Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/559666084672FD61F081E49F0C76FD1203851E54.cer
File:                     559666084672FD61F081E49F0C76FD1203851E54.cer (raw, json)
Hash identifier:          D/Zsr78aM62BuvVVTMPabqFXMepSsq+a5j4stfEh1TE=
Subject key identifier:   55:96:66:08:46:72:FD:61:F0:81:E4:9F:0C:76:FD:12:03:85:1E:54
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7442CFBD39FF005FECFDF650BD1E166CD80E2BAB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/559666084672FD61F081E49F0C76FD1203851E54.mft
caRepository:             rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 01:01:43 +0000
Certificate not after:    Tue 28 May 2024 01:06:43 +0000
Subordinate resources:    AS: 264926
                          IP: 168.228.176.0/22
                          IP: 2804:3004::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:42:cf:bd:39:ff:00:5f:ec:fd:f6:50:bd:1e:16:6c:d8:0e:2b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 01:01:43 2023 GMT
            Not After : May 28 01:06:43 2024 GMT
        Subject: CN=559666084672FD61F081E49F0C76FD1203851E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8d:79:67:f2:da:1e:fe:a8:3d:03:86:14:89:
                    b9:e9:14:87:31:ec:2e:fe:4a:ae:77:cf:a5:84:a2:
                    19:be:fa:da:1d:c8:ab:be:08:d2:bb:c7:ab:02:f6:
                    b3:d4:8c:1a:2a:ef:aa:5d:d5:5a:b1:d8:b6:6a:a3:
                    f9:8c:7c:a9:b6:21:f7:2d:21:02:67:aa:eb:8c:18:
                    02:b6:30:d1:25:40:68:4d:24:81:28:ab:32:e6:1b:
                    3f:4c:f2:f5:3d:1e:66:33:62:70:b4:84:ec:b8:02:
                    a5:19:a3:d3:41:a1:87:5c:5d:fe:23:96:cc:bc:9f:
                    b7:a5:e5:d3:ce:cd:4a:74:81:17:8d:e0:70:d0:1c:
                    fd:bc:a0:79:d4:a8:34:4c:69:c8:68:e3:71:31:9a:
                    09:0b:ac:1a:84:6f:68:09:d9:90:7b:5c:b0:0b:e6:
                    56:83:af:1c:92:0f:2f:2a:72:d8:23:bd:51:f2:dd:
                    23:dd:5f:2b:31:15:60:1e:fb:06:f3:c9:c5:59:86:
                    03:8c:75:dc:a4:e3:2c:0f:44:35:5b:90:3e:a3:77:
                    e1:95:f5:b5:10:17:b5:5f:d4:12:55:a3:be:d1:62:
                    f3:5c:b6:5a:ba:e9:9b:db:ea:5e:30:8e:7c:06:58:
                    48:78:1d:4e:45:a0:f8:57:53:0d:d6:7e:63:45:d3:
                    97:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:96:66:08:46:72:FD:61:F0:81:E4:9F:0C:76:FD:12:03:85:1E:54
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/559666084672FD61F081E49F0C76FD1203851E54.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.176.0/22
                IPv6:
                  2804:3004::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264926

    Signature Algorithm: sha256WithRSAEncryption
         20:52:12:ac:db:fd:00:22:6d:45:5d:da:27:20:f9:a1:3f:70:
         92:b7:a8:4d:4e:f6:72:0d:1d:b7:d8:58:4f:e1:5f:cf:a5:74:
         d3:e7:40:a7:34:b2:17:9d:7d:64:e2:4a:02:f5:92:81:90:3f:
         e3:c7:da:48:bd:3a:46:7e:15:99:ba:35:ec:f5:13:40:7d:fc:
         e6:30:64:43:e8:d6:92:6d:7d:11:f2:c1:26:98:be:d1:17:e0:
         2b:ab:39:aa:90:b3:1c:6a:9d:91:12:7c:62:b3:ef:eb:f8:c6:
         66:28:a4:79:b4:19:6e:53:99:22:6d:9e:36:9d:da:4e:ce:2c:
         c6:9f:62:29:41:c7:ad:b2:ef:da:95:8d:71:4c:02:ed:9f:65:
         ae:14:6c:6b:94:ba:09:4a:e3:cb:9c:ae:75:c9:d6:9f:4b:d7:
         8a:c9:9f:c2:ee:b6:3b:02:20:96:02:50:26:f0:d7:c8:9d:be:
         73:f5:07:5e:46:82:c9:43:53:01:b3:e9:0e:5d:34:78:9c:3d:
         0d:3a:a3:5d:55:d3:de:cb:6b:05:ab:8d:3a:2e:98:ee:f8:bc:
         bd:1b:8a:44:68:68:89:44:e1:70:5c:8c:d7:36:5c:88:6d:05:
         08:16:c4:79:d2:d8:f5:c8:de:61:ad:e1:3f:07:4f:27:38:9d:
         79:35:60:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org