Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/56150982B5F1DEA43D1E039578ABFA6C5A01B479.cer
File:                     56150982B5F1DEA43D1E039578ABFA6C5A01B479.cer (raw, json)
Hash identifier:          tcKa0RbOfPDodWeVpq1UVp+tqwwau5nZUTe5c76FGqw=
Subject key identifier:   56:15:09:82:B5:F1:DE:A4:3D:1E:03:95:78:AB:FA:6C:5A:01:B4:79
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7360F28E7C88198AB33AF68423D7824A32E9D32E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/1/56150982B5F1DEA43D1E039578ABFA6C5A01B479.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 04 Nov 2023 13:14:48 +0000
Certificate not after:    Sat 02 Nov 2024 13:19:48 +0000
Subordinate resources:    AS: 266481
                          IP: 170.83.88.0/22
                          IP: 2804:387c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:60:f2:8e:7c:88:19:8a:b3:3a:f6:84:23:d7:82:4a:32:e9:d3:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  4 13:14:48 2023 GMT
            Not After : Nov  2 13:19:48 2024 GMT
        Subject: CN=56150982B5F1DEA43D1E039578ABFA6C5A01B479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:45:7d:0e:3e:7a:4a:ea:f5:f3:00:d6:60:
                    8a:20:a1:e9:03:41:62:23:f8:d2:c8:32:e1:97:23:
                    f4:0b:f5:13:a7:af:3f:bf:24:ae:5f:23:3c:be:17:
                    19:8f:44:6a:98:eb:85:5a:81:f4:31:36:f1:67:f7:
                    37:62:24:25:d2:14:e3:c1:16:1c:02:7b:81:e6:26:
                    6e:07:c7:0e:b6:52:9d:3a:15:ab:20:92:09:de:a7:
                    9e:08:42:54:8e:af:56:35:bf:8c:d5:6c:a8:52:7a:
                    0f:a8:71:6a:a2:61:3a:a5:b5:1e:29:d5:a7:fe:bb:
                    1f:89:c5:2f:00:4b:a5:9f:e8:36:c5:a6:a2:ec:6f:
                    19:84:19:08:a8:0d:39:df:cf:d4:bd:42:e1:33:4d:
                    b9:54:68:19:b2:b9:35:4d:28:1c:f9:d6:b9:15:05:
                    a8:23:d1:3b:98:ef:6a:07:98:ed:d0:e0:90:9c:a2:
                    d0:b6:78:1a:94:d4:1b:5a:ae:fd:e7:23:e9:49:a0:
                    b3:21:a6:68:8c:56:8b:71:61:02:c7:00:d9:ba:6b:
                    74:27:c6:af:5a:aa:19:89:32:bc:96:12:26:4b:cb:
                    90:68:e4:60:1f:6a:dd:96:03:f8:06:d9:91:84:17:
                    89:32:f1:0e:89:4b:23:bd:a9:16:c5:41:75:06:48:
                    85:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:15:09:82:B5:F1:DE:A4:3D:1E:03:95:78:AB:FA:6C:5A:01:B4:79
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/1/56150982B5F1DEA43D1E039578ABFA6C5A01B479.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.88.0/22
                IPv6:
                  2804:387c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266481

    Signature Algorithm: sha256WithRSAEncryption
         a8:e8:45:b6:cc:92:49:9d:20:4e:e3:ca:e0:01:52:0b:41:69:
         11:58:4a:9d:a8:1c:a7:7f:d5:cb:1d:5d:cd:fb:3d:bf:36:84:
         5d:90:ac:2b:7a:78:6e:fb:0e:7e:eb:1b:5b:04:36:bf:72:dc:
         f8:07:32:c0:d8:f5:36:6a:6e:da:71:a6:87:d9:1b:c9:f2:49:
         3e:74:5f:8d:9c:58:e3:9e:33:d2:1c:85:0f:df:cb:7e:6a:c2:
         64:c4:db:dc:fd:59:d1:c5:30:96:ac:d4:92:ed:4c:9d:40:af:
         56:6c:74:e3:28:dc:c0:67:f0:61:cc:55:8f:1f:b7:60:cb:14:
         c3:6a:4b:66:ee:90:9b:54:d8:17:7e:17:78:cc:ef:85:bf:47:
         b8:4f:29:0d:3b:be:ba:b1:b7:73:44:6d:66:05:17:c4:90:a6:
         77:f4:d0:5b:98:60:52:f2:02:74:e3:fd:fb:0b:80:53:7e:c9:
         c8:0b:56:d4:f3:a0:e1:03:d6:ad:f5:95:6d:a5:28:38:16:e7:
         3a:4e:10:12:28:83:c4:58:5a:f8:90:ff:bf:9d:96:0d:d4:91:
         06:6c:6f:df:06:f1:a5:f4:19:48:d4:74:49:5f:ec:06:b1:2f:
         ff:44:a4:43:58:77:93:fe:2f:5e:18:83:fe:a0:57:51:34:3f:
         94:21:3f:b6
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUc2DyjnyIGYqzOvaEI9eCSjLp0y4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMDQxMzE0NDhaFw0yNDExMDIxMzE5NDhaMDMxMTAvBgNV
BAMTKDU2MTUwOTgyQjVGMURFQTQzRDFFMDM5NTc4QUJGQTZDNUEwMUI0NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0OUV9Dj56Sur18wDWYIogoekD
QWIj+NLIMuGXI/QL9ROnrz+/JK5fIzy+FxmPRGqY64VagfQxNvFn9zdiJCXSFOPB
FhwCe4HmJm4Hxw62Up06Fasgkgnep54IQlSOr1Y1v4zVbKhSeg+ocWqiYTqltR4p
1af+ux+JxS8AS6Wf6DbFpqLsbxmEGQioDTnfz9S9QuEzTblUaBmyuTVNKBz51rkV
Bagj0TuY72oHmO3Q4JCcotC2eBqU1Btarv3nI+lJoLMhpmiMVotxYQLHANm6a3Qn
xq9aqhmJMryWEiZLy5Bo5GAfat2WA/gG2ZGEF4ky8Q6JSyO9qRbFQXUGSIVrAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRWFQmCtfHepD0e
A5V4q/psWgG0eTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BS0FtNXJwQTRGNTRqSFJkcVA4OWNNZnRmUlZKZVF1VVRp
QWQ5N25weW1rUy8xLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQUtBbTVycEE0RjU0akhSZHFQODljTWZ0ZlJWSmVRdVVU
aUFkOTducHlta1MvMS81NjE1MDk4MkI1RjFERUE0M0QxRTAzOTU3OEFCRkE2QzVB
MDFCNDc5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKqU1gwDQQCAAIwBwMF
ACgEOHwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBDxMA0GCSqGSIb3DQEBCwUA
A4IBAQCo6EW2zJJJnSBO48rgAVILQWkRWEqdqBynf9XLHV3N+z2/NoRdkKwrenhu
+w5+6xtbBDa/ctz4BzLA2PU2am7acaaH2RvJ8kk+dF+NnFjjnjPSHIUP38t+asJk
xNvc/VnRxTCWrNSS7UydQK9WbHTjKNzAZ/BhzFWPH7dgyxTDaktm7pCbVNgXfhd4
zO+Fv0e4TykNO766sbdzRG1mBRfEkKZ39NBbmGBS8gJ04/37C4BTfsnIC1bU86Dh
A9at9ZVtpSg4Fuc6ThASKIPEWFr4kP+/nZYN1JEGbG/fBvGl9BlI1HRJX+wGsS//
RKRDWHeT/i9eGIP+oFdRND+UIT+2
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org