Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.cer
File:                     557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.cer (raw, json)
Hash identifier:          XlfwcPAih+8idXXCgOm+8cCu91LcIPNdxKhHnllrXQA=
Subject key identifier:   55:7B:9A:FE:2B:83:AC:C4:BF:FA:14:90:30:06:7D:9D:FC:5A:E3:1A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6C112B7A7B605C9579B376719AEABC1BE4C9AF2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Oct 2023 14:30:26 +0000
Certificate not after:    Tue 22 Oct 2024 14:35:26 +0000
Subordinate resources:    AS: 271357
                          IP: 177.124.108.0/23
                          IP: 2804:7a3c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:11:2b:7a:7b:60:5c:95:79:b3:76:71:9a:ea:bc:1b:e4:c9:af:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 24 14:30:26 2023 GMT
            Not After : Oct 22 14:35:26 2024 GMT
        Subject: CN=557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d0:1c:ea:1d:87:e8:8e:b6:a7:f9:3f:f2:12:
                    b4:be:de:7a:8f:83:f6:22:f7:17:be:89:23:bb:df:
                    9e:81:40:f4:7f:0e:b3:f5:25:7a:ee:17:1c:3a:f6:
                    0b:d4:b5:03:0a:a0:6f:54:f6:83:11:72:eb:37:19:
                    e6:a7:ff:fa:57:30:a4:bb:7d:4d:8a:d1:a5:e8:87:
                    41:4f:7e:b2:19:56:67:8e:ff:90:08:00:56:60:c2:
                    d1:81:51:aa:93:f9:11:de:87:b8:22:3d:81:f6:c3:
                    ed:c9:6c:97:94:11:f6:99:08:a4:b0:62:46:f5:a9:
                    2c:47:ce:b9:92:10:87:ba:7c:77:3a:09:52:69:3c:
                    0b:5c:ec:95:fd:8a:a7:a5:05:9c:ed:ae:86:38:cf:
                    5d:1f:75:67:d1:cf:e8:b0:11:ff:ec:3c:b2:f0:40:
                    46:60:cf:62:60:0c:cf:34:fe:a9:1e:85:d8:27:af:
                    cc:53:0c:31:1e:95:0c:09:9d:15:34:8f:75:f1:77:
                    2e:b1:db:d9:29:3f:f8:a9:44:1e:2d:fe:b1:6e:e7:
                    2b:09:1a:3c:07:0f:1a:df:22:8f:b2:21:73:1e:da:
                    d2:76:ed:cc:c7:08:92:ff:35:9b:c5:24:df:87:ea:
                    21:84:2f:bb:fb:05:c6:b0:0e:2b:7c:93:91:8c:5f:
                    fb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:7B:9A:FE:2B:83:AC:C4:BF:FA:14:90:30:06:7D:9D:FC:5A:E3:1A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.108.0/23
                IPv6:
                  2804:7a3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271357

    Signature Algorithm: sha256WithRSAEncryption
         a8:78:61:d8:14:aa:df:a1:83:22:d2:77:2a:68:01:23:b3:7f:
         80:c2:09:c5:7d:b9:50:28:3f:8c:c7:1c:53:9f:e7:88:73:f3:
         76:dd:7c:d4:b0:44:86:15:fd:cd:e5:9c:16:53:6a:51:08:37:
         2f:36:ba:d9:1d:1c:6b:3b:c6:66:f6:06:48:8b:50:05:99:9b:
         13:48:2c:08:e1:f2:4e:87:7c:cb:28:ed:68:21:6a:59:ca:45:
         a8:59:b5:4d:76:7d:71:39:d8:5a:d2:15:24:b7:e4:04:9f:62:
         67:66:5c:6c:6b:ed:6f:05:7a:06:d4:bc:28:99:da:9c:80:ad:
         d1:78:00:71:f5:dc:29:3c:2d:25:53:45:4a:06:41:9e:9c:9b:
         b3:0f:0b:c3:07:c6:40:18:0a:b7:ef:ab:4f:b7:61:5b:f1:f1:
         4e:20:48:d1:96:52:37:f4:e7:72:db:63:d1:e8:55:7c:72:09:
         31:fd:07:56:35:97:8c:75:02:12:13:3d:d9:93:5a:d2:b5:91:
         0b:8d:fa:30:45:93:60:eb:b2:9d:5a:26:8d:a7:bc:d1:3a:f7:
         97:cc:b6:ed:f2:47:ba:c0:fa:b3:2b:83:b2:1a:64:d6:b4:26:
         9c:ff:dc:be:46:dd:61:17:90:84:d2:6a:f9:49:0b:80:72:01:
         22:96:03:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org