Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/59AB6F516C2BC405DEB458029EA40FA2327607EE.cer
File:                     59AB6F516C2BC405DEB458029EA40FA2327607EE.cer (raw, json)
Hash identifier:          CzB5JZ+ozPlUsikGrRJ90KIYq+s2HvqE/eu9T3H6+ww=
Subject key identifier:   59:AB:6F:51:6C:2B:C4:05:DE:B4:58:02:9E:A4:0F:A2:32:76:07:EE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4E15E04E10D7BFEEBA32D50C4722CFE6DE4D9FDD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/0/59AB6F516C2BC405DEB458029EA40FA2327607EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 12 Aug 2023 02:54:07 +0000
Certificate not after:    Sat 10 Aug 2024 02:59:07 +0000
Subordinate resources:    AS: 268969
                          IP: 45.176.56.0/22
                          IP: 2804:5d64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:15:e0:4e:10:d7:bf:ee:ba:32:d5:0c:47:22:cf:e6:de:4d:9f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 12 02:54:07 2023 GMT
            Not After : Aug 10 02:59:07 2024 GMT
        Subject: CN=59AB6F516C2BC405DEB458029EA40FA2327607EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:29:ab:0d:b0:13:8b:45:2b:78:a2:d7:a8:
                    57:4c:72:da:72:04:82:aa:26:1a:31:1a:f4:95:b9:
                    7b:7a:13:9c:52:ba:54:0d:cd:71:aa:cd:10:f0:63:
                    da:b2:2c:23:02:cd:57:3f:4b:24:52:91:62:17:6f:
                    11:1b:00:d9:15:f4:43:88:70:ec:43:10:32:b0:02:
                    18:26:57:42:3a:da:df:1d:f6:e2:f4:26:68:57:16:
                    78:63:21:4d:6c:d8:3a:c3:c2:29:90:32:aa:77:f1:
                    1b:e5:7c:1a:07:0f:bc:75:d0:21:25:5c:11:97:62:
                    94:e3:cd:59:52:f5:12:8b:24:68:f0:c2:1e:eb:19:
                    9e:56:dd:81:d2:18:05:04:bb:0b:cb:82:74:50:99:
                    33:05:1a:99:f2:4d:70:1f:de:93:c8:b5:e0:2c:51:
                    17:e8:b1:d4:2a:15:9a:41:c0:59:b1:8e:bf:11:b3:
                    80:96:94:95:ad:b0:8f:5f:c9:60:b4:c7:fa:0e:85:
                    7c:e6:74:24:f2:e1:f6:06:f7:bc:a4:14:e4:85:73:
                    56:75:13:a2:c6:03:fc:9b:0b:82:14:df:a4:a0:b1:
                    9a:e4:ab:a8:a6:89:b3:9c:19:63:c0:1a:06:ac:22:
                    72:63:28:48:66:c4:7b:3f:68:11:fa:ae:b3:6b:46:
                    5c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                59:AB:6F:51:6C:2B:C4:05:DE:B4:58:02:9E:A4:0F:A2:32:76:07:EE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/wGxc1ukStw81WFNQUWg8NCZQsXt8y8b81njZ7htBDQH/0/59AB6F516C2BC405DEB458029EA40FA2327607EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.56.0/22
                IPv6:
