Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.cer
File:                     568240316B2E029888E6CD5C24522C55D5D6DA1E.cer (raw, json)
Hash identifier:          4RGt0of3Wfpy4zfkA56TnmjyFu1HzMJBdZeq7zOqFes=
Subject key identifier:   56:82:40:31:6B:2E:02:98:88:E6:CD:5C:24:52:2C:55:D5:D6:DA:1E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       720ED82198677204BE70914F95999C01901C6B41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 May 2023 21:49:18 +0000
Certificate not after:    Mon 13 May 2024 21:54:18 +0000
Subordinate resources:    AS: 267573
                          IP: 45.70.20.0/22
                          IP: 2804:437c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:0e:d8:21:98:67:72:04:be:70:91:4f:95:99:9c:01:90:1c:6b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 15 21:49:18 2023 GMT
            Not After : May 13 21:54:18 2024 GMT
        Subject: CN=568240316B2E029888E6CD5C24522C55D5D6DA1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2b:42:1f:a8:e2:98:48:a2:8d:96:50:b5:42:
                    cb:27:a2:b7:86:ae:10:b7:90:69:22:bc:90:7c:86:
                    b8:8d:d0:d3:12:a2:d4:27:24:18:9a:14:1d:f5:27:
                    e0:75:bc:89:e5:dd:2c:99:49:6c:b2:6b:c8:6c:36:
                    e6:a0:f7:c8:f0:44:ff:a7:67:7c:d4:54:21:74:c1:
                    16:e4:aa:54:cb:9b:e6:24:bc:cb:f1:03:15:06:c2:
                    82:2f:41:80:30:d2:71:19:d6:74:35:17:4e:b5:a9:
                    8a:f6:88:63:52:6c:b4:79:24:10:da:c6:83:05:50:
                    55:c4:f3:ae:e2:0a:12:7f:72:0f:e9:4a:69:2d:68:
                    27:b7:69:70:00:b7:2b:d5:3f:3c:58:42:32:b2:0c:
                    bc:4c:eb:e8:12:41:80:a6:4b:60:22:ee:8b:eb:2a:
                    fd:2e:fd:87:7d:bf:f3:41:fb:cc:b9:e4:de:cf:9b:
                    73:40:42:1c:3b:72:69:a7:1e:fe:a9:0f:2f:78:b4:
                    1b:47:c5:31:28:cc:ce:13:fb:15:2d:d3:2b:ab:01:
                    7e:28:d3:e5:21:54:5c:94:c0:6b:69:60:e0:27:22:
                    fa:49:0c:33:78:4f:58:76:9d:4d:5f:b8:6d:4b:37:
                    fa:fb:f2:27:8e:bb:16:71:db:87:76:e7:97:d5:f8:
                    3e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:82:40:31:6B:2E:02:98:88:E6:CD:5C:24:52:2C:55:D5:D6:DA:1E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.20.0/22
                IPv6:
                  2804:437c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267573

    Signature Algorithm: sha256WithRSAEncryption
         8c:99:82:b4:c1:4b:47:fb:51:7c:5f:25:a5:46:e3:c0:73:cc:
         c4:5f:35:55:66:91:b6:2e:c1:c6:9f:47:51:c9:f1:23:c4:ab:
         04:64:46:dd:d7:9c:f9:66:50:2d:5b:e0:22:e8:9f:42:13:a1:
         2f:6a:ec:ca:87:2d:e0:bc:9a:20:bf:15:a5:cc:b8:b0:2c:40:
         68:7f:28:ba:45:f5:9c:c1:c6:22:2f:d3:79:e2:2e:14:ad:41:
         f6:b4:17:9d:d3:dd:2e:6e:85:53:83:b2:ad:d6:91:70:9c:61:
         64:cf:ef:f5:34:15:92:02:26:25:85:36:21:b9:d5:93:46:61:
         2f:ec:ea:50:f4:b5:2e:35:4f:31:13:d6:56:c7:19:60:38:8e:
         3c:83:7e:8b:59:72:d9:49:78:8b:62:df:0a:34:56:03:d3:57:
         58:47:fd:02:ef:95:06:5c:30:e6:be:18:b7:6f:76:a8:b0:3b:
         03:ba:02:1f:98:f2:66:46:b9:09:7d:13:12:5b:b5:3f:5e:29:
         24:68:35:ad:2a:09:5b:71:b8:2d:be:11:cc:55:ec:db:37:6a:
         51:4e:9a:0f:e2:d9:c6:cb:8a:6a:73:80:d8:7b:30:36:92:3f:
         60:a6:51:2b:ee:98:18:c9:1b:d9:d1:90:99:67:18:e6:c9:0e:
         a2:eb:aa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org