 Mar 2025 14:54:20 +0000
Subordinate resources:    AS: 264411
                          IP: 131.221.100.0/22
                          IP: 138.204.124.0/22
                          IP: 2804:1e28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:25:21:c3:42:87:72:61:9b:56:0a:e9:5a:cf:1e:95:22:a1:67:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  7 14:49:20 2024 GMT
            Not After : Mar  6 14:54:20 2025 GMT
        Subject: CN=55212F835697ABAC028A6E823F57460D04D5F2B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:07:bf:4b:91:ec:1a:bd:ce:f8:13:ec:2a:f7:
                    34:5a:07:c8:a8:38:d7:a1:f2:cd:f2:61:25:cb:2c:
                    ae:4a:b1:81:32:cd:f3:8b:d5:ca:3f:95:ad:21:e5:
                    f3:57:41:1c:b6:8b:e7:04:e7:fd:1d:31:bb:cc:38:
                    97:56:98:a2:de:80:c2:ee:9c:ae:86:c6:b1:47:b2:
                    d7:1e:23:69:f4:0d:16:92:d0:5d:bd:bc:07:16:41:
                    51:6c:f2:e3:1f:ff:71:75:42:ea:0d:0f:9c:33:15:
                    d1:40:6f:a0:6b:f9:1a:5f:f2:30:31:91:8b:7c:da:
                    34:43:9c:94:0f:97:51:62:37:9d:e0:6b:c5:da:fe:
                    a9:da:4c:30:e7:d0:0f:27:2e:f0:03:46:b2:c5:03:
                    14:84:fc:68:8c:5e:98:3b:af:ee:f0:8c:e1:75:d7:
                    03:eb:26:24:7a:20:2e:47:e5:eb:67:ef:8f:4f:f1:
                    a4:3f:51:fd:80:e6:d8:ea:07:05:1b:ae:8f:20:fc:
                    4f:f7:7e:ee:7a:63:a5:02:60:ba:58:41:b6:20:32:
                    77:20:64:5d:74:3c:45:f3:52:57:8f:fb:32:d8:07:
                    68:06:f7:df:e5:2c:bf:b4:36:17:c6:9e:2b:e4:ce:
                    cb:67:1e:33:6d:b3:23:7e:2d:d9:fa:62:59:83:75:
                    50:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:21:2F:83:56:97:AB:AC:02:8A:6E:82:3F:57:46:0D:04:D5:F2:B1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/55212F835697ABAC028A6E823F57460D04D5F2B1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.100.0/22
                  138.204.124.0/22
                IPv6:
                  2804:1e28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264411

    Signature Algorithm: sha256WithRSAEncryption
         59:5a:f3:07:40:bb:a2:59:3b:75:f8:ab:aa:91:b2:c5:b2:d5:
         4f:ca:dd:65:96:c4:0f:d0:2f:97:d7:27:f5:5f:ce:32:bf:f6:
         3c:96:3f:28:a5:7a:3f:9d:4a:11:e5:e3:ac:63:38:0a:b4:90:
         3b:b9:25:12:1c:fb:03:3d:17:03:92:a2:6e:80:13:b8:72:7e:
         e6:2f:c9:8d:46:d7:ee:e9:e2:5c:18:ad:5a:89:1e:ad:e4:9b:
         33:2b:3a:c5:3c:1e:47:b2:7f:66:7f:98:13:07:17:0f:f3:c3:
         e1:26:bf:27:3d:b7:15:6d:83:b9:8c:e0:a4:83:3a:36:45:06:
         ae:25:59:c4:f8:98:b0:b9:cb:13:37:b9:d3:db:9a:26:e5:55:
         71:90:a6:df:54:7c:40:12:e1:fe:7a:3e:56:2a:fd:4d:1c:b8:
         b6:93:69:2e:96:b5:57:8f:2a:29:5e:6a:57:3b:c9:72:29:ec:
         6a:96:79:dd:b5:e4:f9:16:4f:2c:a4:e7:a3:75:a7:80:ff:7e:
         d2:83:69:9c:62:f9:31:95:31:be:04:60:a3:81:aa:08:02:2e:
         20:23:03:94:a7:d7:c0:8a:4e:25:b7:10:f0:37:11:06:85:4b:
         b1:52:61:a0:ee:4f:3e:18:33:ad:6f:32:43:96:31:54:06:ed:
         2f:a8:ad:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org