Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/57BD1EC8BC001A3303F83653135622A639BE6663.cer
File:                     57BD1EC8BC001A3303F83653135622A639BE6663.cer (raw, json)
Hash identifier:          aldWesX4raexRjcCkkPaRlI6LNGdFphdRxvCeET5oNw=
Subject key identifier:   57:BD:1E:C8:BC:00:1A:33:03:F8:36:53:13:56:22:A6:39:BE:66:63
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7BBDEE5D6B41C6781E02AC90ECE1A5E3F3400C93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/0/57BD1EC8BC001A3303F83653135622A639BE6663.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 23 Aug 2023 13:05:07 +0000
Certificate not after:    Wed 21 Aug 2024 13:10:07 +0000
Subordinate resources:    AS: 262813
                          IP: 177.70.144.0/20
                          IP: 186.237.160.0/20
                          IP: 2804:26c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:bd:ee:5d:6b:41:c6:78:1e:02:ac:90:ec:e1:a5:e3:f3:40:0c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 23 13:05:07 2023 GMT
            Not After : Aug 21 13:10:07 2024 GMT
        Subject: CN=57BD1EC8BC001A3303F83653135622A639BE6663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:2b:90:ff:37:eb:0d:29:d8:1a:80:02:f2:
                    a5:08:92:b1:e9:7e:18:89:08:e5:d1:c5:e7:bc:36:
                    b4:b8:0a:f1:9f:77:20:a9:b0:0d:e0:66:6b:dc:1d:
                    13:ac:35:6b:50:49:78:67:91:b9:f5:69:27:61:ee:
                    7f:2d:83:a7:62:83:41:3f:8c:76:4f:e3:b9:36:49:
                    9f:da:11:64:c5:a6:6f:f2:89:db:47:5c:27:f6:81:
                    a9:dd:aa:df:89:6b:0e:92:da:dd:2e:7b:7c:75:80:
                    f4:1a:2b:55:0a:24:60:18:dd:fd:7b:f9:b5:d5:1d:
                    b7:01:06:92:e8:9f:bf:ed:35:f0:ca:af:69:45:d3:
                    55:ec:6b:63:c2:c2:78:c9:fe:13:ff:c1:c3:8c:42:
                    97:9b:fd:17:8d:dd:61:0b:c3:82:fc:5c:bb:61:c8:
                    58:ed:c5:ca:ac:ed:ed:8b:91:24:f4:32:7d:28:6e:
                    73:51:91:8f:2d:e8:41:ea:d0:6e:16:1f:59:45:b4:
                    52:dd:9e:10:8b:61:74:26:a2:c5:ac:99:88:be:b7:
                    20:45:89:4d:c4:a4:78:60:e9:cd:17:5f:bf:a9:17:
                    33:b8:7f:0a:fb:f3:b8:29:c9:3d:eb:df:3a:c3:37:
                    af:1c:88:5d:e5:33:15:e2:dd:33:f5:83:67:4f:65:
                    eb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:BD:1E:C8:BC:00:1A:33:03:F8:36:53:13:56:22:A6:39:BE:66:63
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/0/57BD1EC8BC001A3303F83653135622A639BE6663.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.144.0/20
                  186.237.160.0/20
                IPv6:
