Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/560605179B30D49AEA47E96B1FE2EA49771A2340.cer
File:                     560605179B30D49AEA47E96B1FE2EA49771A2340.cer (raw, json)
Hash identifier:          OW4nSPwqQKzAbCRKBgroJAZTUA2c7zrW+OKkfDuWVT4=
Subject key identifier:   56:06:05:17:9B:30:D4:9A:EA:47:E9:6B:1F:E2:EA:49:77:1A:23:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3369692EB6547974369D2F2FA7166B11C77BBC5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Fix7TPsBTC5gfUz7vQq4PL6y9grdrABfuMKFYmH9gr/0/560605179B30D49AEA47E96B1FE2EA49771A2340.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Fix7TPsBTC5gfUz7vQq4PL6y9grdrABfuMKFYmH9gr/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Oct 2023 18:04:21 +0000
Certificate not after:    Mon 28 Oct 2024 18:09:21 +0000
Subordinate resources:    AS: 270812
                          IP: 200.219.24.0/22
                          IP: 2804:71cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:69:69:2e:b6:54:79:74:36:9d:2f:2f:a7:16:6b:11:c7:7b:bc:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 30 18:04:21 2023 GMT
            Not After : Oct 28 18:09:21 2024 GMT
        Subject: CN=560605179B30D49AEA47E96B1FE2EA49771A2340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5c:a3:89:c8:8c:8e:f2:f4:76:67:ed:66:ea:
                    be:01:e5:88:3e:e2:14:d6:1d:b7:d5:42:ea:81:13:
                    6b:03:e1:2d:91:d6:41:4b:7d:96:3c:79:5a:2f:75:
                    c8:3c:79:fe:3e:b4:2e:ae:b9:e8:50:ef:9b:23:b6:
                    c9:97:ab:35:f6:8d:35:75:94:45:19:1b:79:08:7b:
                    d9:49:17:7e:c0:ab:5a:c2:9d:8f:d8:a6:79:6e:86:
                    36:45:fd:cd:83:ab:86:9e:30:f1:22:c5:8b:0f:12:
                    dc:6a:90:15:44:17:8c:54:45:71:25:6a:17:25:c7:
                    66:53:6a:d6:7c:91:37:46:5c:05:c8:75:ee:e6:23:
                    33:d5:bb:58:b7:bf:9c:9e:2d:04:44:b7:2c:80:bf:
                    8e:bf:65:64:55:d0:4c:af:f4:4a:76:91:e1:fd:9d:
                    39:22:b6:c6:dc:41:00:fb:95:24:4b:9c:ee:a7:64:
                    8a:ee:11:ed:ba:a8:98:df:47:c4:c5:79:83:fb:42:
                    7d:7c:7e:d2:6d:e3:da:05:db:45:fa:f3:d6:39:08:
                    e9:56:d8:62:38:d0:ab:3f:7f:14:66:e5:ca:4c:42:
                    c2:f8:fc:81:4d:9c:18:f5:ef:5f:4e:b8:bf:14:5c:
                    c6:cc:56:7a:41:36:da:9e:f3:84:70:41:7f:45:4d:
                    6a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:06:05:17:9B:30:D4:9A:EA:47:E9:6B:1F:E2:EA:49:77:1A:23:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Fix7TPsBTC5gfUz7vQq4PL6y9grdrABfuMKFYmH9gr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Fix7TPsBTC5gfUz7vQq4PL6y9grdrABfuMKFYmH9gr/0/560605179B30D49AEA47E96B1FE2EA49771A2340.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.24.0/22
                IPv6:
                  2804:71cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270812

    Signature Algorithm: sha256WithRSAEncryption
         87:3f:53:fa:24:2c:06:45:52:5e:84:02:f0:f0:84:d6:eb:69:
         ef:a0:5d:d5:67:bb:d0:86:c2:ad:29:df:f3:b5:40:56:79:ed:
         12:9d:41:1c:ae:18:95:71:7f:66:ef:c4:53:25:a4:16:1e:2e:
         f5:f9:a7:be:51:a6:d3:fd:93:43:89:67:52:03:90:7f:02:7b:
         e4:f8:4f:40:a0:9f:ac:3b:9e:4e:cd:e4:d1:10:e9:d6:a3:b9:
         1c:ea:cd:48:3a:a2:b1:b4:60:31:d4:b8:b9:13:d1:06:ed:39:
         36:d8:65:6d:ba:24:64:6f:7b:33:ca:3f:3c:8d:59:df:af:20:
         73:7b:72:e8:0e:58:93:44:0f:f2:9f:a5:0f:7f:1d:d8:42:56:
         9b:05:ae:b0:b9:e8:fb:a5:3b:d3:4f:9f:81:84:07:ab:37:3d:
         80:f4:19:25:e4:8b:3f:67:3c:65:55:5d:7d:9b:e7:48:23:96:
         35:e9:ae:48:a6:17:7a:64:c7:9e:33:27:50:25:21:4a:41:fb:
         be:b1:4e:22:6f:2d:42:d5:de:91:92:30:98:20:79:76:c2:8e:
         70:60:a3:3d:bd:64:1f:eb:1b:46:cc:ee:a6:af:e5:cd:33:e2:
         57:12:f4:da:c2:52:0c:c3:c3:5b:61:d6:58:32:6b:c6:35:8c:
         d1:17:30:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org