Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/56E56C0A6BB9145C47505907F91F128D80240CA8.cer
File:                     56E56C0A6BB9145C47505907F91F128D80240CA8.cer (raw, json)
Hash identifier:          uxlHdWumtREZfngOUhS/VCg4wDEnQmEAVNVZ0XDNwSA=
Subject key identifier:   56:E5:6C:0A:6B:B9:14:5C:47:50:59:07:F9:1F:12:8D:80:24:0C:A8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6B2232193C3B001BA3EF1BDA72AC45D280BFDE1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0/56E56C0A6BB9145C47505907F91F128D80240CA8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 12 Aug 2023 02:54:02 +0000
Certificate not after:    Sat 10 Aug 2024 02:59:02 +0000
Subordinate resources:    AS: 268585
                          IP: 45.164.8.0/22
                          IP: 2804:5374::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:22:32:19:3c:3b:00:1b:a3:ef:1b:da:72:ac:45:d2:80:bf:de:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 12 02:54:02 2023 GMT
            Not After : Aug 10 02:59:02 2024 GMT
        Subject: CN=56E56C0A6BB9145C47505907F91F128D80240CA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:84:d2:e6:7e:d1:9f:97:8d:64:6e:2e:3d:ac:
                    3c:e4:4f:5d:64:12:3d:47:48:88:cf:35:06:0f:e2:
                    4b:23:4e:ff:57:94:fc:87:e7:67:95:d5:06:c9:a8:
                    d0:ca:fb:7f:ac:45:0a:80:fa:91:82:ea:80:40:15:
                    48:1d:75:4e:63:f5:64:04:7c:47:18:a6:e6:72:ce:
                    b7:5a:7d:a6:1e:dc:3f:d2:a4:00:4b:5d:f2:6f:00:
                    ba:86:b9:57:9e:07:88:8b:d5:86:b8:67:a6:c5:f7:
                    65:8e:67:d3:9b:84:35:45:8f:bf:d5:f9:52:77:0e:
                    98:1b:4e:1e:5f:da:a0:a8:ec:71:c1:21:98:2e:75:
                    63:77:99:e8:6d:60:48:38:24:1e:e2:d0:7e:34:e5:
                    0f:97:64:dd:50:03:75:11:a8:45:74:67:df:5c:5e:
                    db:56:50:51:2c:24:4e:48:91:45:a4:a5:5a:8f:10:
                    a0:c8:c7:71:df:30:f3:8d:f6:6a:34:e1:d7:7f:e8:
                    3d:92:ef:cb:97:c1:3f:3e:e5:34:bc:8b:65:ed:6a:
                    3c:0b:08:34:b2:93:f7:a8:53:24:49:9a:ea:a9:7d:
                    8a:9e:e9:15:53:d2:57:3e:99:ab:5b:26:e6:ba:d9:
                    2c:9e:89:68:11:ee:75:11:95:d3:79:fa:85:a2:7d:
                    31:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:E5:6C:0A:6B:B9:14:5C:47:50:59:07:F9:1F:12:8D:80:24:0C:A8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0/56E56C0A6BB9145C47505907F91F128D80240CA8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.8.0/22
                IPv6:
                  2804:5374::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268585

    Signature Algorithm: sha256WithRSAEncryption
         99:3a:76:65:aa:a1:70:66:c3:05:48:7b:7f:d1:ca:a7:ba:da:
         18:26:e3:98:7d:db:b5:b9:38:56:df:7a:26:60:69:64:ca:1e:
         cf:bb:ad:47:4f:f9:0f:ff:8a:4d:c8:3f:83:6d:14:22:14:95:
         3a:28:fd:d4:66:d8:ce:fe:32:08:be:d3:a4:b6:a6:ab:90:7e:
         eb:cd:a9:49:4d:6b:b1:73:f5:5c:2a:8c:ea:bd:90:a7:67:37:
         06:ce:ff:55:e3:c2:b5:25:9e:c7:96:96:e6:4c:22:eb:8e:d9:
         35:c0:f2:fb:45:a8:f5:9d:ba:34:09:c6:27:42:f5:15:91:b7:
         72:45:28:df:1b:e2:82:9a:e7:24:e7:f7:09:73:37:81:87:b0:
         db:0d:5c:9e:52:de:93:1c:73:3e:89:03:05:6c:e1:38:59:46:
         e4:6a:f7:1d:58:60:56:0a:7d:c3:96:6e:d5:64:15:33:25:82:
         4b:03:4b:0a:23:e7:ac:80:56:ff:8e:f5:32:7e:f0:17:96:c0:
         56:2b:62:c9:9f:96:ff:c5:88:51:94:16:e3:45:6d:c3:f5:c2:
         86:24:01:f3:29:ef:80:76:7e:48:88:9f:cf:8e:4b:ae:08:4b:
         f1:bc:60:54:26:3c:86:c1:9c:3f:27:86:30:30:94:c0:31:3d:
         90:5a:ad:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org