Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/555ABC2B8E4076A654330E2F947A4CC326D4A1A6.cer
File:                     555ABC2B8E4076A654330E2F947A4CC326D4A1A6.cer (raw, json)
Hash identifier:          9cGWP+rJcu5w9OOqSGZ9BEdoBYBqf5pjmPpAORMP3yw=
Subject key identifier:   55:5A:BC:2B:8E:40:76:A6:54:33:0E:2F:94:7A:4C:C3:26:D4:A1:A6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       79D147209E663366E01DE12B76CE0FB983E46D74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5EmnhJkosJ6q4PotDfEZWWZnCHmryg2nicuZip34rZd/0/555ABC2B8E4076A654330E2F947A4CC326D4A1A6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5EmnhJkosJ6q4PotDfEZWWZnCHmryg2nicuZip34rZd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Jun 2023 14:32:08 +0000
Certificate not after:    Wed 26 Jun 2024 14:37:08 +0000
Subordinate resources:    AS: 269122
                          IP: 45.179.232.0/22
                          IP: 2804:5fc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d1:47:20:9e:66:33:66:e0:1d:e1:2b:76:ce:0f:b9:83:e4:6d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 28 14:32:08 2023 GMT
            Not After : Jun 26 14:37:08 2024 GMT
        Subject: CN=555ABC2B8E4076A654330E2F947A4CC326D4A1A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cb:ee:3d:83:9e:72:50:6f:1d:65:1c:75:b2:
                    1b:c1:44:59:24:0b:c1:b4:b4:01:bd:14:36:33:b7:
                    a2:67:bf:f5:ad:59:4f:66:9d:06:85:01:e7:3b:26:
                    99:c8:46:fa:5e:27:ef:00:b2:9d:4e:45:4f:67:50:
                    e4:91:e6:d1:40:5f:a8:17:9f:5c:cc:65:fc:72:47:
                    2c:72:6c:a7:86:57:d6:ef:06:c2:12:c2:88:5e:75:
                    ec:eb:fb:57:5d:fd:4e:2a:ad:09:28:44:d5:d3:43:
                    fb:bd:92:14:58:9a:ea:fd:9e:40:dc:92:88:08:03:
                    e3:eb:2c:57:b7:ce:a9:52:7e:7e:b7:82:a0:09:0b:
                    95:05:44:90:ba:fa:ec:56:eb:46:66:90:81:7f:28:
                    e0:47:be:63:20:76:c7:92:19:f9:ba:f3:d9:5b:68:
                    93:c4:a1:5f:65:2e:12:06:e6:c9:b3:16:82:f2:2f:
                    85:11:bf:69:ba:eb:59:bb:d8:4e:e4:6f:e8:98:14:
                    10:6f:f4:f5:2a:e9:d9:ba:7a:80:ee:37:35:38:0a:
                    c8:f2:b0:c9:aa:ab:1f:8e:a7:8c:58:84:b9:dd:f3:
                    07:66:c2:66:33:eb:32:e4:db:d9:28:61:86:36:28:
                    be:7d:cb:80:c9:61:87:a8:39:07:1d:74:ba:60:83:
                    0b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:5A:BC:2B:8E:40:76:A6:54:33:0E:2F:94:7A:4C:C3:26:D4:A1:A6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5EmnhJkosJ6q4PotDfEZWWZnCHmryg2nicuZip34rZd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5EmnhJkosJ6q4PotDfEZWWZnCHmryg2nicuZip34rZd/0/555ABC2B8E4076A654330E2F947A4CC326D4A1A6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.232.0/22
