Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/56F7259416542F6921B4D928E40B36515D6CF377.cer
File:                     56F7259416542F6921B4D928E40B36515D6CF377.cer (raw, json)
Hash identifier:          yMGXpITjuhGW9tfYHGJmR6Ap9+uTf/j+XKZMevCOzOQ=
Subject key identifier:   56:F7:25:94:16:54:2F:69:21:B4:D9:28:E4:0B:36:51:5D:6C:F3:77
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5098AA3710F166EADF1B07C56B793B301972ED25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/56F7259416542F6921B4D928E40B36515D6CF377.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Aug 2023 10:55:08 +0000
Certificate not after:    Thu 01 Aug 2024 11:00:08 +0000
Subordinate resources:    AS: 28165
                          IP: 131.255.100.0/22
                          IP: 138.59.148.0/22
                          IP: 138.204.92.0/22
                          IP: 170.81.168.0/22
                          IP: 177.184.192.0/20
                          IP: 177.222.16.0/20
                          IP: 187.62.208.0/20
                          IP: 191.240.144.0/20
                          IP: 200.229.224.0/20
                          IP: 2804:340::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:98:aa:37:10:f1:66:ea:df:1b:07:c5:6b:79:3b:30:19:72:ed:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  3 10:55:08 2023 GMT
            Not After : Aug  1 11:00:08 2024 GMT
        Subject: CN=56F7259416542F6921B4D928E40B36515D6CF377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ff:c6:1d:c9:d5:19:bc:0d:aa:e3:96:97:4b:
                    36:3f:e8:a6:4a:81:2a:e1:66:ac:e6:16:86:20:38:
                    06:e1:14:36:6d:8e:c3:cd:b4:29:c8:d9:fe:b0:56:
                    08:45:e7:52:91:72:7f:82:90:05:db:bd:5f:c6:7a:
                    4f:ba:bb:30:6b:4b:08:f1:2d:46:fa:a4:0f:e8:34:
                    70:61:81:da:38:4c:dd:9e:db:eb:76:94:1b:29:3d:
                    46:52:0a:54:d6:b9:b3:2d:9d:a0:e2:1f:60:bb:30:
                    ec:10:9a:d3:1e:06:7f:9d:2f:8d:dd:62:e6:f2:40:
                    8e:7e:31:a7:76:f9:29:aa:63:69:da:22:46:8b:3c:
                    70:f2:6f:c4:bc:96:1e:2b:92:7d:90:77:a8:0c:b6:
                    57:13:4b:b8:18:c5:09:ef:f4:3f:a0:6b:f1:fd:ec:
                    d7:59:46:43:ba:52:35:bc:b1:a1:7e:c3:07:5f:a8:
                    37:ad:7c:5b:68:68:64:69:3a:d6:b4:35:2d:44:0c:
                    69:b1:72:85:ba:f3:2d:bc:61:c1:3d:60:67:9e:e6:
                    a4:58:3f:2d:58:4e:99:cf:fa:63:d4:5f:59:7b:2e:
                    72:6b:d7:35:33:68:27:fe:ba:18:c0:ce:ea:e9:c8:
                    ac:64:b4:13:47:bf:bb:ec:f7:77:ae:a1:c2:40:57:
                    d2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:F7:25:94:16:54:2F:69:21:B4:D9:28:E4:0B:36:51:5D:6C:F3:77
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/56F7259416542F6921B4D928E40B36515D6CF377.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.100.0/22
                  138.59.148.0/22
                  138.204.92.0/22
