Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/555670031340B5D31FA9E93EFAB4F49D5A553B33.cer
File:                     555670031340B5D31FA9E93EFAB4F49D5A553B33.cer (raw, json)
Hash identifier:          9qfcmN55mDOTAacnLfe21pS3VN21LGYPMUTcRQZWReU=
Subject key identifier:   55:56:70:03:13:40:B5:D3:1F:A9:E9:3E:FA:B4:F4:9D:5A:55:3B:33
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       497BA94B5A230D6F20219ED89E58CB9FF9CD2209
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/555670031340B5D31FA9E93EFAB4F49D5A553B33.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 01 Nov 2023 18:18:45 +0000
Certificate not after:    Wed 30 Oct 2024 18:23:45 +0000
Subordinate resources:    AS: 270438
                          IP: 200.11.108.0/22
                          IP: 2804:6bfc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:7b:a9:4b:5a:23:0d:6f:20:21:9e:d8:9e:58:cb:9f:f9:cd:22:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  1 18:18:45 2023 GMT
            Not After : Oct 30 18:23:45 2024 GMT
        Subject: CN=555670031340B5D31FA9E93EFAB4F49D5A553B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a6:92:3e:fb:62:06:77:4d:83:d5:f0:09:f8:
                    2e:e9:a7:db:4e:ab:a9:fd:62:f4:76:dc:07:3f:c2:
                    8d:02:93:4e:a7:db:b8:b5:ab:e5:9d:f5:36:e2:c9:
                    5c:61:c3:24:b4:91:96:45:02:14:09:42:0c:c6:2d:
                    03:2d:42:50:a8:7d:49:86:24:b3:60:94:d9:a3:d2:
                    ba:c1:c2:2e:e6:55:68:06:68:8a:63:14:68:b1:34:
                    d4:53:f6:a0:40:21:3a:1e:69:49:79:ea:88:c9:64:
                    f6:42:9a:3e:7e:f4:62:0d:d9:10:57:7b:58:a4:00:
                    70:ed:b3:8d:4e:46:1e:c1:b4:61:e9:2d:5c:f7:f8:
                    b7:3c:5b:03:49:c9:93:6c:9a:2c:87:a2:da:ca:d2:
                    e8:f4:f4:e1:da:62:ce:4f:9f:2a:00:44:ba:54:fe:
                    38:83:74:09:52:1f:84:ef:50:18:26:69:46:85:be:
                    fc:16:d9:bb:ba:b9:70:49:13:e6:ab:20:5d:0c:d8:
                    97:45:55:15:ef:59:ac:3a:5a:d5:b3:7b:15:a3:73:
                    d2:ff:c4:6d:e1:1d:eb:51:57:a5:c6:91:a0:da:db:
                    60:b4:a7:5c:f7:90:39:05:f7:ea:09:94:34:0a:cb:
                    33:6e:14:15:f5:15:e3:99:4d:38:ec:a3:f6:61:00:
                    44:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:56:70:03:13:40:B5:D3:1F:A9:E9:3E:FA:B4:F4:9D:5A:55:3B:33
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CD9y4WrxR5Z8ABqDAfLrTXgwN3dSnZJDtpd1nPAeAprx/0/555670031340B5D31FA9E93EFAB4F49D5A553B33.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.108.0/22
                IPv6:
                  2804:6bfc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270438

    Signature Algorithm: sha256WithRSAEncryption
         6a:5e:3b:6c:01:10:46:dc:bc:cf:95:86:54:ce:01:60:4f:f5:
         4f:37:a3:d3:66:ab:c9:79:51:35:e0:72:e4:8d:bb:fe:e7:66:
         7f:94:ad:bf:ce:42:1c:e9:c4:06:40:27:c0:5b:7b:c5:3e:1f:
         51:2c:d7:52:0b:95:df:ca:f3:aa:46:55:42:87:1e:52:97:bc:
         ba:ad:03:ab:82:ed:64:fc:45:d0:a4:a3:4c:6f:b5:a3:c1:18:
         d9:3a:5d:e5:5e:a6:e3:44:c2:49:1f:af:f9:67:d2:a2:fb:47:
         b6:de:54:0d:79:dd:e9:12:c2:a4:6d:2d:b6:bc:be:e8:30:b3:
         0f:57:e4:ac:2f:54:ae:50:1c:59:a0:37:02:fc:4d:1f:f9:ac:
         dc:ff:db:df:fd:59:e8:cb:36:16:a4:8a:9f:fd:eb:73:c9:b2:
         dc:ad:dc:3d:4b:96:aa:e6:16:3e:59:e9:5d:a2:a1:c4:ff:c8:
         3c:01:3e:73:b7:fe:ea:3a:bd:3e:fe:4f:c4:fa:57:92:e5:ef:
         1e:9a:3b:7f:c3:79:ea:56:80:bd:b1:59:69:93:24:a2:20:b9:
         30:be:f9:5b:79:23:d6:21:7f:97:dc:98:ee:1c:df:80:04:48:
         6a:5b:f4:5e:8c:2b:c1:d3:03:7e:55:bd:c1:57:48:fb:04:90:
         de:38:ec:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org