                  2804:26c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262813

    Signature Algorithm: sha256WithRSAEncryption
         16:9b:80:b1:7c:fd:45:6f:df:10:da:6d:1b:93:f7:fb:67:7e:
         97:01:f0:e8:c3:ca:44:c9:72:6b:1f:96:65:20:d5:a9:40:aa:
         72:d2:20:5d:f9:39:e9:88:c8:2c:69:2a:cf:fd:70:4e:16:79:
         f6:5a:b3:d2:a4:88:42:e4:bb:56:ca:5b:cd:47:93:fb:53:92:
         8e:c3:4f:e0:cf:55:5a:61:b6:a9:e8:b0:38:cb:1b:11:e1:cd:
         ef:fe:bd:23:9f:d4:58:21:93:10:bf:86:84:25:a5:c0:98:4b:
         13:dc:cf:5d:1b:62:a6:51:99:01:5a:57:50:b5:72:40:8b:73:
         c9:8e:3d:19:85:79:60:7e:6e:d0:5a:02:e0:9b:c0:45:ac:a7:
         33:fd:37:97:5b:c3:97:95:49:f0:62:ab:88:97:b7:25:ee:68:
         d6:5b:28:e9:a7:83:16:c0:cb:17:e6:ed:35:46:f8:c6:c1:09:
         04:aa:28:8b:e9:eb:72:e9:c2:86:c1:77:38:ea:c4:ad:c6:de:
         31:d6:95:21:62:f4:a1:1c:0d:dc:1e:c1:fa:12:eb:53:7c:12:
         5b:35:e6:62:c2:66:27:87:01:80:07:d0:2e:4c:83:21:87:d0:
         f5:37:b5:0d:a0:bc:91:4f:4c:8c:10:99:23:55:b3:fd:5e:ed:
         24:f3:8e:0d
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUe73uXWtBxngeAqyQ7OGl4/NADJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MjMxMzA1MDdaFw0yNDA4MjExMzEwMDdaMDMxMTAvBgNV
BAMTKDU3QkQxRUM4QkMwMDFBMzMwM0Y4MzY1MzEzNTYyMkE2MzlCRTY2NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3+SuQ/zfrDSnYGoAC8qUIkrHp
fhiJCOXRxee8NrS4CvGfdyCpsA3gZmvcHROsNWtQSXhnkbn1aSdh7n8tg6dig0E/
jHZP47k2SZ/aEWTFpm/yidtHXCf2gandqt+Jaw6S2t0ue3x1gPQaK1UKJGAY3f17
+bXVHbcBBpLon7/tNfDKr2lF01Xsa2PCwnjJ/hP/wcOMQpeb/ReN3WELw4L8XLth
yFjtxcqs7e2LkST0Mn0obnNRkY8t6EHq0G4WH1lFtFLdnhCLYXQmosWsmYi+tyBF
iU3EpHhg6c0XX7+pFzO4fwr787gpyT3r3zrDN68ciF3lMxXi3TP1g2dPZetTAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRXvR7IvAAaMwP4
NlMTViKmOb5mYzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84UTNmSkh2TExqNjFhTThSYUJ0ekJ2RURvQ1Qydm5SRjll
S0VvUTljQTdVSy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOFEzZkpIdkxMajYxYU04UmFCdHpCdkVEb0NUMnZuUkY5
ZUtFb1E5Y0E3VUsvMC81N0JEMUVDOEJDMDAxQTMzMDNGODM2NTMxMzU2MjJBNjM5
QkU2NjYzLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBASxRpADBAS67aAwDQQC
AAIwBwMFACgEAmwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAKdMA0GCSqGSIb3
DQEBCwUAA4IBAQAWm4CxfP1Fb98Q2m0bk/f7Z36XAfDow8pEyXJrH5ZlINWpQKpy
0iBd+TnpiMgsaSrP/XBOFnn2WrPSpIhC5LtWylvNR5P7U5KOw0/gz1VaYbap6LA4
yxsR4c3v/r0jn9RYIZMQv4aEJaXAmEsT3M9dG2KmUZkBWldQtXJAi3PJjj0ZhXlg
fm7QWgLgm8BFrKcz/TeXW8OXlUnwYquIl7cl7mjWWyjpp4MWwMsX5u01RvjGwQkE
qiiL6ety6cKGwXc46sStxt4x1pUhYvShHA3cHsH6EutTfBJbNeZiwmYnhwGAB9Au
TIMhh9D1N7UNoLyRT0yMEJkjVbP9Xu0k844N
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:38 2024 by rpki-client on console-ams.rpki-client.org