Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/557DF305080FF63784D86CC572AD70DF08343A35.cer
File:                     557DF305080FF63784D86CC572AD70DF08343A35.cer (raw, json)
Hash identifier:          bBKQd9GAr61M1EoIn+b44XzuWztbAIwgIXNhPbb2BBw=
Subject key identifier:   55:7D:F3:05:08:0F:F6:37:84:D8:6C:C5:72:AD:70:DF:08:34:3A:35
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A6A67AE983CFCAE8557F5F6D0ECAB000DDA254E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/557DF305080FF63784D86CC572AD70DF08343A35.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 28 May 2023 04:54:09 +0000
Certificate not after:    Sun 26 May 2024 04:59:09 +0000
Subordinate resources:    AS: 265393
                          IP: 168.194.164.0/22
                          IP: 2804:3364::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:6a:67:ae:98:3c:fc:ae:85:57:f5:f6:d0:ec:ab:00:0d:da:25:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 28 04:54:09 2023 GMT
            Not After : May 26 04:59:09 2024 GMT
        Subject: CN=557DF305080FF63784D86CC572AD70DF08343A35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:6d:92:29:50:87:b4:b5:21:a5:5f:80:89:
                    1d:7a:d1:8d:f1:a9:5a:cc:da:cd:a0:21:c7:ae:5d:
                    d1:61:ac:f5:76:64:2d:7c:a7:f5:73:03:83:ae:46:
                    df:99:10:f3:34:51:85:58:54:48:2d:4a:f0:7d:0e:
                    52:f4:2f:19:7e:44:cd:da:f0:9e:9e:50:84:31:e5:
                    8f:3b:86:26:f6:8e:65:71:d6:08:8e:cc:6c:d9:98:
                    83:2f:1f:e9:0a:da:d2:d7:07:d3:2d:b7:b9:0e:a0:
                    ae:9a:03:91:5c:85:87:18:fd:e2:1b:9b:2f:bc:e2:
                    eb:81:cf:8c:34:49:2b:51:92:c8:75:71:7d:88:ce:
                    ea:71:5f:78:ed:4d:df:2d:01:b2:90:3e:81:e8:3d:
                    97:c3:b2:e1:28:8e:2b:ba:3a:c7:87:b7:22:2e:0f:
                    cf:6d:73:c5:29:79:46:db:29:ae:5c:da:02:5b:23:
                    d2:4a:cf:79:34:af:6b:28:97:c5:f5:2b:56:7f:3b:
                    c3:2a:56:ca:79:51:89:b6:c9:83:10:f7:35:f1:da:
                    66:2a:13:69:1a:1e:4a:a6:a0:fd:17:21:5a:aa:42:
                    88:14:d2:83:b9:af:dc:18:be:3e:6a:c3:af:6f:60:
                    af:10:01:3b:a7:b2:c4:60:eb:ea:69:5c:91:9a:2e:
                    a6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:7D:F3:05:08:0F:F6:37:84:D8:6C:C5:72:AD:70:DF:08:34:3A:35
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/557DF305080FF63784D86CC572AD70DF08343A35.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.164.0/22
                IPv6:
                  2804:3364::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265393

    Signature Algorithm: sha256WithRSAEncryption
         2e:f2:50:12:b3:38:31:78:34:0e:17:58:b7:d5:3d:df:aa:87:
         7d:e4:64:48:24:bb:75:cb:71:f8:dc:1a:bc:0a:b4:ec:67:f7:
         1e:29:81:ae:39:81:f3:99:de:51:6f:04:ec:50:f9:51:ac:5c:
         b2:9a:13:09:c9:73:73:1f:57:a4:26:68:41:bf:6e:fa:ce:e0:
         5b:18:53:2a:e6:83:7c:6f:dd:a6:88:25:cc:80:e3:8e:42:c2:
         cb:2c:78:c3:b8:fc:0a:01:90:b5:57:0b:4c:f2:71:6e:5b:9a:
         84:48:8e:ce:44:ea:d5:c2:78:c7:88:35:dd:84:af:6f:d3:9e:
         39:e3:68:b7:b9:00:94:0c:4b:57:32:4e:03:7e:86:b7:03:11:
         21:3b:c0:b3:b0:af:0b:da:e6:f8:72:83:af:7f:a4:15:4e:15:
         8d:03:4c:17:e2:62:a6:97:fb:de:ff:71:65:78:6d:3f:f1:ec:
         78:12:e4:8e:36:de:ba:ab:97:ed:1a:b0:72:83:ba:97:4e:3b:
         4f:3f:42:73:a3:15:11:1c:59:8f:c6:d0:21:3a:1c:6b:cc:c3:
         78:1e:46:00:2d:f5:37:07:bd:f9:8b:52:4a:9d:2b:e1:6a:41:
         4f:4a:d8:6a:0e:58:0b:89:f8:c5:7d:f0:ad:55:a9:70:12:42:
         62:af:8f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org