Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/562211E1DE0C9C646676B8CF7BD55F0AF5DE4613.cer
File:                     562211E1DE0C9C646676B8CF7BD55F0AF5DE4613.cer (raw, json)
Hash identifier:          zpPCHpeTc9PB38e7NaiHjeffTHzIlihG/Jq89K2HiRA=
Subject key identifier:   56:22:11:E1:DE:0C:9C:64:66:76:B8:CF:7B:D5:5F:0A:F5:DE:46:13
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       53DB0D1F18B5E88CA7F708611E4C0B2ACF43D483
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/562211E1DE0C9C646676B8CF7BD55F0AF5DE4613.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 12 Jan 2023 11:31:12 +0000
Certificate not after:    Thu 11 Jan 2024 11:36:12 +0000
Subordinate resources:    AS: 52674
                          IP: 131.161.40.0/22
                          IP: 168.227.236.0/22
                          IP: 177.67.88.0/22
                          IP: 2804:1d40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:db:0d:1f:18:b5:e8:8c:a7:f7:08:61:1e:4c:0b:2a:cf:43:d4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 12 11:31:12 2023 GMT
            Not After : Jan 11 11:36:12 2024 GMT
        Subject: CN=562211E1DE0C9C646676B8CF7BD55F0AF5DE4613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:61:5e:cd:ed:1f:ab:35:1f:6c:98:a8:2a:
                    44:15:b0:73:83:65:8c:12:09:04:68:e4:1a:f7:35:
                    6c:44:53:b2:cd:71:7f:45:93:29:63:7e:46:01:11:
                    c9:28:fe:d9:7a:31:5a:54:ab:4c:f0:b2:fe:d9:89:
                    05:75:0c:a7:92:99:f6:75:aa:a7:c1:87:ce:aa:a4:
                    ad:11:bf:cf:63:92:54:6b:b8:3b:49:ff:a5:65:ac:
                    e7:ba:e8:c1:24:0f:c6:2b:47:08:91:37:dc:3d:d5:
                    70:6a:0e:db:39:b7:f2:ad:2d:ea:32:83:8e:02:7e:
                    ff:02:97:14:2c:e7:2b:e0:a3:09:b2:df:f6:40:bf:
                    71:57:a8:68:ee:2b:47:cc:cc:45:d4:06:4d:6e:a3:
                    93:db:12:e9:02:17:4f:90:0c:63:16:89:ea:f2:fa:
                    c0:08:14:a2:95:9e:12:ac:59:59:ac:4e:4a:8d:bf:
                    e2:a1:70:64:bd:05:42:ac:b6:16:b3:c5:0b:6b:1d:
                    d9:a7:77:c5:68:f0:49:4d:61:12:fc:c7:37:1e:9b:
                    94:55:72:9b:a4:11:d2:b4:14:f3:12:12:10:da:ab:
                    3e:c5:13:b5:a7:e1:20:f2:60:e4:01:da:aa:5b:25:
                    6f:37:64:b1:3e:d7:d7:1f:37:0c:81:d5:04:ca:d2:
                    10:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:22:11:E1:DE:0C:9C:64:66:76:B8:CF:7B:D5:5F:0A:F5:DE:46:13
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/562211E1DE0C9C646676B8CF7BD55F0AF5DE4613.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.40.0/22
                  168.227.236.0/22
                  177.67.88.0/22
                IPv6:
                  2804:1d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52674

    Signature Algorithm: sha256WithRSAEncryption
         5e:4e:82:69:df:aa:fc:4c:42:da:29:ed:9a:bd:25:c9:ce:43:
         98:47:4c:76:40:e8:1c:88:1f:b4:bc:60:df:04:80:ad:1f:40:
         cb:77:cd:39:6b:aa:c4:82:35:e5:03:15:5c:f8:57:96:8f:13:
         2e:3a:38:38:91:ee:3c:3c:c1:0d:b1:88:a3:46:64:8b:67:cf:
         88:36:f1:5f:77:01:a1:1f:5c:f6:f8:40:28:2f:87:0a:c6:c1:
         30:87:d5:52:ce:52:21:46:58:44:47:95:cc:40:cf:85:2e:0f:
         d5:19:10:e6:e4:0d:06:72:41:80:5a:17:36:4f:7b:af:73:d0:
         c8:07:1c:63:a9:8c:1a:97:98:b6:12:85:5e:d5:93:3c:ef:57:
         27:af:a4:ba:11:04:20:22:c2:e0:e0:67:de:e5:88:e6:fc:6f:
         99:f6:01:cc:16:1b:58:ba:1a:40:80:fe:ac:c4:3b:68:cb:54:
         60:fc:30:97:5b:26:3f:2a:b4:2c:3c:71:c4:1d:bb:00:a2:be:
         38:d4:34:8d:66:64:db:de:a9:64:32:59:e5:fa:68:b9:50:d0:
         af:15:40:ce:71:b7:1f:0d:88:d9:29:52:a4:55:0e:d7:ca:fe:
         6a:12:a4:52:66:67:55:b8:6f:0e:33:a0:1a:7c:b9:24:bd:7f:
         33:3a:40:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org