Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer
File:                     56D9A1201889650DCAB74085B3A0433357A372C2.cer (raw, json)
Hash identifier:          LWANGEyXHb3FqMsnHM+mwI0ShkqwqCor8HTUcMfYHAw=
Subject key identifier:   56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A1934C22A247FD1C52AB7BFDA9D24D1EAAACAAF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/56D9A1201889650DCAB74085B3A0433357A372C2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Aug 2022 19:39:45 +0000
Certificate not after:    Thu 24 Aug 2023 19:44:45 +0000
Subordinate resources:    AS: 61669
                          AS: 262607
                          IP: 131.108.12.0/22
                          IP: 170.150.0.0/22
                          IP: 177.85.112.0/21
                          IP: 2804:6cc::/32
                          IP: 2804:1cb0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:19:34:c2:2a:24:7f:d1:c5:2a:b7:bf:da:9d:24:d1:ea:aa:ca:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 25 19:39:45 2022 GMT
            Not After : Aug 24 19:44:45 2023 GMT
        Subject: CN=56D9A1201889650DCAB74085B3A0433357A372C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7c:44:1d:03:77:ea:16:1d:ca:42:94:45:45:
                    2a:5a:39:af:98:28:58:6c:23:c4:ea:e1:04:22:64:
                    2e:8c:9a:0f:d1:a2:85:af:a0:56:96:54:ad:6c:a9:
                    66:89:0a:9c:a6:30:cb:0f:8d:33:fc:4c:39:5d:28:
                    b7:80:78:a8:70:42:41:c0:8f:24:75:20:df:38:46:
                    7d:bf:d0:37:4d:9a:7a:5c:00:fa:79:59:88:a1:05:
                    3a:4c:0a:cb:7d:22:e6:7a:d3:19:d4:4c:45:5b:16:
                    2d:28:0f:6a:49:dd:d2:b8:68:cd:29:56:8b:2b:f0:
                    0a:c0:5e:c3:08:7c:9b:cf:64:9a:1f:35:58:e1:15:
                    f5:0d:30:66:89:70:10:f5:38:5c:d0:de:64:ba:eb:
                    49:77:89:a3:d6:9b:29:2c:4e:b0:b6:4b:e2:29:2d:
                    fd:c3:06:52:67:8b:49:6d:41:b6:be:84:60:4f:32:
                    a7:46:3f:dd:0e:91:82:6c:59:58:0b:91:66:3f:15:
                    15:d0:1e:40:90:7a:96:6d:1e:72:a0:f2:41:6a:8a:
                    a3:3d:8b:b5:64:03:36:5a:c5:ec:a8:fa:ff:7b:c7:
                    9c:22:5e:87:54:70:5d:d4:37:f9:b9:ab:96:b7:53:
                    50:a4:e0:c8:34:df:93:50:91:e2:6a:f8:32:23:d4:
                    bd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/56D9A1201889650DCAB74085B3A0433357A372C2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.12.0/22
                  170.150.0.0/22
                  177.85.112.0/21
                IPv6:
                  2804:6cc::/32
                  2804:1cb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61669
                  262607

    Signature Algorithm: sha256WithRSAEncryption
         3f:71:31:87:0b:ad:0c:f0:0a:cc:bd:b3:cd:cf:b0:bf:5e:d8:
         01:9c:3d:44:b4:e6:26:bd:be:63:ec:4e:50:30:d1:d7:c6:8a:
         fc:91:d3:15:75:db:d5:31:d5:39:06:b2:e4:14:93:50:a2:ed:
         23:c4:1c:c1:29:e3:ea:91:28:b3:e9:95:c4:09:27:30:7b:0c:
         c4:c2:fa:1c:e6:f9:22:de:68:ca:bd:ad:50:95:eb:b2:d2:a9:
         92:f5:e0:1d:b2:aa:21:72:3f:21:c6:04:e5:3a:e5:55:ff:87:
         62:6b:31:68:3e:9e:b9:d5:ea:35:ed:04:4e:05:1a:87:68:83:
         0b:6e:18:99:26:13:8f:fd:42:f6:29:a3:2d:35:fc:ef:ec:37:
         0c:8f:6e:61:da:e8:e9:b1:a7:79:26:85:46:0e:53:aa:c7:9b:
         bb:72:b8:3f:ea:f0:1e:0b:eb:b2:9e:5d:30:89:97:84:05:d0:
         d6:ea:24:2d:ff:66:98:68:ad:95:2d:fa:0e:a3:93:2e:29:fa:
         57:97:b4:0b:9f:fa:15:d3:75:2e:5b:09:b9:3d:7c:fc:0b:ed:
         47:8c:8d:0b:bb:f9:44:55:6f:55:fb:7e:59:50:a8:74:43:9a:
         70:af:a8:1f:b0:a4:88:71:ae:e6:9f:fd:e8:f2:91:dc:e4:26:
         d5:86:63:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org