Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5656C6A45A32279DFD574403A4DCE0897C295C4F.cer
File:                     5656C6A45A32279DFD574403A4DCE0897C295C4F.cer (raw, json)
Hash identifier:          n20kyJbSWcY3GmUBTH1TQqPbCGdgFWvAZnmhDFDslCI=
Subject key identifier:   56:56:C6:A4:5A:32:27:9D:FD:57:44:03:A4:DC:E0:89:7C:29:5C:4F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       59F7846BB5E3B1AB74135BDEA6A6BCF33D310CE0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/5656C6A45A32279DFD574403A4DCE0897C295C4F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Jul 2023 19:03:42 +0000
Certificate not after:    Fri 05 Jul 2024 19:08:42 +0000
Subordinate resources:    AS: 53160
                          IP: 138.186.132.0/22
                          IP: 187.19.112.0/20
                          IP: 2804:26d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f7:84:6b:b5:e3:b1:ab:74:13:5b:de:a6:a6:bc:f3:3d:31:0c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  7 19:03:42 2023 GMT
            Not After : Jul  5 19:08:42 2024 GMT
        Subject: CN=5656C6A45A32279DFD574403A4DCE0897C295C4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:54:b4:ce:16:47:5f:e2:2c:67:ec:4e:03:23:
                    b8:29:24:82:7e:33:32:cb:a2:03:ea:8d:a8:65:0f:
                    fd:c2:09:77:44:5d:f3:47:df:8c:1e:00:69:1d:29:
                    e6:c9:24:d8:13:71:f6:28:7c:df:9d:42:bc:45:af:
                    7a:50:09:87:01:02:5d:34:b4:a5:44:82:01:f7:80:
                    80:4a:14:e4:63:17:d2:89:58:20:c6:ca:63:c4:53:
                    77:73:f8:06:01:68:01:63:6f:af:61:08:ce:0e:d7:
                    e9:a9:28:d5:3c:ae:45:0b:dd:2c:71:f8:43:05:d8:
                    6a:77:97:bf:3c:4b:ba:29:54:67:48:72:2a:2c:08:
                    5c:e7:76:94:ed:da:c1:ee:61:a9:25:8e:b1:8c:19:
                    d4:09:f3:b5:4e:a2:f6:e1:39:60:42:dd:f5:c8:21:
                    36:02:04:e2:36:ff:e0:55:47:1c:19:c5:c0:5e:02:
                    aa:dd:79:99:b9:40:f5:dc:b5:d0:42:06:c8:56:5e:
                    65:5c:df:a9:4b:77:e9:9b:e1:d1:af:6b:8c:08:ab:
                    e6:6e:ac:0e:ff:fc:87:df:4a:1c:91:3e:3d:4a:ec:
                    1d:0b:34:02:6c:19:f6:97:8d:83:9f:2b:47:52:0c:
                    3b:20:03:54:67:23:87:01:b1:a7:09:d8:e9:12:ee:
                    ac:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:56:C6:A4:5A:32:27:9D:FD:57:44:03:A4:DC:E0:89:7C:29:5C:4F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/5656C6A45A32279DFD574403A4DCE0897C295C4F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.132.0/22
                  187.19.112.0/20
                IPv6:
                  2804:26d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53160

    Signature Algorithm: sha256WithRSAEncryption
         25:ea:39:60:71:28:15:95:57:71:2f:15:a5:7e:3e:10:22:84:
         cd:30:ec:c8:0e:bc:f8:4d:db:ae:b6:23:42:f6:9c:2d:a2:b7:
         a6:eb:d7:46:21:84:f7:1b:8b:77:0f:59:ef:5b:59:98:ef:63:
         27:b5:9c:11:b7:b8:eb:87:81:bc:be:e2:89:47:1e:00:cd:2b:
         3a:ae:9c:fb:a0:da:ed:3b:bb:90:bf:69:1c:33:d2:a7:60:4f:
         60:61:da:5f:00:e4:03:c0:33:fa:26:f3:71:b8:8d:66:56:aa:
         a2:00:ce:c8:d4:9f:54:7a:e5:d1:bd:47:5d:76:55:17:d4:ab:
         e4:a3:84:46:2b:6c:52:61:64:c1:d4:ae:70:8c:56:80:57:6c:
         01:8b:69:f3:cd:23:5e:00:99:5d:4a:73:2e:8f:b6:ef:12:7b:
         8c:1d:68:4c:bc:ae:58:ce:26:fd:7a:71:9d:f0:9f:68:ff:b6:
         b1:b4:cb:87:10:dc:a7:d5:59:ce:a9:15:40:b1:a6:fe:fc:d2:
         a2:ce:c3:d4:44:48:36:90:14:6f:9a:0b:dd:46:45:72:65:83:
         ea:8d:7a:ea:20:0e:f5:e0:e2:9a:c7:8c:21:9d:4b:aa:40:7a:
         82:13:d2:2e:37:b6:ee:0a:98:2d:d9:ec:f9:e4:70:c7:27:d1:
         5c:3d:84:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org