Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer
File:                     557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer (raw, json)
Hash identifier:          L/Fa2YNLbPLemj9OT5uu4VLStyDv+m6Vca4+4qBER9U=
Subject key identifier:   55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5BB68C49C2C3C9C36CEACF9765C20E6B84317EEA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Mar 2024 13:18:12 +0000
Certificate not after:    Fri 07 Mar 2025 13:23:12 +0000
Subordinate resources:    AS: 52758
                          IP: 177.38.184.0/21
                          IP: 201.131.240.0/21
                          IP: 2804:b38::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b6:8c:49:c2:c3:c9:c3:6c:ea:cf:97:65:c2:0e:6b:84:31:7e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 13:18:12 2024 GMT
            Not After : Mar  7 13:23:12 2025 GMT
        Subject: CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:f1:00:c5:51:b5:73:41:2a:68:bb:ea:e8:
                    2c:62:ea:29:fa:9f:23:97:d8:3f:ef:55:ca:a7:b5:
                    a2:79:7b:44:d0:f1:e9:86:99:fc:3e:54:83:cf:a0:
                    11:a1:02:9a:a5:10:66:f6:2f:66:af:86:fb:2e:77:
                    81:7f:65:ca:94:e6:58:50:d7:a3:18:2b:f7:6e:71:
                    f4:9b:2d:b5:fe:d9:95:91:9e:2a:bd:b7:c8:24:6a:
                    b8:6a:2f:1a:4b:cc:c6:6c:19:63:81:1c:de:50:12:
                    00:c1:01:1f:a5:a9:59:89:37:86:9b:83:01:eb:69:
                    92:16:54:8e:84:4a:f3:8e:50:94:4d:81:72:7f:d0:
                    61:fc:41:1b:1c:b8:00:00:52:bf:b8:44:76:b5:41:
                    35:bc:ca:d1:4e:12:29:58:f8:11:14:b3:82:b9:4e:
                    7b:bd:1c:3a:8e:97:df:37:7b:84:bf:df:48:95:79:
                    38:d1:98:ae:c1:67:62:13:c8:31:06:b4:af:98:2a:
                    2c:f8:25:24:ab:a9:51:08:aa:a6:1c:bf:ba:30:63:
                    bc:1b:1f:40:58:da:2d:00:5b:2d:ed:75:d5:7c:54:
                    0f:99:bc:b5:a4:60:5d:02:d0:14:10:54:e9:c2:bc:
                    c2:52:cb:fa:7e:60:43:ba:33:6f:ba:74:c6:cf:b6:
                    6e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.184.0/21
                  201.131.240.0/21
                IPv6:
                  2804:b38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52758

    Signature Algorithm: sha256WithRSAEncryption
         0b:31:e8:2d:e3:d1:de:6d:01:2b:f8:03:07:c6:8c:cd:19:e2:
         5c:d6:d7:16:fb:ba:7f:83:8d:b2:81:0e:4d:27:bd:5e:63:e5:
         56:e3:7a:fd:ab:46:3e:ac:ee:ac:fd:df:a8:4d:12:ce:0f:7d:
         bf:a0:0a:f2:7b:5f:68:be:c9:58:d9:f1:8b:fd:75:d5:40:2f:
         9a:72:c0:c5:c3:03:1e:04:d0:7e:f9:67:85:02:b9:4a:a8:cb:
         df:62:43:ef:5f:29:07:df:bc:5f:b1:fc:39:11:5d:8f:39:67:
         1d:9c:5e:c9:b1:14:50:e1:6d:a9:0d:66:25:38:e2:70:98:cf:
         8e:62:c4:30:8e:93:d9:8d:0a:94:02:1a:2b:fc:84:27:00:d2:
         c3:1e:85:e4:9e:7f:ae:be:8f:22:bf:ea:c5:25:be:30:cd:3a:
         6c:d1:31:4b:39:dc:f8:f5:ca:56:ca:34:45:f6:45:04:ad:13:
         92:38:b5:22:3e:7c:bf:66:10:32:8d:98:13:62:b8:7c:8b:03:
         87:c4:d1:3e:e2:e9:6e:22:d2:79:4c:22:68:62:c0:78:ee:a9:
         91:0e:27:78:f8:0b:93:80:f4:d5:7c:1f:e6:b3:8e:65:fa:c5:
         65:93:b9:cb:12:23:a6:ab:9c:b0:94:46:d4:48:64:80:2b:47:
         dc:b4:30:f2
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUW7aMScLDycNs6s+XZcIOa4QxfuowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMDgxMzE4MTJaFw0yNTAzMDcxMzIzMTJaMDMxMTAvBgNV
BAMTKDU1N0ZEOEMyM0I4RTZCQ0I2QzU5NUNFRTJCOEExQUMxQjE5MURDMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5bvEAxVG1c0EqaLvq6Cxi6in6
nyOX2D/vVcqntaJ5e0TQ8emGmfw+VIPPoBGhApqlEGb2L2avhvsud4F/ZcqU5lhQ
16MYK/ducfSbLbX+2ZWRniq9t8gkarhqLxpLzMZsGWOBHN5QEgDBAR+lqVmJN4ab
gwHraZIWVI6ESvOOUJRNgXJ/0GH8QRscuAAAUr+4RHa1QTW8ytFOEilY+BEUs4K5
Tnu9HDqOl983e4S/30iVeTjRmK7BZ2ITyDEGtK+YKiz4JSSrqVEIqqYcv7owY7wb
H0BY2i0AWy3tddV8VA+ZvLWkYF0C0BQQVOnCvMJSy/p+YEO6M2+6dMbPtm4nAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRVf9jCO45ry2xZ
XO4rihrBsZHcFzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HbnJERTYxN3Framk3ajQ4NW11dHU5ZFc2QWF3cG9WU3lT
M2phVHhiNHVzaC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5
UzNqYVR4YjR1c2gvMC81NTdGRDhDMjNCOEU2QkNCNkM1OTVDRUUyQjhBMUFDMUIx
OTFEQzE3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAOxJrgDBAPJg/AwDQQC
AAIwBwMFACgECzgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM4WMA0GCSqGSIb3
DQEBCwUAA4IBAQALMegt49HebQEr+AMHxozNGeJc1tcW+7p/g42ygQ5NJ71eY+VW
43r9q0Y+rO6s/d+oTRLOD32/oArye19ovslY2fGL/XXVQC+acsDFwwMeBNB++WeF
ArlKqMvfYkPvXykH37xfsfw5EV2POWcdnF7JsRRQ4W2pDWYlOOJwmM+OYsQwjpPZ
jQqUAhor/IQnANLDHoXknn+uvo8iv+rFJb4wzTps0TFLOdz49cpWyjRF9kUErROS
OLUiPny/ZhAyjZgTYrh8iwOHxNE+4uluItJ5TCJoYsB47qmRDid4+AuTgPTVfB/m
s45l+sVlk7nLEiOmq5ywlEbUSGSAK0fctDDy
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org