Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.cer
File:                     56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.cer (raw, json)
Hash identifier:          8VddNEW5OhKBf7WAMRQ8IJPXbd+BqpdXviDzi9R/jZI=
Subject key identifier:   56:C2:AD:0D:C1:39:21:E3:10:E1:DD:1B:F3:3A:22:DA:9B:A7:4D:E0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       44BDB8E4B89427DA31881702D6E882626248A5C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Mar 2024 14:55:07 +0000
Certificate not after:    Mon 03 Mar 2025 15:00:07 +0000
Subordinate resources:    AS: 265417
                          IP: 45.191.72.0/23
                          IP: 168.195.96.0/22
                          IP: 2804:33c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:bd:b8:e4:b8:94:27:da:31:88:17:02:d6:e8:82:62:62:48:a5:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 14:55:07 2024 GMT
            Not After : Mar  3 15:00:07 2025 GMT
        Subject: CN=56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a3:19:9c:67:c1:b7:08:4d:eb:d7:70:dd:ca:
                    c9:9a:38:30:04:f1:3c:06:9c:ae:df:7e:92:f2:ce:
                    ef:2e:d6:22:5a:42:09:3a:28:c6:5b:a0:0a:20:40:
                    90:ab:84:70:2f:9c:b6:1c:72:b4:08:6f:63:81:c3:
                    73:79:86:80:20:53:5a:22:34:bd:a6:1b:33:28:1d:
                    64:97:92:e1:c4:74:e0:ee:86:de:16:39:3a:ed:ca:
                    b8:28:64:89:b4:78:18:e4:79:6b:e9:e4:8c:74:08:
                    e5:b1:21:60:2b:a0:d5:45:51:a9:13:24:d1:47:a2:
                    d9:92:2b:9c:41:f9:7d:4c:92:ac:74:00:81:94:8c:
                    e8:8c:13:42:06:2d:fd:80:a6:a6:77:03:c3:7f:85:
                    84:88:35:a5:95:03:96:2b:30:1f:5e:f0:c8:da:18:
                    d8:6e:3f:d5:8c:02:75:94:d9:7d:40:4c:2d:e3:bc:
                    86:6e:06:cf:5a:b9:12:dd:13:ad:f3:39:ba:c3:6d:
                    02:7d:9b:a6:d1:c4:47:fe:cb:c7:17:69:6d:f4:6a:
                    93:94:44:b2:e6:56:a6:cd:d4:53:35:9c:86:48:ff:
                    bc:b0:fb:c2:c4:db:03:cf:a3:8a:ed:91:1f:0c:ea:
                    e1:65:8b:1c:56:0c:a6:04:3a:cf:76:95:dc:d6:fe:
                    3e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:C2:AD:0D:C1:39:21:E3:10:E1:DD:1B:F3:3A:22:DA:9B:A7:4D:E0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.72.0/23
                  168.195.96.0/22
                IPv6:
                  2804:33c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265417

    Signature Algorithm: sha256WithRSAEncryption
         a3:36:f6:29:a3:c0:98:20:54:49:ab:8d:4f:92:e5:d8:5d:2d:
         cd:0c:f4:9d:ce:3d:89:b2:17:12:d6:a9:38:fd:f3:c8:e0:83:
         dc:e5:e3:5b:49:be:56:a8:13:b4:ce:16:8e:be:59:3d:ed:1a:
         92:81:5e:59:7c:8f:89:e1:2a:70:d4:50:6b:5f:43:b5:a0:2e:
         a7:50:7b:af:d1:50:2f:50:f9:58:b5:7b:68:f3:06:dc:10:57:
         27:6e:72:b5:74:c5:ad:7a:75:b0:a9:54:5f:d2:3c:c7:c9:91:
         02:21:04:2f:ef:2c:16:f1:5c:83:e2:1c:1f:30:37:fb:7f:95:
         c2:6e:c0:ca:30:bc:f7:ab:97:13:80:b4:a4:cc:73:c6:72:7a:
         c9:a8:8b:bf:ff:fd:d4:cc:26:9b:51:62:b2:f7:02:68:fa:37:
         c6:e8:ca:8a:23:74:61:00:e5:01:82:cf:14:ea:61:9c:44:a1:
         9e:34:4e:89:c6:14:63:6e:0d:75:d4:c4:96:fe:41:0a:37:dd:
         70:0f:71:a2:f5:b4:80:c3:9f:42:c5:b9:c6:ae:28:59:2f:1c:
         14:3c:dd:c2:00:ba:84:a0:4a:48:cb:1c:0d:99:3d:c3:c7:95:
         97:79:2e:35:ae:5e:d9:4f:81:52:4e:a9:12:6c:19:c0:ca:67:
         d7:0d:3c:32
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIURL245LiUJ9oxiBcC1uiCYmJIpcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMDQxNDU1MDdaFw0yNTAzMDMxNTAwMDdaMDMxMTAvBgNV
BAMTKDU2QzJBRDBEQzEzOTIxRTMxMEUxREQxQkYzM0EyMkRBOUJBNzRERTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCoxmcZ8G3CE3r13DdysmaODAE
8TwGnK7ffpLyzu8u1iJaQgk6KMZboAogQJCrhHAvnLYccrQIb2OBw3N5hoAgU1oi
NL2mGzMoHWSXkuHEdODuht4WOTrtyrgoZIm0eBjkeWvp5Ix0COWxIWAroNVFUakT
JNFHotmSK5xB+X1Mkqx0AIGUjOiME0IGLf2ApqZ3A8N/hYSINaWVA5YrMB9e8Mja
GNhuP9WMAnWU2X1ATC3jvIZuBs9auRLdE63zObrDbQJ9m6bRxEf+y8cXaW30apOU
RLLmVqbN1FM1nIZI/7yw+8LE2wPPo4rtkR8M6uFlixxWDKYEOs92ldzW/j5xAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRWwq0NwTkh4xDh
3RvzOiLam6dN4DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DSkRYcVY3MWI3SHNUWkJ0Y0VUWlZyWDEybWZacnl1VHh4
NXRkQVk1dGQ0Yi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQ0pEWHFWNzFiN0hzVFpCdGNFVFpWclgxMm1mWnJ5dVR4
eDV0ZEFZNXRkNGIvMC81NkMyQUQwREMxMzkyMUUzMTBFMUREMUJGMzNBMjJEQTlC
QTc0REUwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAEtv0gDBAKow2AwDQQC
AAIwBwMFACgEM8gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAzJMA0GCSqGSIb3
DQEBCwUAA4IBAQCjNvYpo8CYIFRJq41PkuXYXS3NDPSdzj2JshcS1qk4/fPI4IPc
5eNbSb5WqBO0zhaOvlk97RqSgV5ZfI+J4Spw1FBrX0O1oC6nUHuv0VAvUPlYtXto
8wbcEFcnbnK1dMWtenWwqVRf0jzHyZECIQQv7ywW8VyD4hwfMDf7f5XCbsDKMLz3
q5cTgLSkzHPGcnrJqIu///3UzCabUWKy9wJo+jfG6MqKI3RhAOUBgs8U6mGcRKGe
NE6JxhRjbg111MSW/kEKN91wD3Gi9bSAw59CxbnGrihZLxwUPN3CALqEoEpIyxwN
mT3Dx5WXeS41rl7ZT4FSTqkSbBnAymfXDTwy
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org