Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/556EABC625AC7CC3221585B8C4B2CDDC33693898.cer
File:                     556EABC625AC7CC3221585B8C4B2CDDC33693898.cer (raw, json)
Hash identifier:          Ms3KVzRqIaojwTtKpTRyNCuWwg7fFn1kI+4e/4fLERU=
Subject key identifier:   55:6E:AB:C6:25:AC:7C:C3:22:15:85:B8:C4:B2:CD:DC:33:69:38:98
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       262C7DE1248C7DB69A3CBBD6474C3987C566F336
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/556EABC625AC7CC3221585B8C4B2CDDC33693898.mft
caRepository:             rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 16 Mar 2024 06:01:14 +0000
Certificate not after:    Sat 15 Mar 2025 06:06:14 +0000
Subordinate resources:    AS: 52999
                          IP: 168.195.68.0/22
                          IP: 177.66.32.0/21
                          IP: 186.216.216.0/21
                          IP: 186.226.96.0/20
                          IP: 2804:508::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2c:7d:e1:24:8c:7d:b6:9a:3c:bb:d6:47:4c:39:87:c5:66:f3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 16 06:01:14 2024 GMT
            Not After : Mar 15 06:06:14 2025 GMT
        Subject: CN=556EABC625AC7CC3221585B8C4B2CDDC33693898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f5:41:73:b2:c3:97:19:0a:6f:a2:d5:b7:18:
                    a0:15:f0:b4:a6:3c:a8:cb:b0:f1:1f:6d:04:85:d5:
                    04:a5:41:87:d9:91:99:41:79:e4:7c:c5:3d:27:e0:
                    1b:40:c8:17:0d:02:f0:d7:d2:61:c7:44:30:7b:3c:
                    54:c1:fc:21:ed:12:83:fa:f7:73:5b:74:7b:87:ac:
                    f0:a7:04:d8:7b:12:67:57:16:9a:93:a7:03:a0:49:
                    67:5e:83:62:ef:3f:12:7a:fb:da:d0:ce:1c:cf:22:
                    63:1b:2e:d7:3e:13:2e:ed:7f:61:74:74:13:3f:29:
                    94:ce:62:33:09:95:2b:a7:af:c7:ce:64:68:30:5e:
                    d3:4e:0c:38:48:f3:76:c4:86:cf:ca:bf:e1:4b:55:
                    95:7e:b8:62:1f:4b:43:69:fe:3b:91:65:c2:3d:25:
                    40:81:27:21:13:72:ef:3f:a6:6e:13:7a:d9:bb:f0:
                    59:4e:fd:80:af:95:8a:fa:3b:52:da:2d:2d:7a:95:
                    20:b4:f0:c8:95:db:7d:5b:f3:e2:1b:ef:2e:79:27:
                    b2:c5:97:d9:a4:95:26:3e:f4:2c:7d:22:b8:dc:16:
                    42:a3:40:32:72:1b:b2:f8:54:cf:ca:f1:87:eb:82:
                    d8:ef:8f:0e:d8:8b:d1:da:3d:91:83:38:dd:a1:db:
                    b8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:6E:AB:C6:25:AC:7C:C3:22:15:85:B8:C4:B2:CD:DC:33:69:38:98
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/556EABC625AC7CC3221585B8C4B2CDDC33693898.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.68.0/22
                  177.66.32.0/21
                  186.216.216.0/21
                  186.226.96.0/20
                IPv6:
                  2804:508::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52999

    Signature Algorithm: sha256WithRSAEncryption
         46:3d:0f:f7:bb:72:82:83:5c:14:6d:67:f5:eb:91:ac:2c:2f:
         72:34:6e:b3:c5:eb:99:42:07:13:d2:d0:64:35:45:19:3b:fb:
         12:d0:a2:56:a0:88:cd:91:f0:86:a2:26:58:f1:64:28:75:c5:
         5c:06:d8:1c:1f:d7:c1:3f:18:7f:8c:48:3b:57:78:d6:20:63:
         05:6b:97:ad:f3:0e:bc:7e:80:b5:85:17:78:90:a1:7b:da:d7:
         61:ec:63:ed:9e:16:2d:f5:a2:73:a3:01:49:81:29:50:e5:10:
         68:22:53:95:2a:06:8c:b1:f3:a2:93:06:99:b5:c2:1d:81:43:
         0a:c2:78:44:4a:9c:52:80:ad:e9:aa:26:f0:9b:f5:d9:9c:df:
         b6:72:b8:e2:f6:fa:e0:4a:70:f9:12:b3:51:6e:e1:fa:50:63:
         1a:40:fe:38:2a:e9:13:ba:c0:1f:4f:4e:42:57:72:22:9d:00:
         66:ad:aa:62:2f:0b:58:1d:e9:4a:fa:eb:d5:39:41:e8:d5:d3:
         89:e4:5d:5b:9c:c2:2b:d3:b8:bf:ee:6c:cf:4c:cf:64:57:15:
         05:f5:f2:3b:7c:4c:cb:71:4b:4a:7f:42:10:4f:58:01:4d:a6:
         12:d6:26:d4:e9:7f:08:3b:bd:6c:e5:c2:09:c1:15:e3:fa:33:
         9c:69:5c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org