                  2804:5d64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268969

    Signature Algorithm: sha256WithRSAEncryption
         1c:f6:aa:5c:d4:30:d6:d3:ce:ac:3a:27:e9:39:98:80:d1:8e:
         3f:ae:35:66:a6:ab:51:3b:f8:9a:01:fb:33:da:59:3d:fc:16:
         10:df:c3:34:33:5f:65:fc:db:48:09:8f:5a:a7:54:28:44:5b:
         0d:3c:f4:aa:84:51:bf:5f:66:d2:a0:32:ab:f3:c1:bc:13:9b:
         07:0f:40:68:e7:a0:8e:39:97:73:d5:eb:a7:46:e6:35:7f:dc:
         d9:ab:1c:89:a9:5c:79:ab:10:4d:b6:85:de:6c:49:75:69:ed:
         e1:45:e5:c1:71:6f:bf:96:08:8c:46:f8:a9:35:9d:59:fc:d0:
         f7:3a:72:b6:d9:59:e7:37:04:78:49:e8:52:bf:e0:e3:5c:fb:
         dc:32:7f:b2:ad:de:6f:93:02:25:a1:68:95:47:a0:40:af:30:
         1c:4c:8f:7b:18:f1:1e:af:35:60:b8:d6:64:63:b0:ba:f7:b2:
         33:08:c2:14:b0:5f:2c:b3:b4:13:77:0b:ad:5e:e2:ca:07:d7:
         b6:7d:fb:be:58:13:63:d8:08:5d:c6:29:76:dd:a9:e1:89:d9:
         19:42:0e:38:e3:88:93:16:7b:e2:e9:96:ee:9d:3a:b4:4a:a0:
         52:d5:81:1c:ad:3f:76:df:d6:1a:7a:53:72:9c:bb:b7:9e:1b:
         7b:0f:64:b0
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUThXgThDXv+66MtUMRyLP5t5Nn90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MTIwMjU0MDdaFw0yNDA4MTAwMjU5MDdaMDMxMTAvBgNV
BAMTKDU5QUI2RjUxNkMyQkM0MDVERUI0NTgwMjlFQTQwRkEyMzI3NjA3RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8oSmrDbATi0UreKLXqFdMctpy
BIKqJhoxGvSVuXt6E5xSulQNzXGqzRDwY9qyLCMCzVc/SyRSkWIXbxEbANkV9EOI
cOxDEDKwAhgmV0I62t8d9uL0JmhXFnhjIU1s2DrDwimQMqp38RvlfBoHD7x10CEl
XBGXYpTjzVlS9RKLJGjwwh7rGZ5W3YHSGAUEuwvLgnRQmTMFGpnyTXAf3pPIteAs
URfosdQqFZpBwFmxjr8Rs4CWlJWtsI9fyWC0x/oOhXzmdCTy4fYG97ykFOSFc1Z1
E6LGA/ybC4IU36SgsZrkq6imibOcGWPAGgasInJjKEhmxHs/aBH6rrNrRlwTAgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRZq29RbCvEBd60
WAKepA+iMnYH7jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby93R3hjMXVrU3R3ODFXRk5RVVdnOE5DWlFzWHQ4eThiODFu
alo3aHRCRFFILzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby93R3hjMXVrU3R3ODFXRk5RVVdnOE5DWlFzWHQ4eThiODFu
alo3aHRCRFFILzAvNTlBQjZGNTE2QzJCQzQwNURFQjQ1ODAyOUVBNDBGQTIzMjc2
MDdFRS5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLbA4MA0EAgACMAcDBQAo
BF1kMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQaqTANBgkqhkiG9w0BAQsFAAOC
AQEAHPaqXNQw1tPOrDon6TmYgNGOP641ZqarUTv4mgH7M9pZPfwWEN/DNDNfZfzb
SAmPWqdUKERbDTz0qoRRv19m0qAyq/PBvBObBw9AaOegjjmXc9Xrp0bmNX/c2asc
ialceasQTbaF3mxJdWnt4UXlwXFvv5YIjEb4qTWdWfzQ9zpyttlZ5zcEeEnoUr/g
41z73DJ/sq3eb5MCJaFolUegQK8wHEyPexjxHq81YLjWZGOwuveyMwjCFLBfLLO0
E3cLrV7iygfXtn37vlgTY9gIXcYpdt2p4YnZGUIOOOOIkxZ74umW7p06tEqgUtWB
HK0/dt/WGnpTcpy7t54bew9ksA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org