Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/560E09E3344D3043DA46A24A78542DE5E249544A.cer
File:                     560E09E3344D3043DA46A24A78542DE5E249544A.cer (raw, json)
Hash identifier:          v4DI2jG3Dvu+CXJFJjmt3/roeFDXAn2we7ita10gZx0=
Subject key identifier:   56:0E:09:E3:34:4D:30:43:DA:46:A2:4A:78:54:2D:E5:E2:49:54:4A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7FEB665D2E72306AF3C4E7CE3A64FA26061B2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/0/560E09E3344D3043DA46A24A78542DE5E249544A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Mar 2023 11:06:48 +0000
Certificate not after:    Wed 20 Mar 2024 11:11:48 +0000
Subordinate resources:    AS: 262749
                          IP: 189.89.80.0/20
                          IP: 2804:184::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:eb:66:5d:2e:72:30:6a:f3:c4:e7:ce:3a:64:fa:26:06:1b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 22 11:06:48 2023 GMT
            Not After : Mar 20 11:11:48 2024 GMT
        Subject: CN=560E09E3344D3043DA46A24A78542DE5E249544A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:28:75:be:84:0d:17:44:4a:53:f3:9a:ba:47:
                    dd:39:00:b7:4b:26:98:95:79:b8:8d:93:64:60:24:
                    f5:9f:5a:82:9a:66:e8:15:20:6f:c0:f7:55:f1:b7:
                    ee:73:f0:29:df:c0:41:75:f1:36:3f:8a:fe:bf:bd:
                    46:d1:cd:38:31:4e:04:5b:56:8e:7f:f6:c0:c0:42:
                    61:07:6a:df:8a:13:56:97:2a:7e:f9:ef:18:5b:54:
                    a2:1d:a7:95:79:c0:2c:1e:2b:9a:d4:7e:d3:85:28:
                    89:81:3c:de:82:e9:b2:29:82:53:8e:81:20:45:6f:
                    e7:62:ca:30:c2:24:86:3e:60:56:b1:d0:53:ae:bb:
                    ab:a6:6c:d8:68:6a:f5:3e:f8:4b:6f:a0:bc:00:16:
                    e7:e5:3a:36:d9:e4:1a:aa:6a:cf:18:47:96:f0:b4:
                    78:ec:98:4c:59:97:94:55:06:72:d5:92:3d:04:4a:
                    ca:de:3e:57:8c:f6:7b:25:b3:85:c0:9e:69:34:57:
                    95:10:01:0d:3d:f4:6b:50:c0:c3:71:51:1f:98:f2:
                    44:3b:98:8f:00:88:ff:2e:e9:aa:ee:e3:d1:98:63:
                    05:b2:3f:0c:c7:c8:ba:4b:65:71:bc:43:6f:f2:51:
                    af:be:c8:98:4a:cf:93:60:6e:ad:a3:c1:7b:56:47:
                    fa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:0E:09:E3:34:4D:30:43:DA:46:A2:4A:78:54:2D:E5:E2:49:54:4A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/0/560E09E3344D3043DA46A24A78542DE5E249544A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.80.0/20
                IPv6:
                  2804:184::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262749

    Signature Algorithm: sha256WithRSAEncryption
         10:70:91:2a:37:59:b6:45:55:1a:ba:23:4d:4e:e5:b6:26:24:
         72:f3:3d:58:3c:9c:df:ae:d2:c4:11:4d:1a:48:8c:eb:6e:23:
         2b:59:97:dc:5f:42:c6:b6:1e:1a:90:06:0f:7d:ed:25:7b:01:
         08:7d:51:e3:ba:b7:b7:36:d1:11:58:88:91:b9:82:1e:90:e3:
         ba:9d:dc:76:40:1f:cf:af:08:d3:9d:cd:cf:a8:5a:66:81:e9:
         c5:28:80:9e:19:e1:0d:5f:3a:0f:55:79:0a:87:61:5a:19:4c:
         b2:39:68:42:ad:f1:7e:19:26:6b:dc:d9:89:df:51:fa:87:9e:
         d3:2f:f0:3a:cd:f2:49:d6:1f:7c:eb:cd:c6:f8:7d:7c:17:b2:
         50:60:92:ef:a9:a9:d0:b3:c5:f7:e1:7e:8b:5f:b6:3b:9f:63:
         5c:9c:1e:a9:25:1a:2c:0c:9a:00:2a:2e:a6:c3:ec:e2:fd:84:
         b5:7d:af:d5:a9:25:f4:7c:60:a0:84:f4:0b:48:14:03:aa:7c:
         7f:4a:a4:2f:3c:80:05:f8:ec:c0:da:5b:2b:a6:c6:bb:66:0b:
         cf:0a:68:8a:ed:98:e8:e9:3a:6d:03:19:3b:99:02:95:13:41:
         78:e0:f4:d7:05:3e:0d:d2:ad:e6:f5:90:64:10:dc:2b:d9:e8:
         ea:a0:06:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org