Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/55BEC9CC86C3DD5C4EC25A993E9A575CCAD0CFB3.cer
File:                     55BEC9CC86C3DD5C4EC25A993E9A575CCAD0CFB3.cer (raw, json)
Hash identifier:          rYfCQOqF3bmCcy8FpoSJj3I7Mxv1P/9UclVj9cqm5LY=
Subject key identifier:   55:BE:C9:CC:86:C3:DD:5C:4E:C2:5A:99:3E:9A:57:5C:CA:D0:CF:B3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4F218BDBB8E2C627C2D45DFE3A6E32E4C14A220B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bu4qPQGJoe1TPHwwkS6upjyiqChWR3YceFZ9H23xJCih/0/55BEC9CC86C3DD5C4EC25A993E9A575CCAD0CFB3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bu4qPQGJoe1TPHwwkS6upjyiqChWR3YceFZ9H23xJCih/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 17:57:46 +0000
Certificate not after:    Thu 23 May 2024 18:02:46 +0000
Subordinate resources:    AS: 270879
                          IP: 186.194.8.0/22
                          IP: 2804:72d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:21:8b:db:b8:e2:c6:27:c2:d4:5d:fe:3a:6e:32:e4:c1:4a:22:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 25 17:57:46 2023 GMT
            Not After : May 23 18:02:46 2024 GMT
        Subject: CN=55BEC9CC86C3DD5C4EC25A993E9A575CCAD0CFB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c9:73:1b:af:5a:d0:d8:23:e7:bd:b9:d0:ad:
                    75:bc:68:0a:5c:d0:8f:49:d0:ac:1c:18:95:16:bf:
                    4f:2d:cd:fb:50:ec:ee:39:32:62:a6:c1:9f:bc:2d:
                    1b:4a:36:5c:6b:d4:40:68:36:bf:1b:a5:42:b0:bd:
                    b7:82:d0:c2:da:e9:57:81:86:99:3f:ae:b1:00:a0:
                    2c:6e:c9:cd:3e:ab:b3:c9:f9:a6:31:80:ab:6e:07:
                    66:30:7f:4c:ae:c7:15:f3:2d:8d:58:72:c5:28:63:
                    08:05:c1:2a:3f:95:ae:40:05:38:b1:ce:8e:bf:59:
                    62:02:ef:85:77:04:59:96:aa:e2:5a:ed:2c:cd:c4:
                    2c:5f:44:88:69:ac:0f:73:7e:7c:ae:67:c1:1f:2a:
                    93:f1:fa:5e:75:4d:4d:60:6c:96:f1:35:af:8f:47:
                    a1:ff:71:58:26:05:bb:9c:a1:1b:b0:da:54:aa:4c:
                    10:c5:b9:66:1d:c1:eb:65:a7:67:1f:5e:7e:98:7a:
                    31:b5:63:6a:c6:50:f0:e9:59:18:ed:28:0e:07:1f:
                    84:07:41:46:50:e5:93:9d:ae:a5:6b:a6:69:34:31:
                    18:33:a3:a4:a9:4d:fe:af:9f:10:5c:48:eb:dc:41:
                    f8:b7:5a:22:5d:b5:3b:7a:d7:8a:4b:b9:c4:e4:c7:
                    05:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:BE:C9:CC:86:C3:DD:5C:4E:C2:5A:99:3E:9A:57:5C:CA:D0:CF:B3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bu4qPQGJoe1TPHwwkS6upjyiqChWR3YceFZ9H23xJCih/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bu4qPQGJoe1TPHwwkS6upjyiqChWR3YceFZ9H23xJCih/0/55BEC9CC86C3DD5C4EC25A993E9A575CCAD0CFB3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.8.0/22
                IPv6:
                  2804:72d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270879

    Signature Algorithm: sha256WithRSAEncryption
         2e:b0:a4:99:25:e7:f2:ad:b2:6e:5e:c9:11:a9:f0:7f:e3:61:
         ce:37:3f:8d:d1:9d:b8:81:ce:a2:c6:52:2b:7b:15:63:87:c2:
         f4:49:20:fb:c2:78:56:9a:ce:03:71:df:a3:1b:da:ae:89:26:
         bc:20:e5:64:8b:91:a7:71:7b:ba:c7:6e:81:8e:de:b6:81:11:
         dc:62:45:56:45:7a:eb:32:70:3c:77:4c:91:61:ac:16:90:e0:
         a6:c6:5c:a2:29:27:f7:4c:6c:87:56:0b:f5:ff:dc:3c:7a:b2:
         ac:cd:ba:ee:1d:4f:2c:7b:c6:9d:a5:e2:c2:f9:51:8d:d2:6d:
         19:ba:78:9a:20:64:d6:66:b7:29:d7:40:3c:f6:6f:47:07:86:
         b8:4f:90:61:be:9d:5b:7a:a5:da:3d:0b:53:7b:32:95:e9:c9:
         74:56:3b:f8:05:59:e6:1a:71:1f:a2:f1:52:0b:52:9d:86:6c:
         6c:74:bf:dc:1f:17:ec:38:c7:2e:37:86:c9:ac:1c:44:82:60:
         da:9f:66:82:57:db:85:c4:a8:c7:a4:80:6b:26:6a:3c:1a:c6:
         38:c1:3e:7f:7e:d6:a4:97:cb:ec:a0:2c:78:9a:45:58:f4:7d:
         d4:ba:6d:df:bd:f4:50:f4:9b:45:df:10:c2:86:65:3d:ad:8b:
         4a:0f:c3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org