Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/554D532A2B109EC3757B4A4CFF89A9F1E3456550.cer
File:                     554D532A2B109EC3757B4A4CFF89A9F1E3456550.cer (raw, json)
Hash identifier:          3A5RPzm/rTUjHZFsWyFAQ6VTEuI47zBLsRXGEkqexxU=
Subject key identifier:   55:4D:53:2A:2B:10:9E:C3:75:7B:4A:4C:FF:89:A9:F1:E3:45:65:50
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       68A7CB3C897C55627CB23210EDE48E278EA1986D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/554D532A2B109EC3757B4A4CFF89A9F1E3456550.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 27 Aug 2021 20:06:12 +0000
Certificate not after:    Fri 26 Aug 2022 20:11:12 +0000
Subordinate resources:    AS: 268349
                          IP: 45.239.4.0/22
                          IP: 2804:4fc8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a7:cb:3c:89:7c:55:62:7c:b2:32:10:ed:e4:8e:27:8e:a1:98:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 27 20:06:12 2021 GMT
            Not After : Aug 26 20:11:12 2022 GMT
        Subject: CN=554D532A2B109EC3757B4A4CFF89A9F1E3456550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b5:11:7e:bd:af:b3:6c:57:b9:df:9e:6a:fa:
                    90:e9:dd:3e:be:8d:9f:2f:da:41:d5:57:13:27:80:
                    ac:02:be:7b:93:8a:90:0f:28:77:72:2a:41:2a:61:
                    b9:fd:a0:1e:10:3f:5c:0a:64:f9:21:e7:79:68:f7:
                    1b:c1:3d:d4:14:b2:7e:24:56:70:05:f6:45:7e:90:
                    09:73:5b:d8:6f:ac:eb:cd:12:c4:5b:e8:58:19:eb:
                    75:7c:65:6c:83:fa:31:dd:eb:aa:22:74:95:e7:f5:
                    43:b2:47:c8:93:f9:89:ab:ee:e1:e6:93:86:fb:7e:
                    c1:2a:4a:08:79:d2:8e:18:a1:a3:4c:76:73:69:fb:
                    43:35:a5:2b:c7:56:60:99:24:67:85:34:37:0a:b7:
                    35:31:15:27:71:b9:64:38:f2:bf:54:ad:94:7d:d8:
                    12:c4:35:98:7e:95:cf:f9:ba:6b:ba:41:d1:47:8b:
                    77:cc:12:c7:3a:10:c4:f2:40:40:4a:d3:d9:3e:75:
                    4f:10:59:1b:1f:84:d1:71:a9:ce:d1:89:f4:e8:d1:
                    3a:6a:35:dd:fa:11:c3:b7:6e:68:da:56:ea:ad:43:
                    19:c8:cd:ca:50:2c:53:23:1c:be:a4:92:93:54:2a:
                    89:15:ef:49:dc:9a:4c:0c:f8:9e:60:11:e1:a5:e5:
                    d7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:4D:53:2A:2B:10:9E:C3:75:7B:4A:4C:FF:89:A9:F1:E3:45:65:50
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/0/554D532A2B109EC3757B4A4CFF89A9F1E3456550.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.4.0/22
                IPv6:
                  2804:4fc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268349

    Signature Algorithm: sha256WithRSAEncryption
         0b:c9:00:4b:95:19:d8:2a:74:0d:e9:aa:c0:da:6c:8d:b0:a5:
         6b:c8:15:d7:77:5d:6a:5c:3f:7e:38:1b:d5:ac:99:11:5f:f6:
         20:a9:00:8b:79:ce:92:6c:fe:d7:1a:9b:8b:8c:25:9c:1a:28:
         33:4d:66:29:19:69:94:2f:8a:36:cf:37:ac:d5:f3:26:3c:bc:
         db:a9:f0:ea:05:f1:2d:af:bd:92:63:db:81:48:ea:a9:70:a5:
         87:eb:c3:04:27:b5:99:ce:76:45:eb:fd:a4:b3:9b:4f:a7:ed:
         ea:55:98:b2:da:00:6b:ad:a4:0e:a5:e5:75:10:5f:d3:3e:ab:
         a9:cc:ca:aa:2f:8e:6b:74:27:3c:ba:7f:8f:89:9f:68:3e:80:
         99:30:30:b9:d0:00:ba:47:e5:1f:ab:cd:cd:1e:80:06:f8:fd:
         72:f1:55:1b:a0:ff:a7:08:32:cd:e5:05:34:cc:c3:ac:c8:e5:
         e7:c1:bd:2d:01:df:2e:83:0e:6b:6e:52:98:0e:9b:e8:4c:1d:
         dc:b3:09:88:d1:ec:46:49:4f:40:e5:21:23:33:9f:6f:e4:89:
         a1:7e:98:ec:76:e2:95:d6:3e:b7:7a:56:ea:bd:73:68:80:67:
         56:5b:2e:26:5c:89:54:ae:85:38:b1:d8:48:6c:6e:29:cf:2f:
         25:b1:d3:2e
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUaKfLPIl8VWJ8sjIQ7eSOJ46hmG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMTA4MjcyMDA2MTJaFw0yMjA4MjYyMDExMTJaMDMxMTAvBgNV
BAMTKDU1NEQ1MzJBMkIxMDlFQzM3NTdCNEE0Q0ZGODlBOUYxRTM0NTY1NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKtRF+va+zbFe5355q+pDp3T6+
jZ8v2kHVVxMngKwCvnuTipAPKHdyKkEqYbn9oB4QP1wKZPkh53lo9xvBPdQUsn4k
VnAF9kV+kAlzW9hvrOvNEsRb6FgZ63V8ZWyD+jHd66oidJXn9UOyR8iT+Ymr7uHm
k4b7fsEqSgh50o4YoaNMdnNp+0M1pSvHVmCZJGeFNDcKtzUxFSdxuWQ48r9UrZR9
2BLENZh+lc/5umu6QdFHi3fMEsc6EMTyQEBK09k+dU8QWRsfhNFxqc7RifTo0Tpq
Nd36EcO3bmjaVuqtQxnIzcpQLFMjHL6kkpNUKokV70ncmkwM+J5gEeGl5dejAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRVTVMqKxCew3V7
Skz/ianx40VlUDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83RzNiZzVDb3VpUWZ0UlhMTGdEZEZtSmh4TGpESjhiQ1E0
ZHN6RGF6WGgxRy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vN0czYmc1Q291aVFmdFJYTExnRGRGbUpoeExqREo4YkNR
NGRzekRhelhoMUcvMC81NTRENTMyQTJCMTA5RUMzNzU3QjRBNENGRjg5QTlGMUUz
NDU2NTUwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt7wQwDQQCAAIwBwMF
ACgET8gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBg9MA0GCSqGSIb3DQEBCwUA
A4IBAQALyQBLlRnYKnQN6arA2myNsKVryBXXd11qXD9+OBvVrJkRX/YgqQCLec6S
bP7XGpuLjCWcGigzTWYpGWmUL4o2zzes1fMmPLzbqfDqBfEtr72SY9uBSOqpcKWH
68MEJ7WZznZF6/2ks5tPp+3qVZiy2gBrraQOpeV1EF/TPqupzMqqL45rdCc8un+P
iZ9oPoCZMDC50AC6R+Ufq83NHoAG+P1y8VUboP+nCDLN5QU0zMOsyOXnwb0tAd8u
gw5rblKYDpvoTB3cswmI0exGSU9A5SEjM59v5ImhfpjsduKV1j63elbqvXNogGdW
Wy4mXIlUroU4sdhIbG4pzy8lsdMu
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org