Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/567AAE8B92B2E1EC89C0910BAA4126FC1A02766A.cer
File:                     567AAE8B92B2E1EC89C0910BAA4126FC1A02766A.cer (raw, json)
Hash identifier:          onv3XP9Z4eHqFV0wRomVFIs0HTwfYBihG180HDTQweY=
Subject key identifier:   56:7A:AE:8B:92:B2:E1:EC:89:C0:91:0B:AA:41:26:FC:1A:02:76:6A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2D4511CED9C8CBB5F3AA0C22AA502B009FC53CFA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/567AAE8B92B2E1EC89C0910BAA4126FC1A02766A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Mar 2023 15:30:33 +0000
Certificate not after:    Mon 11 Mar 2024 15:35:33 +0000
Subordinate resources:    AS: 267999
                          IP: 45.167.108.0/22
                          IP: 2804:5674::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:45:11:ce:d9:c8:cb:b5:f3:aa:0c:22:aa:50:2b:00:9f:c5:3c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 13 15:30:33 2023 GMT
            Not After : Mar 11 15:35:33 2024 GMT
        Subject: CN=567AAE8B92B2E1EC89C0910BAA4126FC1A02766A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f7:de:e3:96:28:2d:5e:20:2f:07:b0:bd:c8:
                    a2:b4:5a:dc:8d:b0:e4:78:3c:c3:69:ac:33:3f:ae:
                    87:13:10:c3:a7:12:00:09:84:25:61:57:8d:53:eb:
                    cd:59:f2:fc:e0:e9:d8:b9:dd:5d:d7:8a:79:45:54:
                    98:82:48:60:14:07:15:49:d9:a1:b2:75:5a:51:ca:
                    bb:d0:f8:83:59:99:c0:b9:2a:eb:d4:0e:17:b2:29:
                    20:17:08:86:89:57:23:d2:a9:11:cc:54:b9:12:22:
                    ac:95:fd:49:05:48:30:31:14:ec:13:93:2c:10:d4:
                    cb:d9:49:5f:f1:18:d5:f3:63:b6:da:fa:b8:1a:73:
                    14:4a:73:79:fb:d6:98:a6:45:b7:30:37:ff:24:82:
                    1b:21:d1:66:ef:5a:cc:1b:75:50:06:7b:9d:3d:7d:
                    61:81:74:19:67:32:83:ae:2f:90:a3:40:21:a6:1b:
                    a2:ee:2a:35:32:80:99:68:59:0a:7f:75:52:b3:6a:
                    7f:d7:1c:99:61:f8:50:7a:97:db:c0:ce:2c:8a:7b:
                    13:e7:8a:4a:48:a9:e3:30:f4:fc:2c:1d:3e:27:bb:
                    dd:1f:a1:08:f5:aa:90:bf:a8:d9:d3:f4:88:ea:26:
                    3a:99:38:70:de:a2:e0:15:3d:b5:38:ab:93:8a:f6:
                    eb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:7A:AE:8B:92:B2:E1:EC:89:C0:91:0B:AA:41:26:FC:1A:02:76:6A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/567AAE8B92B2E1EC89C0910BAA4126FC1A02766A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.108.0/22
                IPv6:
                  2804:5674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267999

    Signature Algorithm: sha256WithRSAEncryption
         4e:4c:fe:94:90:8e:74:83:6c:b2:1c:4c:c0:2a:1e:80:0d:49:
         cd:d3:8e:e3:21:2e:40:96:57:78:ef:7a:20:e6:33:69:f4:88:
         77:dc:d0:71:84:86:5b:e9:cd:48:d7:81:2f:d5:64:f1:1b:e8:
         af:c5:7e:46:6d:6b:6c:9a:2a:aa:1c:c7:ad:51:fe:e4:e3:70:
         3b:35:fa:aa:32:db:c5:66:20:3b:45:10:18:26:e3:d6:e5:7c:
         dd:db:7f:7f:ab:47:b4:d6:ae:0a:33:11:41:8e:47:5f:c3:f9:
         0b:ff:5f:ae:98:1a:ee:5e:24:98:e8:c0:3a:51:ce:23:92:37:
         de:b5:95:cd:5a:71:00:cf:64:6e:ae:85:5a:a8:ea:c3:a2:11:
         44:19:ce:ec:26:c4:f6:30:a4:5f:4d:a7:e3:07:dc:a7:bc:bf:
         3a:71:4e:60:c0:b0:fd:e2:e1:34:37:1f:5f:1f:d1:ee:bd:ea:
         8d:a4:81:4f:c6:1a:23:26:f9:71:51:7c:11:9f:59:76:4b:5b:
         01:23:38:9a:ab:5f:3b:47:06:20:3c:fc:b1:a1:ec:3c:7f:df:
         2c:97:f3:f4:b6:4e:0f:7c:cd:68:aa:50:7e:5c:01:04:a7:a5:
         39:96:1d:de:ae:0d:a6:98:94:44:93:21:31:21:17:04:a9:11:
         56:c2:ef:74
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIULUURztnIy7XzqgwiqlArAJ/FPPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMTMxNTMwMzNaFw0yNDAzMTExNTM1MzNaMDMxMTAvBgNV
BAMTKDU2N0FBRThCOTJCMkUxRUM4OUMwOTEwQkFBNDEyNkZDMUEwMjc2NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG997jligtXiAvB7C9yKK0WtyN
sOR4PMNprDM/rocTEMOnEgAJhCVhV41T681Z8vzg6di53V3XinlFVJiCSGAUBxVJ
2aGydVpRyrvQ+INZmcC5KuvUDheyKSAXCIaJVyPSqRHMVLkSIqyV/UkFSDAxFOwT
kywQ1MvZSV/xGNXzY7ba+rgacxRKc3n71pimRbcwN/8kghsh0WbvWswbdVAGe509
fWGBdBlnMoOuL5CjQCGmG6LuKjUygJloWQp/dVKzan/XHJlh+FB6l9vAziyKexPn
ikpIqeMw9PwsHT4nu90foQj1qpC/qNnT9IjqJjqZOHDeouAVPbU4q5OK9uu/AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRWeq6LkrLh7InA
kQuqQSb8GgJ2ajAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BbVBqRUdlQ3ludDJiU1R1OHgxNEdWdWRXZnBXa2tmQWRX
dmdmdUZaV3JLZC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BbVBqRUdlQ3ludDJiU1R1OHgxNEdWdWRXZnBXa2tmQWRX
dmdmdUZaV3JLZC8wLzU2N0FBRThCOTJCMkUxRUM4OUMwOTEwQkFBNDEyNkZDMUEw
Mjc2NkEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2nbDANBAIAAjAHAwUA
KARWdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFt8wDQYJKoZIhvcNAQELBQAD
ggEBAE5M/pSQjnSDbLIcTMAqHoANSc3TjuMhLkCWV3jveiDmM2n0iHfc0HGEhlvp
zUjXgS/VZPEb6K/FfkZta2yaKqocx61R/uTjcDs1+qoy28VmIDtFEBgm49blfN3b
f3+rR7TWrgozEUGOR1/D+Qv/X66YGu5eJJjowDpRziOSN961lc1acQDPZG6uhVqo
6sOiEUQZzuwmxPYwpF9Np+MH3Ke8vzpxTmDAsP3i4TQ3H18f0e696o2kgU/GGiMm
+XFRfBGfWXZLWwEjOJqrXztHBiA8/LGh7Dx/3yyX8/S2Tg98zWiqUH5cAQSnpTmW
Hd6uDaaYlESTITEhFwSpEVbC73Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org