Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/57F9357D1553843F8B3944F3545B9E6C9D0BF3B5.cer
File:                     57F9357D1553843F8B3944F3545B9E6C9D0BF3B5.cer (raw, json)
Hash identifier:          qagr7JNdA74vsk6jfO6GVec7KOJROInqM1tGlnjLiIQ=
Subject key identifier:   57:F9:35:7D:15:53:84:3F:8B:39:44:F3:54:5B:9E:6C:9D:0B:F3:B5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       53900948E55DC5D476215544DA896C738C7D90CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/57F9357D1553843F8B3944F3545B9E6C9D0BF3B5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Dec 2021 11:37:47 +0000
Certificate not after:    Mon 26 Dec 2022 11:42:47 +0000
Subordinate resources:    AS: 28182
                          IP: 170.231.128.0/22
                          IP: 189.89.0.0/20
                          IP: 2001:1294::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:90:09:48:e5:5d:c5:d4:76:21:55:44:da:89:6c:73:8c:7d:90:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 27 11:37:47 2021 GMT
            Not After : Dec 26 11:42:47 2022 GMT
        Subject: CN=57F9357D1553843F8B3944F3545B9E6C9D0BF3B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e0:32:ad:44:63:5a:c2:2f:5e:cc:ec:5a:c8:
                    88:6e:8a:23:d5:6b:53:06:67:24:c1:b0:d6:01:44:
                    a6:83:e6:c3:88:45:ae:b1:f8:ae:2a:0d:39:57:be:
                    b5:00:8d:29:23:da:fa:d7:3b:a0:12:14:9a:56:0b:
                    00:1a:66:1f:7f:84:a2:b3:a1:73:65:d7:ff:73:99:
                    c2:49:bc:4d:68:a0:af:3a:48:21:d1:1d:32:b9:dc:
                    e3:7b:f2:42:40:79:ba:93:f5:34:42:04:14:75:bc:
                    ce:0d:22:29:6a:1c:33:ca:52:3f:18:a8:f3:ee:fa:
                    bd:e4:7c:10:d3:32:f9:d8:15:d9:22:72:40:8e:c0:
                    09:25:5c:63:41:08:b6:69:7c:fd:fd:08:57:96:84:
                    91:fd:9e:91:d3:3d:0c:d6:d5:61:47:cd:ff:4a:a4:
                    0e:36:5b:0d:f0:b0:f4:14:23:44:0e:93:13:31:a7:
                    ad:b2:74:c6:33:2a:00:ac:49:8c:e5:b1:db:c1:49:
                    d8:fb:03:08:fc:ef:d9:c7:db:77:dd:14:e7:52:2b:
                    c7:68:b0:7e:a9:67:28:d8:75:55:4c:40:c4:2c:63:
                    54:7d:99:10:04:19:cf:91:36:8b:80:67:fc:b6:49:
                    68:0b:15:0c:d1:4a:bb:5f:7d:50:8f:1a:58:2f:62:
                    a4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:F9:35:7D:15:53:84:3F:8B:39:44:F3:54:5B:9E:6C:9D:0B:F3:B5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/57F9357D1553843F8B3944F3545B9E6C9D0BF3B5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.128.0/22
                  189.89.0.0/20
                IPv6:
