Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/59FB945CE1C82CCE4E4DFCEA7CCB733BAB2F1A7D.cer
File:                     59FB945CE1C82CCE4E4DFCEA7CCB733BAB2F1A7D.cer (raw, json)
Hash identifier:          egj/t+PKwZcCALXqtWYJVxpF3R8Ix5nHr2+KXcgIS3o=
Subject key identifier:   59:FB:94:5C:E1:C8:2C:CE:4E:4D:FC:EA:7C:CB:73:3B:AB:2F:1A:7D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       70C2A3D61EF5FFB63C0DF2910720837424AC41F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/59FB945CE1C82CCE4E4DFCEA7CCB733BAB2F1A7D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 06 Aug 2022 11:31:40 +0000
Certificate not after:    Sat 05 Aug 2023 11:36:40 +0000
Subordinate resources:    AS: 266506
                          IP: 170.244.180.0/22
                          IP: 2804:38dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c2:a3:d6:1e:f5:ff:b6:3c:0d:f2:91:07:20:83:74:24:ac:41:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  6 11:31:40 2022 GMT
            Not After : Aug  5 11:36:40 2023 GMT
        Subject: CN=59FB945CE1C82CCE4E4DFCEA7CCB733BAB2F1A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:6e:da:02:c8:77:ba:db:8e:cb:97:83:33:
                    e7:ca:d5:3d:10:e0:d1:14:f9:83:7d:91:b7:ae:84:
                    53:14:83:9b:82:9f:a3:70:be:b6:b3:aa:0b:23:34:
                    9a:6e:b3:05:6f:36:13:06:2e:49:c7:8d:9b:ef:9e:
                    b0:61:f5:ba:eb:be:18:e3:1b:a2:32:f6:c4:91:f7:
                    f8:72:58:8a:93:d9:23:81:56:b9:71:4d:7e:6b:3d:
                    1e:7b:47:ab:0d:74:35:ff:1d:ac:3d:9e:49:4a:e4:
                    e4:0f:51:9f:b7:06:52:6e:e6:da:3c:e5:93:4e:ce:
                    ee:ff:c0:26:91:cb:ab:49:85:7f:1c:be:ed:e8:15:
                    9a:53:66:dd:d4:31:80:ab:89:b2:41:2c:8b:67:0e:
                    78:16:eb:2d:eb:0c:06:b8:32:d3:2b:ba:e3:44:29:
                    cf:a5:04:2c:4d:dc:6a:14:0f:69:8d:5f:36:4b:7a:
                    74:ea:09:3d:8a:e0:02:36:ce:29:cf:c9:7e:38:31:
                    36:10:62:75:a4:42:a3:bf:1c:b4:dd:90:aa:73:4c:
                    05:67:1d:4b:8b:74:0f:49:0e:97:e6:0e:4b:00:af:
                    a6:05:89:44:0a:3d:bc:07:93:68:d5:f0:db:7e:72:
                    ca:e7:a6:6d:93:de:bf:2f:c5:27:56:ff:ae:78:03:
                    fa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                59:FB:94:5C:E1:C8:2C:CE:4E:4D:FC:EA:7C:CB:73:3B:AB:2F:1A:7D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/59FB945CE1C82CCE4E4DFCEA7CCB733BAB2F1A7D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.180.0/22
                IPv6:
                  2804:38dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266506

    Signature Algorithm: sha256WithRSAEncryption
         14:ef:e8:83:41:ce:1a:d2:77:27:60:67:e8:16:90:13:80:0d:
         5b:63:7f:26:e5:12:e3:e6:4d:e7:87:4a:79:ef:9d:b9:65:e8:
         f0:c1:a9:a3:5b:97:8f:84:44:df:2d:b1:cb:34:41:ed:71:96:
         3d:f3:9e:e5:17:9d:7b:87:12:82:84:91:b7:9a:dd:ac:12:cf:
         93:cc:cc:77:8c:19:5a:1d:ba:1d:64:90:f9:3c:19:88:0f:69:
         8e:b1:92:1e:83:32:8b:a9:9a:20:a3:e0:7d:aa:1b:35:bb:f3:
         5f:71:68:1e:f3:94:3a:20:24:a3:b6:ea:5e:42:e4:ce:40:78:
         34:03:28:37:83:d8:67:d2:59:95:8f:36:57:30:3b:d6:70:6a:
         e2:a1:20:3f:a1:b2:2c:22:f9:cf:b3:3b:b3:91:74:e1:ba:e3:
         3e:df:18:44:c6:55:13:f9:a2:20:99:68:74:86:b4:46:d2:32:
         cc:a4:20:23:e2:38:f1:bc:e3:f5:d3:50:08:11:82:03:9e:8f:
         08:16:88:25:71:3e:f9:0f:9e:89:f5:a3:d4:0c:7a:4d:fe:4f:
         90:41:53:e8:d4:be:5a:31:0f:12:0b:e9:50:72:21:51:44:89:
         e5:2f:20:b8:24:f1:c0:1c:20:09:61:35:23:69:6e:2c:d2:26:
         76:ef:fe:fd
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUcMKj1h71/7Y8DfKRByCDdCSsQfUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA4MDYxMTMxNDBaFw0yMzA4MDUxMTM2NDBaMDMxMTAvBgNV
BAMTKDU5RkI5NDVDRTFDODJDQ0U0RTRERkNFQTdDQ0I3MzNCQUIyRjFBN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6EW7aAsh3utuOy5eDM+fK1T0Q
4NEU+YN9kbeuhFMUg5uCn6NwvrazqgsjNJpuswVvNhMGLknHjZvvnrBh9brrvhjj
G6Iy9sSR9/hyWIqT2SOBVrlxTX5rPR57R6sNdDX/Haw9nklK5OQPUZ+3BlJu5to8
5ZNOzu7/wCaRy6tJhX8cvu3oFZpTZt3UMYCribJBLItnDngW6y3rDAa4MtMruuNE
Kc+lBCxN3GoUD2mNXzZLenTqCT2K4AI2zinPyX44MTYQYnWkQqO/HLTdkKpzTAVn
HUuLdA9JDpfmDksAr6YFiUQKPbwHk2jV8Nt+csrnpm2T3r8vxSdW/654A/ofAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRZ+5Rc4cgszk5N
/Op8y3M7qy8afTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8ydEZ1a2txeHR3UVVQbnd3dzZTWmR6QlpINk54aXhBNThr
MURHRVBvOHI2dC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8ydEZ1a2txeHR3UVVQbnd3dzZTWmR6QlpINk54aXhBNThr
MURHRVBvOHI2dC8wLzU5RkI5NDVDRTFDODJDQ0U0RTRERkNFQTdDQ0I3MzNCQUIy
RjFBN0QubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqr0tDANBAIAAjAHAwUA
KAQ43DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEQowDQYJKoZIhvcNAQELBQAD
ggEBABTv6INBzhrSdydgZ+gWkBOADVtjfyblEuPmTeeHSnnvnbll6PDBqaNbl4+E
RN8tscs0Qe1xlj3znuUXnXuHEoKEkbea3awSz5PMzHeMGVoduh1kkPk8GYgPaY6x
kh6DMoupmiCj4H2qGzW7819xaB7zlDogJKO26l5C5M5AeDQDKDeD2GfSWZWPNlcw
O9ZwauKhID+hsiwi+c+zO7ORdOG64z7fGETGVRP5oiCZaHSGtEbSMsykICPiOPG8
4/XTUAgRggOejwgWiCVxPvkPnon1o9QMek3+T5BBU+jUvloxDxIL6VByIVFEieUv
ILgk8cAcIAlhNSNpbizSJnbv/v0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org