                  170.81.168.0/22
                  177.184.192.0/20
                  177.222.16.0/20
                  187.62.208.0/20
                  191.240.144.0/20
                  200.229.224.0/20
                IPv6:
                  2804:340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28165

    Signature Algorithm: sha256WithRSAEncryption
         20:1f:a9:08:15:d9:64:1f:02:e6:7d:48:eb:25:8f:56:83:3a:
         26:d4:a9:87:ab:2c:3d:0d:d2:6f:c1:7f:48:98:b8:0c:89:de:
         7a:50:bf:aa:c6:2b:6d:19:f5:99:6b:8e:b3:e1:53:60:b3:8f:
         33:ec:35:32:5a:96:2f:d0:2d:3b:cb:ea:51:22:6d:f8:c8:c7:
         cd:ec:30:45:72:a9:a9:5a:c9:79:54:a5:ec:11:21:a7:67:b4:
         10:7c:b1:d3:33:65:71:54:10:b8:8c:2f:2e:3f:81:82:74:40:
         3b:24:e6:91:70:01:d5:c3:da:d5:55:94:b6:27:d4:6b:13:c4:
         86:69:f7:6e:52:e2:a0:7d:d6:3c:00:d5:0e:4f:35:23:7d:16:
         d6:94:32:60:b1:23:f0:63:ab:6d:b0:57:1c:ae:79:8f:23:2f:
         60:39:81:c9:65:48:27:03:a5:23:3e:4f:db:01:2c:df:41:77:
         0a:2e:01:37:c4:fa:0c:96:4e:cc:ed:c0:cf:40:97:d2:ac:98:
         42:52:9a:48:8d:47:2f:9f:6a:ba:57:42:a1:49:88:71:ef:69:
         a3:ef:3e:49:65:c1:df:e5:43:b5:da:e7:fc:b2:19:f8:f7:02:
         bc:41:67:b8:a2:ba:39:00:4a:6f:e9:5e:63:18:3c:72:73:15:
         b5:29:fc:af
-----BEGIN CERTIFICATE-----
MIIGQDCCBSigAwIBAgIUUJiqNxDxZurfGwfFa3k7MBly7SUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MDMxMDU1MDhaFw0yNDA4MDExMTAwMDhaMDMxMTAvBgNV
BAMTKDU2RjcyNTk0MTY1NDJGNjkyMUI0RDkyOEU0MEIzNjUxNUQ2Q0YzNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/8YdydUZvA2q45aXSzY/6KZK
gSrhZqzmFoYgOAbhFDZtjsPNtCnI2f6wVghF51KRcn+CkAXbvV/Gek+6uzBrSwjx
LUb6pA/oNHBhgdo4TN2e2+t2lBspPUZSClTWubMtnaDiH2C7MOwQmtMeBn+dL43d
YubyQI5+Mad2+SmqY2naIkaLPHDyb8S8lh4rkn2Qd6gMtlcTS7gYxQnv9D+ga/H9
7NdZRkO6UjW8saF+wwdfqDetfFtoaGRpOta0NS1EDGmxcoW68y28YcE9YGee5qRY
Py1YTpnP+mPUX1l7LnJr1zUzaCf+uhjAzurpyKxktBNHv7vs93euocJAV9LBAgMB
AAGjggNKMIIDRjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRW9yWUFlQvaSG0
2SjkCzZRXWzzdzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EMk1SVlY4V3dKRURhRE5wVHptOWpySDY3TnR0M0hDTEcz
VjJ3V2ZFemtvRC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xH
M1Yyd1dmRXprb0QvMC81NkY3MjU5NDE2NTQyRjY5MjFCNEQ5MjhFNDBCMzY1MTVE
NkNGMzc3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwXgYIKwYBBQUHAQcBAf8ETzBNMDwEAgABMDYDBAKD/2QDBAKKO5QDBAKK
zFwDBAKqUagDBASxuMADBASx3hADBAS7PtADBAS/8JADBATI5eAwDQQCAAIwBwMF
ACgEA0AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICbgUwDQYJKoZIhvcNAQELBQAD
ggEBACAfqQgV2WQfAuZ9SOslj1aDOibUqYerLD0N0m/Bf0iYuAyJ3npQv6rGK20Z
9ZlrjrPhU2CzjzPsNTJali/QLTvL6lEibfjIx83sMEVyqalayXlUpewRIadntBB8
sdMzZXFUELiMLy4/gYJ0QDsk5pFwAdXD2tVVlLYn1GsTxIZp925S4qB91jwA1Q5P
NSN9FtaUMmCxI/Bjq22wVxyueY8jL2A5gcllSCcDpSM+T9sBLN9BdwouATfE+gyW
TsztwM9Al9KsmEJSmkiNRy+farpXQqFJiHHvaaPvPkllwd/lQ7Xa5/yyGfj3ArxB
Z7iiujkASm/pXmMYPHJzFbUp/K8=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org