                IPv6:
                  2804:5fc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269122

    Signature Algorithm: sha256WithRSAEncryption
         23:4c:b7:92:f6:79:d3:bb:83:84:91:45:26:05:a5:68:b6:db:
         8c:d2:a2:29:c1:24:eb:1f:be:c1:13:fd:2c:5f:e3:f2:2e:35:
         17:78:8e:59:f8:c2:fc:65:fb:95:33:ae:2a:d8:dd:cc:d8:b0:
         a8:e3:33:0c:fd:46:96:3a:08:03:3a:3b:07:c0:df:b0:ed:d6:
         5c:52:89:5d:28:56:bb:3f:0b:4f:06:57:1c:75:92:af:15:62:
         60:b5:75:0c:44:3b:78:41:01:76:70:6b:f3:2a:4b:e4:72:8b:
         3f:f1:b4:e9:f5:b1:06:9e:4c:d4:e7:f4:4f:52:11:f1:e0:ce:
         3d:b3:5e:e3:d7:c7:72:c9:a5:bd:4e:a2:3a:66:28:51:fd:fb:
         f9:76:98:f9:69:0d:b6:15:0c:e0:0a:f3:e9:18:23:03:99:77:
         23:d1:41:04:d8:15:49:d2:d9:36:e1:58:e4:86:b3:89:8d:ae:
         e1:4d:27:db:4c:74:05:cd:06:7a:88:f7:80:d1:28:f1:03:ab:
         46:2b:a3:7a:a1:dc:b9:69:6e:08:85:67:ef:60:d3:a0:f0:d6:
         f8:5f:6a:5e:98:1e:fb:f3:f2:ba:61:46:fa:e2:bb:81:fe:0c:
         25:6e:22:2b:9e:31:89:85:b3:89:4e:7a:48:8e:f2:64:45:d2:
         0f:a8:ca:e1
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUedFHIJ5mM2bgHeErds4PuYPkbXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MjgxNDMyMDhaFw0yNDA2MjYxNDM3MDhaMDMxMTAvBgNV
BAMTKDU1NUFCQzJCOEU0MDc2QTY1NDMzMEUyRjk0N0E0Q0MzMjZENEExQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4y+49g55yUG8dZRx1shvBRFkk
C8G0tAG9FDYzt6Jnv/WtWU9mnQaFAec7JpnIRvpeJ+8Asp1ORU9nUOSR5tFAX6gX
n1zMZfxyRyxybKeGV9bvBsISwohedezr+1dd/U4qrQkoRNXTQ/u9khRYmur9nkDc
kogIA+PrLFe3zqlSfn63gqAJC5UFRJC6+uxW60ZmkIF/KOBHvmMgdseSGfm689lb
aJPEoV9lLhIG5smzFoLyL4URv2m661m72E7kb+iYFBBv9PUq6dm6eoDuNzU4Csjy
sMmqqx+Op4xYhLnd8wdmwmYz6zLk29koYYY2KL59y4DJYYeoOQcddLpggwtzAgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRVWrwrjkB2plQz
Di+UekzDJtShpjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81RW1uaEprb3NKNnE0UG90RGZFWldXWm5DSG1yeWcybmlj
dVppcDM0clpkLzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81RW1uaEprb3NKNnE0UG90RGZFWldXWm5DSG1yeWcybmlj
dVppcDM0clpkLzAvNTU1QUJDMkI4RTQwNzZBNjU0MzMwRTJGOTQ3QTRDQzMyNkQ0
QTFBNi5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLbPoMA0EAgACMAcDBQAo
BF/EMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQbQjANBgkqhkiG9w0BAQsFAAOC
AQEAI0y3kvZ507uDhJFFJgWlaLbbjNKiKcEk6x++wRP9LF/j8i41F3iOWfjC/GX7
lTOuKtjdzNiwqOMzDP1GljoIAzo7B8DfsO3WXFKJXShWuz8LTwZXHHWSrxViYLV1
DEQ7eEEBdnBr8ypL5HKLP/G06fWxBp5M1Of0T1IR8eDOPbNe49fHcsmlvU6iOmYo
Uf37+XaY+WkNthUM4Arz6RgjA5l3I9FBBNgVSdLZNuFY5IaziY2u4U0n20x0Bc0G
eoj3gNEo8QOrRiujeqHcuWluCIVn72DToPDW+F9qXpge+/PyumFG+uK7gf4MJW4i
K54xiYWziU56SI7yZEXSD6jK4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org