Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/57C4F1A5DE60EFA114F64F1DEA32CF298BF9BFDE.cer
File:                     57C4F1A5DE60EFA114F64F1DEA32CF298BF9BFDE.cer (raw, json)
Hash identifier:          2BMphticgNc8aFsFWxwa7O/4Ji5QKUdhUYedXyRDGig=
Subject key identifier:   57:C4:F1:A5:DE:60:EF:A1:14:F6:4F:1D:EA:32:CF:29:8B:F9:BF:DE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       62AC1AFEDBBF5D890279D628FC21AED3757DD640
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/57C4F1A5DE60EFA114F64F1DEA32CF298BF9BFDE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Jun 2022 02:09:30 +0000
Certificate not after:    Tue 13 Jun 2023 02:14:30 +0000
Subordinate resources:    AS: 263145
                          IP: 168.205.136.0/22
                          IP: 170.245.224.0/22
                          IP: 177.154.28.0/22
                          IP: 2804:1774::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ac:1a:fe:db:bf:5d:89:02:79:d6:28:fc:21:ae:d3:75:7d:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 14 02:09:30 2022 GMT
            Not After : Jun 13 02:14:30 2023 GMT
        Subject: CN=57C4F1A5DE60EFA114F64F1DEA32CF298BF9BFDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5c:ff:70:d9:86:6d:19:d1:f8:b9:47:18:d7:
                    3f:5e:0c:0f:72:b6:e1:ad:7c:de:40:af:91:7b:ad:
                    ed:ea:66:c2:ec:e5:10:f2:84:77:74:1c:f3:ca:b7:
                    87:7f:11:c0:ef:fd:b6:e9:7a:c5:21:02:27:8c:3c:
                    17:d1:80:c6:29:81:32:bb:67:6c:17:5d:2c:a1:07:
                    74:9b:3b:11:e7:79:24:68:6c:95:4b:93:9a:a8:f0:
                    b7:26:22:04:4e:30:eb:3e:47:00:62:0e:62:77:bd:
                    67:ed:43:93:03:86:69:38:a5:7c:29:93:78:c3:4d:
                    5f:1c:73:26:91:77:ae:f9:d1:9e:79:1e:94:07:19:
                    55:fa:93:a9:7f:3d:72:39:36:6e:9e:81:f2:48:6c:
                    de:2f:1e:d2:5c:e2:7f:29:23:00:d7:54:b1:b9:7c:
                    f8:6a:1f:9f:7e:ba:bd:25:73:4d:f7:ce:1d:e5:bf:
                    28:94:00:35:49:09:bd:a4:df:fe:1f:57:a8:f0:92:
                    1e:18:c8:d0:6e:3c:3f:ef:f5:34:e8:32:ab:4e:67:
                    b6:60:a1:70:a6:f7:dd:9f:64:61:e9:bf:bb:a2:b7:
                    be:6f:6a:60:ef:8d:a6:95:4e:2f:47:f3:a2:0d:21:
                    75:35:c8:78:3e:4b:e3:cd:00:33:2b:d4:28:91:b2:
                    28:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:C4:F1:A5:DE:60:EF:A1:14:F6:4F:1D:EA:32:CF:29:8B:F9:BF:DE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/57C4F1A5DE60EFA114F64F1DEA32CF298BF9BFDE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.136.0/22
                  170.245.224.0/22
                  177.154.28.0/22
                IPv6:
                  2804:1774::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263145

    Signature Algorithm: sha256WithRSAEncryption
         6c:e4:39:87:5d:d0:4e:15:d9:4a:a5:65:29:85:1c:46:98:be:
         c6:3b:34:9f:8c:06:bd:bf:a4:3a:59:0e:47:c3:a8:8d:f8:57:
         94:1d:76:3e:fb:b4:2a:08:45:56:53:9e:79:89:5e:93:17:7c:
         9f:ba:a1:48:b3:40:8c:8c:67:86:4d:79:55:b5:34:88:72:97:
         b4:16:aa:7a:23:62:96:05:c6:ee:c4:48:9b:6d:6a:b7:ef:ab:
         b4:d4:9e:11:c7:4f:d8:df:a9:ec:9e:02:5c:cb:f1:7b:85:16:
         f3:43:13:52:d3:55:c7:08:d8:ec:35:08:49:38:a0:c7:13:ce:
         36:74:e3:83:4b:83:89:44:1c:cb:b6:61:cc:b3:cd:a3:03:5e:
         5e:45:83:88:4a:bd:b4:95:40:a2:d6:b9:0e:7f:cf:4e:9d:f5:
         2f:b5:a5:3a:ff:6b:47:7d:4f:34:9e:42:51:a2:c7:27:6d:5a:
         f7:c5:79:0a:5c:88:06:f0:d4:a4:76:ad:de:41:26:81:48:2b:
         69:3f:77:46:46:7f:1e:08:f9:8e:86:3b:ba:0f:ef:0a:11:15:
         1e:e2:c9:a8:37:dd:5a:aa:8b:95:d5:17:3f:f4:f0:71:dc:12:
         d5:fc:70:23:69:9a:07:74:b8:70:5f:07:22:90:de:e0:c5:05:
         c0:a6:71:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org