Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.cer
File:                     57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.cer (raw, json)
Hash identifier:          GNfpyILOL4UTNcT0cDsz35INVSuSyXrEFQB9CWTUlBw=
Subject key identifier:   57:BB:F0:FE:6F:45:C3:21:E4:A2:C2:1C:0B:36:82:A7:E8:FD:14:65
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F2F412343CF9D39D61F8058062734D65B837959
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Jun 2023 22:55:15 +0000
Certificate not after:    Thu 06 Jun 2024 23:00:15 +0000
Subordinate resources:    AS: 61745
                          IP: 131.72.152.0/22
                          IP: 186.219.240.0 -- 186.219.254.255
                          IP: 2804:1bb8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:2f:41:23:43:cf:9d:39:d6:1f:80:58:06:27:34:d6:5b:83:79:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  8 22:55:15 2023 GMT
            Not After : Jun  6 23:00:15 2024 GMT
        Subject: CN=57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5a:76:0e:fb:75:3e:46:fd:f1:95:ee:2f:67:
                    0f:26:29:20:c2:b4:22:9f:fa:09:24:4f:9b:80:89:
                    79:67:3e:1b:b9:3a:9a:da:c7:73:ac:48:ef:ce:80:
                    bf:5d:1f:6d:d3:b1:7a:54:e6:de:76:8f:11:eb:9f:
                    89:5a:1f:80:19:44:a9:88:66:3c:48:aa:e9:a3:25:
                    ea:94:4a:99:ef:4f:f5:d8:d1:28:96:48:f0:02:7f:
                    38:0a:fd:07:6b:b5:ca:59:42:00:1d:df:82:d4:ff:
                    d9:de:4d:d1:aa:fa:de:50:02:ab:3a:28:a0:b1:d2:
                    8c:9f:b5:03:37:d5:60:39:ad:4d:2c:09:e3:f3:76:
                    dd:59:f3:1c:21:b6:e1:55:90:f2:fc:3a:a3:e0:23:
                    c3:06:c8:ad:98:0a:db:77:e9:6f:47:31:9e:49:9c:
                    13:08:cd:f8:b9:48:4e:f0:da:24:38:ec:ea:23:2a:
                    77:7f:64:2c:78:7f:d8:ee:37:89:8a:de:b2:5c:50:
                    09:1c:35:ae:cb:2c:d7:f2:21:94:6d:04:34:1e:f5:
                    30:bd:02:9e:aa:8e:99:f5:d5:94:9c:d4:ba:f4:cb:
                    d4:62:58:a9:9b:99:1d:9c:6b:90:18:da:75:a1:be:
                    c3:8c:bb:88:d8:57:8e:ee:2d:c3:88:38:c2:2f:40:
                    ba:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:BB:F0:FE:6F:45:C3:21:E4:A2:C2:1C:0B:36:82:A7:E8:FD:14:65
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.152.0/22
                  186.219.240.0-186.219.254.255
                IPv6:
                  2804:1bb8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61745

    Signature Algorithm: sha256WithRSAEncryption
         14:ad:1d:16:2e:60:b0:a1:34:b2:ab:49:27:e4:92:85:86:ef:
         4b:4b:3c:ff:70:b4:cf:06:f5:c5:04:02:82:9e:70:b9:75:74:
         f2:77:da:84:1e:a5:67:da:90:87:70:ee:68:78:09:69:94:76:
         22:fb:ac:5a:d2:0c:2e:d7:55:df:98:c9:de:46:eb:2c:6f:88:
         d4:b2:30:19:af:fc:e8:2e:e9:47:04:fb:96:7a:a0:4a:cd:44:
         d3:64:da:d5:ed:03:d7:c9:55:fd:ac:b9:a8:83:b8:8e:11:57:
         ce:fb:e6:dd:2a:5c:02:f4:19:48:52:a7:99:ed:80:2e:36:b9:
         db:b8:83:31:07:01:36:d3:d1:00:37:0a:2b:fd:73:b6:b7:95:
         b3:f8:58:8a:fb:36:90:9e:bb:3e:f4:d9:5a:4e:4f:3c:47:e3:
         8a:e3:f1:d9:dd:69:a9:01:d9:33:80:ab:4d:9c:9e:ce:08:a5:
         c9:cb:94:cd:10:9c:73:bf:ea:b8:eb:18:b5:c5:bd:99:33:d4:
         3a:dc:5e:03:c0:95:50:9c:99:eb:33:5c:48:dc:82:2b:f2:d4:
         c0:29:02:06:8d:67:cd:d9:62:da:05:23:f1:43:b3:c5:99:54:
         fb:a2:de:41:f0:02:77:7a:4f:01:ef:72:31:37:36:f0:ed:c8:
         b1:4a:26:4c
-----BEGIN CERTIFICATE-----
MIIGHjCCBQagAwIBAgIULy9BI0PPnTnWH4BYBic01luDeVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MDgyMjU1MTVaFw0yNDA2MDYyMzAwMTVaMDMxMTAvBgNV
BAMTKDU3QkJGMEZFNkY0NUMzMjFFNEEyQzIxQzBCMzY4MkE3RThGRDE0NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbWnYO+3U+Rv3xle4vZw8mKSDC
tCKf+gkkT5uAiXlnPhu5Oprax3OsSO/OgL9dH23TsXpU5t52jxHrn4laH4AZRKmI
ZjxIqumjJeqUSpnvT/XY0SiWSPACfzgK/QdrtcpZQgAd34LU/9neTdGq+t5QAqs6
KKCx0oyftQM31WA5rU0sCePzdt1Z8xwhtuFVkPL8OqPgI8MGyK2YCtt36W9HMZ5J
nBMIzfi5SE7w2iQ47OojKnd/ZCx4f9juN4mK3rJcUAkcNa7LLNfyIZRtBDQe9TC9
Ap6qjpn11ZSc1Lr0y9RiWKmbmR2ca5AY2nWhvsOMu4jYV47uLcOIOMIvQLpNAgMB
AAGjggMoMIIDJDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRXu/D+b0XDIeSi
whwLNoKn6P0UZTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HOENUOEVrUVNuRXJ3VVI5YXYxaDF1Y1BVUUpocVRud1RG
OWE4NzQ0aDE0Zy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HOENUOEVrUVNuRXJ3VVI5YXYxaDF1Y1BVUUpocVRud1RG
OWE4NzQ0aDE0Zy8wLzU3QkJGMEZFNkY0NUMzMjFFNEEyQzIxQzBCMzY4MkE3RThG
RDE0NjUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA8BggrBgEFBQcBBwEB/wQtMCswGgQCAAEwFAMEAoNImDAMAwQEutvwAwQA
utv+MA0EAgACMAcDBQAoBBu4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDxMTAN
BgkqhkiG9w0BAQsFAAOCAQEAFK0dFi5gsKE0sqtJJ+SShYbvS0s8/3C0zwb1xQQC
gp5wuXV08nfahB6lZ9qQh3DuaHgJaZR2IvusWtIMLtdV35jJ3kbrLG+I1LIwGa/8
6C7pRwT7lnqgSs1E02Ta1e0D18lV/ay5qIO4jhFXzvvm3SpcAvQZSFKnme2ALja5
27iDMQcBNtPRADcKK/1ztreVs/hYivs2kJ67PvTZWk5PPEfjiuPx2d1pqQHZM4Cr
TZyezgilycuUzRCcc7/quOsYtcW9mTPUOtxeA8CVUJyZ6zNcSNyCK/LUwCkCBo1n
zdli2gUj8UOzxZlU+6LeQfACd3pPAe9yMTc28O3IsUomTA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org