Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5B6FC10701CF8813713DBA0EB1293D85E893708B.cer
File:                     5B6FC10701CF8813713DBA0EB1293D85E893708B.cer (raw, json)
Hash identifier:          NAskOZihmr6Dv5Zz95ijnOGHJK0G2rwvhWtpcFZ7LAk=
Subject key identifier:   5B:6F:C1:07:01:CF:88:13:71:3D:BA:0E:B1:29:3D:85:E8:93:70:8B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3561B613D9F549A73077925FAA6C65E396B9738F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/5B6FC10701CF8813713DBA0EB1293D85E893708B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 19 Mar 2023 12:54:23 +0000
Certificate not after:    Sun 17 Mar 2024 12:59:23 +0000
Subordinate resources:    AS: 271343
                          IP: 200.39.36.0/22
                          IP: 2804:7a08::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:61:b6:13:d9:f5:49:a7:30:77:92:5f:aa:6c:65:e3:96:b9:73:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 19 12:54:23 2023 GMT
            Not After : Mar 17 12:59:23 2024 GMT
        Subject: CN=5B6FC10701CF8813713DBA0EB1293D85E893708B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:24:83:ee:dc:41:4c:be:44:38:86:f5:c9:02:
                    65:71:60:87:6d:b6:73:63:9d:30:95:ce:4c:af:fb:
                    6c:66:f5:e4:fc:e3:d4:fc:5c:c7:25:fd:ef:7a:b0:
                    9b:a7:c6:f7:a4:e7:fc:4c:89:48:50:5f:ab:6c:a5:
                    f7:d4:59:d4:0c:a9:22:a7:e6:9d:29:4e:21:03:53:
                    f2:f3:c3:d9:81:76:23:02:a4:a1:1a:aa:c9:38:a4:
                    14:72:aa:16:6b:b1:5b:7f:a6:3d:34:40:e2:ab:f3:
                    76:35:e4:54:ef:6d:8e:c3:45:66:9e:45:bf:3b:e9:
                    2b:40:74:f9:17:86:6e:3e:34:09:0f:04:a0:94:46:
                    d5:b6:3b:14:29:c2:b4:4f:79:c7:fd:07:54:17:2c:
                    4b:ff:7f:ff:8e:05:16:8c:f3:de:f5:75:22:d9:83:
                    a3:a5:fc:54:13:a3:66:fe:85:70:0c:99:5d:3b:d0:
                    48:36:37:51:65:45:65:ef:c0:7c:9b:d3:cd:56:5a:
                    84:5d:2d:fe:f7:de:77:d5:b5:36:56:2d:95:8e:e8:
                    59:36:2f:3c:31:21:e9:bd:ab:43:21:da:84:13:17:
                    6f:25:ea:fe:be:97:e3:65:10:f7:ff:50:f6:eb:11:
                    e0:d4:83:09:68:aa:5d:5c:65:21:d0:a3:52:87:e9:
                    71:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:6F:C1:07:01:CF:88:13:71:3D:BA:0E:B1:29:3D:85:E8:93:70:8B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/5B6FC10701CF8813713DBA0EB1293D85E893708B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.36.0/22
                IPv6:
                  2804:7a08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271343

    Signature Algorithm: sha256WithRSAEncryption
         09:92:ee:d0:6e:31:3e:62:59:60:f6:3b:26:83:5c:bf:7b:7f:
         ab:52:c2:24:85:94:b6:60:83:f7:67:d8:ae:c8:77:92:db:d9:
         8f:7b:dc:f3:3a:56:4e:0a:f4:8c:b1:fa:a2:ba:14:2e:80:de:
         89:8b:c2:fa:63:06:87:db:67:b5:ee:26:0b:15:80:6a:ca:0f:
         27:d9:d1:9c:87:0c:5a:24:84:10:36:5b:a5:fc:0b:58:b5:cb:
         9f:0e:bc:61:20:4a:52:bd:80:54:04:12:49:3b:e0:64:a6:9e:
         cc:0d:83:f0:52:c6:4b:a4:47:c7:56:b7:1d:8c:49:38:d1:bc:
         23:b4:2c:51:ed:76:23:a9:6b:f1:f1:7e:ce:b3:dc:35:44:8d:
         69:83:13:c6:6d:e6:18:fc:a9:98:56:e8:0c:cb:e2:c3:1d:1c:
         d1:4c:96:7d:f4:e8:62:7a:aa:ee:5f:c6:ba:a0:1d:4a:dc:84:
         ab:85:4c:c8:7a:f6:a3:27:bd:88:75:1c:87:a8:81:0f:9b:08:
         c6:79:1f:29:0f:10:ab:6a:10:cb:d5:f4:22:2c:1d:94:40:fc:
         b0:96:5a:8c:3e:fe:e9:0f:14:16:a7:ed:86:79:7f:a3:93:e1:
         34:2c:8c:cd:f5:77:c7:74:c5:3c:16:fe:2f:cf:44:cb:e4:ec:
         31:d9:9a:42
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUNWG2E9n1Sacwd5Jfqmxl45a5c48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMTkxMjU0MjNaFw0yNDAzMTcxMjU5MjNaMDMxMTAvBgNV
BAMTKDVCNkZDMTA3MDFDRjg4MTM3MTNEQkEwRUIxMjkzRDg1RTg5MzcwOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+JIPu3EFMvkQ4hvXJAmVxYIdt
tnNjnTCVzkyv+2xm9eT849T8XMcl/e96sJunxvek5/xMiUhQX6tspffUWdQMqSKn
5p0pTiEDU/Lzw9mBdiMCpKEaqsk4pBRyqhZrsVt/pj00QOKr83Y15FTvbY7DRWae
Rb876StAdPkXhm4+NAkPBKCURtW2OxQpwrRPecf9B1QXLEv/f/+OBRaM8971dSLZ
g6Ol/FQTo2b+hXAMmV070Eg2N1FlRWXvwHyb081WWoRdLf733nfVtTZWLZWO6Fk2
LzwxIem9q0Mh2oQTF28l6v6+l+NlEPf/UPbrEeDUgwloql1cZSHQo1KH6XELAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRbb8EHAc+IE3E9
ug6xKT2F6JNwizAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IZUs4UG5uV1Z4OTRpZGRvM3JiRkhqQVAyQm9KclZZTmhr
QlREWFZuQTQ1Sy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IZUs4UG5uV1Z4OTRpZGRvM3JiRkhqQVAyQm9KclZZTmhr
QlREWFZuQTQ1Sy8wLzVCNkZDMTA3MDFDRjg4MTM3MTNEQkEwRUIxMjkzRDg1RTg5
MzcwOEIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsgnJDANBAIAAjAHAwUA
KAR6CDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEI+8wDQYJKoZIhvcNAQELBQAD
ggEBAAmS7tBuMT5iWWD2OyaDXL97f6tSwiSFlLZgg/dn2K7Id5Lb2Y973PM6Vk4K
9Iyx+qK6FC6A3omLwvpjBofbZ7XuJgsVgGrKDyfZ0ZyHDFokhBA2W6X8C1i1y58O
vGEgSlK9gFQEEkk74GSmnswNg/BSxkukR8dWtx2MSTjRvCO0LFHtdiOpa/Hxfs6z
3DVEjWmDE8Zt5hj8qZhW6AzL4sMdHNFMln306GJ6qu5fxrqgHUrchKuFTMh69qMn
vYh1HIeogQ+bCMZ5HykPEKtqEMvV9CIsHZRA/LCWWow+/ukPFBan7YZ5f6OT4TQs
jM31d8d0xTwW/i/PRMvk7DHZmkI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org