Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/56A2542C5E0B69D9E738C581E8C292A0AF57239F.cer
File:                     56A2542C5E0B69D9E738C581E8C292A0AF57239F.cer (raw, json)
Hash identifier:          auSuzlfrJZ7kA260TCkhNg0JRb+r0KqjX6JHtJFyy6E=
Subject key identifier:   56:A2:54:2C:5E:0B:69:D9:E7:38:C5:81:E8:C2:92:A0:AF:57:23:9F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       504726B557B2DE761EC6133CB9BCEBC6CEC3CFE2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EyAvFPLTy92iCXVqMNEfY7SFr9izHi9zt19MG4Z1BYmp/0/56A2542C5E0B69D9E738C581E8C292A0AF57239F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EyAvFPLTy92iCXVqMNEfY7SFr9izHi9zt19MG4Z1BYmp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 23:13:46 +0000
Certificate not after:    Thu 11 Jul 2024 23:18:46 +0000
Subordinate resources:    AS: 266345
                          IP: 170.239.16.0/22
                          IP: 2804:3664::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:47:26:b5:57:b2:de:76:1e:c6:13:3c:b9:bc:eb:c6:ce:c3:cf:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 23:13:46 2023 GMT
            Not After : Jul 11 23:18:46 2024 GMT
        Subject: CN=56A2542C5E0B69D9E738C581E8C292A0AF57239F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:82:0b:44:f5:2f:83:f0:d1:a2:78:46:fb:02:
                    21:b6:42:60:3c:f0:75:8c:e9:2d:f8:aa:42:25:de:
                    36:6c:9f:66:fc:54:4e:4f:b1:6b:de:0a:26:3e:e5:
                    d9:21:25:d7:cc:90:2c:dd:52:b7:cf:27:09:b8:6b:
                    5b:a3:23:04:5e:8d:19:f3:69:57:f0:49:80:d0:14:
                    db:aa:bf:6f:f0:b3:d0:5e:b3:a8:98:7b:0a:fb:8e:
                    84:d0:5d:76:f7:4c:b0:c4:20:3d:4d:69:e7:f0:da:
                    6b:34:e5:97:b7:c7:35:59:b8:4d:d7:00:a8:ef:da:
                    1b:32:31:ac:2a:ca:c6:5c:e0:0d:2d:01:fc:9e:00:
                    c8:c9:84:b7:0b:98:03:9f:37:61:e1:1b:30:b9:9b:
                    df:ce:19:c0:51:f7:ff:9e:db:09:60:35:41:8d:d9:
                    56:d1:94:3a:8e:33:d0:66:2e:c4:5c:af:84:b1:af:
                    fb:ff:bf:f1:01:0d:40:75:db:71:b8:e8:de:48:51:
                    dc:48:04:4f:59:b0:82:1f:4b:d5:a1:24:51:dd:98:
                    23:57:99:5c:f2:eb:b6:92:0a:c3:32:af:98:c0:ca:
                    74:f0:fa:91:40:88:3f:86:fa:d3:9e:0b:7c:bf:ce:
                    24:10:87:0d:ec:0b:f1:86:e1:1e:75:7b:39:0e:85:
                    94:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:A2:54:2C:5E:0B:69:D9:E7:38:C5:81:E8:C2:92:A0:AF:57:23:9F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EyAvFPLTy92iCXVqMNEfY7SFr9izHi9zt19MG4Z1BYmp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EyAvFPLTy92iCXVqMNEfY7SFr9izHi9zt19MG4Z1BYmp/0/56A2542C5E0B69D9E738C581E8C292A0AF57239F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.16.0/22
                IPv6:
                  2804:3664::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266345

    Signature Algorithm: sha256WithRSAEncryption
         58:1a:b5:cb:9a:81:35:93:07:cc:8c:6e:25:c9:a8:bc:3d:c7:
         04:d7:34:80:76:c5:56:b8:35:57:21:0a:82:e4:7c:1d:df:2b:
         4e:46:68:45:fb:56:ec:ee:6e:7c:c4:91:a3:2f:ec:02:d6:08:
         96:0f:32:df:cd:57:fa:08:41:6d:7e:64:a8:73:2f:f1:cd:f2:
         37:45:4e:27:fb:59:e1:19:9f:e8:61:e1:15:3b:6a:af:ab:9e:
         ba:c5:0d:63:95:60:a8:06:81:39:ed:13:05:ad:c9:62:e4:3c:
         5c:b4:ea:9b:b7:0e:c8:60:dd:09:6a:05:46:5d:15:27:e8:29:
         60:2d:e5:14:cf:5f:5d:a5:7e:36:72:32:e8:81:05:3a:2c:5b:
         ad:9b:89:1a:dd:b9:51:24:e8:98:71:da:c5:8f:36:5d:73:6f:
         ce:7e:7b:60:2d:b1:69:41:d2:ac:eb:8a:03:51:13:e0:e1:66:
         b5:b2:e1:59:ba:92:7d:3f:0b:cb:6f:c4:ba:b3:42:f8:62:04:
         c2:38:99:29:34:96:b0:b8:ec:6a:65:56:49:1b:f3:31:1f:41:
         38:79:bd:66:45:0e:77:a0:9a:08:29:fb:4f:1a:20:aa:0e:2c:
         92:13:04:ba:e0:4c:cc:f8:05:4e:7e:94:e5:21:f4:7e:3f:90:
         7b:44:e5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:38 2024 by rpki-client on console-ams.rpki-client.org