Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/56D3BF882CDB74384D2E127BE22B36BC31C29243.cer
File:                     56D3BF882CDB74384D2E127BE22B36BC31C29243.cer (raw, json)
Hash identifier:          bMVFiFhaNGbEV/3RMLzZ1H5823VRDgRTDhwGqacF7uQ=
Subject key identifier:   56:D3:BF:88:2C:DB:74:38:4D:2E:12:7B:E2:2B:36:BC:31:C2:92:43
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       52574662DF67BC11C2E774FD02EDFA3238A6C911
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/56D3BF882CDB74384D2E127BE22B36BC31C29243.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Dec 2023 19:12:31 +0000
Certificate not after:    Mon 16 Dec 2024 19:17:31 +0000
Subordinate resources:    AS: 269664
                          IP: 45.191.20.0/22
                          IP: 2804:6800::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:57:46:62:df:67:bc:11:c2:e7:74:fd:02:ed:fa:32:38:a6:c9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 18 19:12:31 2023 GMT
            Not After : Dec 16 19:17:31 2024 GMT
        Subject: CN=56D3BF882CDB74384D2E127BE22B36BC31C29243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e7:10:52:b0:07:6a:3d:eb:fe:50:a0:40:eb:
                    a6:8d:8c:53:52:7b:89:a3:87:77:76:fe:e7:34:cf:
                    75:b9:a4:99:bc:d4:1a:56:23:b3:45:21:24:81:d1:
                    bf:97:18:3a:ec:bb:9c:16:ac:55:16:2a:fb:8a:af:
                    f9:ac:71:ed:4f:0b:88:f4:7a:0a:d5:fb:b9:60:01:
                    af:36:b5:eb:a8:45:38:13:62:41:d5:24:70:7c:d3:
                    9e:4d:cd:25:1d:49:21:b9:31:27:c8:3e:dc:23:bf:
                    32:ed:29:67:62:3e:e2:a1:77:7a:ac:de:0d:8f:f0:
                    38:56:35:a2:2c:79:72:bc:d5:1a:cb:c6:68:bc:f6:
                    15:7d:10:d5:78:e8:8c:c2:a7:a7:77:60:d5:ca:f1:
                    c2:67:dd:c9:a8:ea:40:ae:6a:87:2c:c4:2f:20:c9:
                    41:01:d6:e3:f4:87:04:ac:7e:d0:a5:3f:68:0d:05:
                    9c:c5:db:bc:5b:32:5f:8a:01:9d:c0:8f:ef:b5:bb:
                    87:fe:14:2b:81:41:c1:de:2c:70:02:8c:67:2b:3e:
                    3b:9e:0d:0f:61:9f:ce:cc:c3:4a:7a:ff:7d:66:60:
                    2f:e6:e1:1a:eb:70:0e:47:31:97:71:36:9e:95:98:
                    d5:b4:0b:a8:25:f7:f6:c7:11:e1:63:1e:01:87:b6:
                    d1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:D3:BF:88:2C:DB:74:38:4D:2E:12:7B:E2:2B:36:BC:31:C2:92:43
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/56D3BF882CDB74384D2E127BE22B36BC31C29243.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.20.0/22
                IPv6:
                  2804:6800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269664

    Signature Algorithm: sha256WithRSAEncryption
         b7:25:46:d0:55:bb:d2:91:08:58:6d:9b:1b:04:da:b2:fc:42:
         de:71:91:7a:c6:cb:20:5c:c8:97:bc:16:d0:ea:da:2e:f9:97:
         4e:cf:08:dd:57:2b:d1:bd:39:07:1a:ff:71:30:c7:65:c1:fe:
         d5:d3:12:81:70:25:0b:96:f0:0e:41:5b:44:1a:5e:88:a5:5a:
         48:5c:75:38:d8:07:6f:9e:0e:02:af:a5:cc:16:35:60:87:30:
         ef:49:51:04:b0:cc:5b:8a:8b:e6:38:b6:2f:7b:13:f5:92:3e:
         94:13:4d:ee:45:5e:c3:2a:0e:23:7f:ff:6d:b6:c9:83:bf:8e:
         6c:db:e5:e5:ac:c0:bc:0b:15:2d:fb:22:24:f7:d9:1a:a0:ba:
         80:c8:76:c9:33:c0:26:61:94:df:a1:09:b7:9a:57:30:86:ff:
         62:7f:16:02:07:af:5e:62:b6:b9:20:f8:ee:13:70:0f:c4:c5:
         b9:f9:29:0d:7a:98:db:8e:b0:66:0c:de:df:18:68:fc:1e:6e:
         b1:b8:8f:ce:e3:46:bf:d2:f3:22:8a:f4:55:69:cc:ba:35:37:
         10:79:ce:80:38:6d:db:9e:0f:70:82:7e:b2:a6:9d:3c:74:e5:
         3d:d9:c2:8d:b6:8d:20:24:c7:1e:e7:d6:bf:93:99:a8:4a:79:
         45:d5:d8:ae
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUUldGYt9nvBHC53T9Au36MjimyREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMTgxOTEyMzFaFw0yNDEyMTYxOTE3MzFaMDMxMTAvBgNV
BAMTKDU2RDNCRjg4MkNEQjc0Mzg0RDJFMTI3QkUyMkIzNkJDMzFDMjkyNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5xBSsAdqPev+UKBA66aNjFNS
e4mjh3d2/uc0z3W5pJm81BpWI7NFISSB0b+XGDrsu5wWrFUWKvuKr/msce1PC4j0
egrV+7lgAa82teuoRTgTYkHVJHB8055NzSUdSSG5MSfIPtwjvzLtKWdiPuKhd3qs
3g2P8DhWNaIseXK81RrLxmi89hV9ENV46IzCp6d3YNXK8cJn3cmo6kCuaocsxC8g
yUEB1uP0hwSsftClP2gNBZzF27xbMl+KAZ3Aj++1u4f+FCuBQcHeLHACjGcrPjue
DQ9hn87Mw0p6/31mYC/m4RrrcA5HMZdxNp6VmNW0C6gl9/bHEeFjHgGHttFHAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRW07+ILNt0OE0u
EnviKza8McKSQzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84d0xaVUs3d2FUWmpDalNuWmJ2d2pKR1AxeUxrOGlmV29p
MzFISnFqMXU3NC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOHdMWlVLN3dhVFpqQ2pTblpidndqSkdQMXlMazhpZldv
aTMxSEpxajF1NzQvMC81NkQzQkY4ODJDREI3NDM4NEQyRTEyN0JFMjJCMzZCQzMx
QzI5MjQzLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItvxQwDQQCAAIwBwMF
ACgEaAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBB1gMA0GCSqGSIb3DQEBCwUA
A4IBAQC3JUbQVbvSkQhYbZsbBNqy/ELecZF6xssgXMiXvBbQ6tou+ZdOzwjdVyvR
vTkHGv9xMMdlwf7V0xKBcCULlvAOQVtEGl6IpVpIXHU42Advng4Cr6XMFjVghzDv
SVEEsMxbiovmOLYvexP1kj6UE03uRV7DKg4jf/9ttsmDv45s2+XlrMC8CxUt+yIk
99kaoLqAyHbJM8AmYZTfoQm3mlcwhv9ifxYCB69eYra5IPjuE3APxMW5+SkNepjb
jrBmDN7fGGj8Hm6xuI/O40a/0vMiivRVacy6NTcQec6AOG3bng9wgn6ypp08dOU9
2cKNto0gJMce59a/k5moSnlF1diu
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org