Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5685F2E6C66A6D819815D1D86FC270B4F36579E9.cer
File:                     5685F2E6C66A6D819815D1D86FC270B4F36579E9.cer (raw, json)
Hash identifier:          OfbM6aqHEJ5EIfzI1EUsvCqKMU90lwj5So6zCwsN8Jw=
Subject key identifier:   56:85:F2:E6:C6:6A:6D:81:98:15:D1:D8:6F:C2:70:B4:F3:65:79:E9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3FAA68CE8F15399E055A8FCD0F8999B050710591
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/5685F2E6C66A6D819815D1D86FC270B4F36579E9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Dec 2023 18:27:48 +0000
Certificate not after:    Wed 25 Dec 2024 18:32:48 +0000
Subordinate resources:    AS: 52898
                          IP: 168.227.156.0/22
                          IP: 177.184.64.0/20
                          IP: 2804:a9c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:aa:68:ce:8f:15:39:9e:05:5a:8f:cd:0f:89:99:b0:50:71:05:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 27 18:27:48 2023 GMT
            Not After : Dec 25 18:32:48 2024 GMT
        Subject: CN=5685F2E6C66A6D819815D1D86FC270B4F36579E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:54:bf:b9:96:a9:5a:b8:d9:ef:60:90:a1:12:
                    d7:76:90:3e:33:0c:53:e6:7a:67:49:b6:8e:aa:4b:
                    d3:03:08:d1:58:44:fe:60:3f:5b:e6:87:9e:8c:e8:
                    9e:ec:ae:9d:a7:65:8e:02:ad:86:ce:b4:a7:2d:df:
                    52:61:24:8b:13:e9:fc:98:d6:2e:e3:33:63:c4:cf:
                    85:3a:ba:6f:86:5a:b4:c1:03:37:aa:3c:55:9f:c5:
                    fb:87:89:69:07:0d:65:67:08:4a:bf:18:82:59:a8:
                    65:e8:9e:68:70:68:25:44:f8:7c:92:cc:fc:34:3e:
                    5e:2d:da:5f:19:88:b6:eb:fb:db:f5:93:3d:bb:8d:
                    8a:fb:bf:2f:0e:4e:5e:c7:2f:af:78:1d:10:69:51:
                    8d:20:91:04:c4:74:7a:a9:66:89:ba:55:97:ae:8b:
                    eb:9a:e2:e1:25:3b:9e:97:b4:9a:e7:5e:f2:4c:ca:
                    75:05:30:eb:44:71:8e:c5:1c:e2:f1:7c:ef:3e:a5:
                    cd:f3:90:5f:d7:2e:32:4b:80:bf:5a:00:89:ce:76:
                    4c:b3:e2:6e:34:ec:8c:dc:a4:bf:fd:d6:62:88:23:
                    b9:4c:f4:65:70:a8:a1:fe:bd:51:98:1f:37:3a:7d:
                    93:d0:5b:4d:bc:6c:ed:9a:c3:3a:8a:51:e0:69:f9:
                    8e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:85:F2:E6:C6:6A:6D:81:98:15:D1:D8:6F:C2:70:B4:F3:65:79:E9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/5685F2E6C66A6D819815D1D86FC270B4F36579E9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.156.0/22
                  177.184.64.0/20
                IPv6:
                  2804:a9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52898

    Signature Algorithm: sha256WithRSAEncryption
         52:70:75:90:17:6d:c8:8d:c2:1b:77:88:f9:14:e5:bc:3b:f2:
         f9:1b:a1:d1:e8:17:4f:89:2f:23:f2:84:38:19:df:74:c7:7e:
         f1:6d:65:24:84:5f:8e:c4:df:be:42:d5:2b:1f:41:78:cc:0e:
         d6:cd:ab:da:36:98:53:ea:7a:33:09:ee:60:fb:18:08:50:b1:
         a8:33:95:1f:5f:91:0a:0c:60:b7:9c:20:25:84:cd:90:07:c9:
         af:ce:90:40:73:39:a1:11:69:10:02:95:9a:74:c7:5d:fd:ab:
         28:87:de:37:06:11:36:53:c2:9e:41:4f:4f:80:0a:db:2b:65:
         8f:98:dc:64:a6:c8:6c:d6:21:fd:9f:3d:2f:ae:1f:34:2a:0c:
         05:5f:62:bc:64:bc:4c:9e:a1:5c:1b:e5:59:ee:04:be:7a:24:
         86:21:b1:0a:11:af:4e:eb:70:bb:8d:34:fa:5e:a8:10:c1:43:
         ad:1f:b0:17:53:34:09:18:ca:93:21:0f:14:9a:a3:47:8c:61:
         4d:e1:02:0b:f2:b7:cb:6c:20:bc:3b:29:01:5b:19:a0:b9:07:
         ea:a2:10:6b:4b:8d:f5:03:39:cd:79:6d:2f:3c:6c:70:c8:ca:
         0e:f8:d4:74:b9:74:9c:33:81:26:b4:11:01:35:09:19:70:0b:
         8e:bb:8e:0d
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUP6pozo8VOZ4FWo/ND4mZsFBxBZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMjcxODI3NDhaFw0yNDEyMjUxODMyNDhaMDMxMTAvBgNV
BAMTKDU2ODVGMkU2QzY2QTZEODE5ODE1RDFEODZGQzI3MEI0RjM2NTc5RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3VL+5lqlauNnvYJChEtd2kD4z
DFPmemdJto6qS9MDCNFYRP5gP1vmh56M6J7srp2nZY4CrYbOtKct31JhJIsT6fyY
1i7jM2PEz4U6um+GWrTBAzeqPFWfxfuHiWkHDWVnCEq/GIJZqGXonmhwaCVE+HyS
zPw0Pl4t2l8ZiLbr+9v1kz27jYr7vy8OTl7HL694HRBpUY0gkQTEdHqpZom6VZeu
i+ua4uElO56XtJrnXvJMynUFMOtEcY7FHOLxfO8+pc3zkF/XLjJLgL9aAInOdkyz
4m407IzcpL/91mKII7lM9GVwqKH+vVGYHzc6fZPQW028bO2awzqKUeBp+Y6LAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRWhfLmxmptgZgV
0dhvwnC082V56TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zYW5oR1hjR2JlN216SFNkWFMxWjFmNHBoY1NDRXpQUkhS
b3NXUXFlZXhxNC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zYW5oR1hjR2JlN216SFNkWFMxWjFmNHBoY1NDRXpQUkhS
b3NXUXFlZXhxNC8wLzU2ODVGMkU2QzY2QTZEODE5ODE1RDFEODZGQzI3MEI0RjM2
NTc5RTkubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAqjjnAMEBLG4QDANBAIA
AjAHAwUAKAQKnDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzqIwDQYJKoZIhvcN
AQELBQADggEBAFJwdZAXbciNwht3iPkU5bw78vkbodHoF0+JLyPyhDgZ33THfvFt
ZSSEX47E375C1SsfQXjMDtbNq9o2mFPqejMJ7mD7GAhQsagzlR9fkQoMYLecICWE
zZAHya/OkEBzOaERaRAClZp0x139qyiH3jcGETZTwp5BT0+ACtsrZY+Y3GSmyGzW
If2fPS+uHzQqDAVfYrxkvEyeoVwb5VnuBL56JIYhsQoRr07rcLuNNPpeqBDBQ60f
sBdTNAkYypMhDxSao0eMYU3hAgvyt8tsILw7KQFbGaC5B+qiEGtLjfUDOc15bS88
bHDIyg741HS5dJwzgSa0EQE1CRlwC467jg0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org