                  2001:1294::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28182

    Signature Algorithm: sha256WithRSAEncryption
         8c:83:88:57:d4:08:72:39:67:7b:b2:b3:79:17:5a:64:e0:c1:
         c5:be:d6:c4:f1:b7:06:79:ee:b9:f5:22:55:80:00:0a:b6:b7:
         76:56:38:4d:ff:da:e3:bf:ec:bc:00:d2:e2:70:9e:f3:a6:34:
         d1:4f:a4:55:fb:5e:6a:34:19:7b:b1:f5:09:f3:0b:92:33:46:
         54:88:c3:39:3a:e4:98:e1:08:4f:f4:13:07:cf:40:bf:60:e6:
         e9:3e:de:90:b2:1d:1b:f1:10:a6:0a:fe:de:45:0b:ad:55:7e:
         2d:07:d4:a5:d4:35:b0:eb:e8:33:c4:3d:7c:0f:8d:66:d4:c1:
         5f:e6:45:1e:a4:00:52:06:f9:3b:b9:f8:8b:ed:17:89:7a:43:
         60:20:8d:90:a1:b2:75:b8:9f:c0:99:88:7b:7d:d5:33:f8:bd:
         dc:2b:6b:41:b8:8b:88:98:3d:02:31:2d:35:5e:6c:d6:bb:39:
         5c:3f:c7:5b:a2:b4:6e:b1:ea:af:f9:d9:c3:09:af:d1:49:86:
         df:04:73:65:a4:84:35:8e:04:7d:28:be:94:b2:c3:b9:d7:b6:
         6a:fa:24:6f:f8:bd:c3:c6:23:92:d4:2f:fe:19:da:4a:48:d0:
         f3:85:29:f5:3e:82:de:21:d0:54:5c:5e:04:bf:ef:69:4a:57:
         02:d7:e2:87
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgIUU5AJSOVdxdR2IVVE2olsc4x9kMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMTEyMjcxMTM3NDdaFw0yMjEyMjYxMTQyNDdaMDMxMTAvBgNV
BAMTKDU3RjkzNTdEMTU1Mzg0M0Y4QjM5NDRGMzU0NUI5RTZDOUQwQkYzQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx4DKtRGNawi9ezOxayIhuiiPV
a1MGZyTBsNYBRKaD5sOIRa6x+K4qDTlXvrUAjSkj2vrXO6ASFJpWCwAaZh9/hKKz
oXNl1/9zmcJJvE1ooK86SCHRHTK53ON78kJAebqT9TRCBBR1vM4NIilqHDPKUj8Y
qPPu+r3kfBDTMvnYFdkickCOwAklXGNBCLZpfP39CFeWhJH9npHTPQzW1WFHzf9K
pA42Ww3wsPQUI0QOkxMxp62ydMYzKgCsSYzlsdvBSdj7Awj879nH23fdFOdSK8do
sH6pZyjYdVVMQMQsY1R9mRAEGc+RNouAZ/y2SWgLFQzRSrtffVCPGlgvYqTfAgMB
AAGjggMfMIIDGzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRX+TV9FVOEP4s5
RPNUW55snQvztTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HdWp6ODl1QTVVOEhndTI2UzdkR2phd2FLd1ZLajRXdEVS
RjQ2UkNtcnA2ei8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HdWp6ODl1QTVVOEhndTI2UzdkR2phd2FLd1ZLajRXdEVS
RjQ2UkNtcnA2ei8wLzU3RjkzNTdEMTU1Mzg0M0Y4QjM5NDRGMzU0NUI5RTZDOUQw
QkYzQjUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAqrngAMEBL1ZADANBAIA
AjAHAwUAIAESlDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJuFjANBgkqhkiG9w0B
AQsFAAOCAQEAjIOIV9QIcjlne7KzeRdaZODBxb7WxPG3BnnuufUiVYAACra3dlY4
Tf/a47/svADS4nCe86Y00U+kVfteajQZe7H1CfMLkjNGVIjDOTrkmOEIT/QTB89A
v2Dm6T7ekLIdG/EQpgr+3kULrVV+LQfUpdQ1sOvoM8Q9fA+NZtTBX+ZFHqQAUgb5
O7n4i+0XiXpDYCCNkKGydbifwJmIe33VM/i93CtrQbiLiJg9AjEtNV5s1rs5XD/H
W6K0brHqr/nZwwmv0UmG3wRzZaSENY4EfSi+lLLDude2avokb/i9w8YjktQv/hna
SkjQ84Up9T6C3iHQVFxeBL/vaUpXAtfihw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org