Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5B8999B95B472059B9F7165BF2FBA2F7CBC2EC4C.cer
File:                     5B8999B95B472059B9F7165BF2FBA2F7CBC2EC4C.cer (raw, json)
Hash identifier:          cta64UicSSyBIVzcsitOR4IkavUlc7+t59CblXK2MX4=
Subject key identifier:   5B:89:99:B9:5B:47:20:59:B9:F7:16:5B:F2:FB:A2:F7:CB:C2:EC:4C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       242949A01CAF0E6F41BA4CC44CB9D1CA5890DEA9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/5B8999B95B472059B9F7165BF2FBA2F7CBC2EC4C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Jul 2022 16:36:51 +0000
Certificate not after:    Mon 24 Jul 2023 16:41:51 +0000
Subordinate resources:    AS: 265184
                          IP: 167.249.160.0/22
                          IP: 2804:2bec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:29:49:a0:1c:af:0e:6f:41:ba:4c:c4:4c:b9:d1:ca:58:90:de:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 16:36:51 2022 GMT
            Not After : Jul 24 16:41:51 2023 GMT
        Subject: CN=5B8999B95B472059B9F7165BF2FBA2F7CBC2EC4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:37:91:b4:2a:34:9e:47:55:55:d9:a2:02:
                    12:8f:4b:43:10:3a:da:f9:51:34:91:fd:b2:4f:8e:
                    b1:60:df:e9:db:d6:8a:a4:91:c8:eb:6e:d0:d2:58:
                    9b:77:6a:96:e6:d8:ab:de:4a:71:3b:01:50:df:54:
                    09:7f:13:29:4d:9a:68:0c:0a:9e:3f:9e:8a:d8:fe:
                    9a:6d:a4:79:45:b0:28:4f:c3:31:04:ab:44:84:0a:
                    1a:50:86:c7:0d:91:d5:0f:6d:fe:a4:0f:01:0d:24:
                    9a:02:05:a3:7c:47:40:b2:14:ee:5a:58:59:07:0c:
                    8f:38:2f:08:b4:10:e6:07:fe:fb:60:d7:6e:fe:08:
                    0c:dc:db:c8:b7:05:f8:33:4f:bd:03:82:7d:6f:da:
                    8d:58:b8:cf:fa:7d:dd:29:23:15:d4:a9:89:8b:5a:
                    5c:a7:d1:5d:83:62:b7:72:a0:4b:04:35:ce:5f:83:
                    e4:2a:f2:33:fc:14:68:03:08:0b:4c:c4:18:87:f0:
                    47:9a:8d:7a:95:f8:06:7a:a6:dd:d8:6e:bb:8b:6b:
                    f6:d9:0a:32:d5:4e:e6:f4:ea:eb:70:ff:d5:f1:51:
                    79:f1:6f:a7:18:b6:db:b1:c2:ab:4e:e8:46:bf:df:
                    26:a1:4b:76:3a:b8:17:9a:94:91:ee:ab:7d:0f:d7:
                    d6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:89:99:B9:5B:47:20:59:B9:F7:16:5B:F2:FB:A2:F7:CB:C2:EC:4C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/84qQtB9gKeTooNN3Jq223AgQSJ4dt1KMixqrPxnU73tJ/0/5B8999B95B472059B9F7165BF2FBA2F7CBC2EC4C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.160.0/22
                IPv6:
                  2804:2bec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265184

    Signature Algorithm: sha256WithRSAEncryption
         39:99:e0:b8:97:23:92:f0:10:35:df:29:0e:e7:3a:e4:27:d0:
         4c:41:10:92:f9:29:03:a1:18:cf:1f:05:b4:5d:85:ec:aa:14:
         a9:0a:89:36:94:84:6a:f3:91:ff:cc:e2:38:bb:d6:7a:4e:92:
         9d:72:8e:ec:6b:99:24:2d:86:ea:95:f2:de:f6:7f:8c:bb:f2:
         d5:ac:2d:2e:53:9c:3b:37:97:d6:f3:7c:7b:77:62:db:46:b7:
         29:95:dc:51:91:3c:88:91:b0:20:45:77:e6:fc:72:61:77:a7:
         c7:d9:30:e6:31:ed:dc:f3:54:05:ed:8f:ce:c3:49:f6:c0:60:
         24:f3:b6:15:18:c6:4f:7d:59:b1:09:e4:1c:92:75:e4:c1:d9:
         07:34:14:b7:d1:6a:0d:fc:02:fc:55:7c:67:63:14:37:4d:b2:
         8a:42:d5:fb:d2:35:ca:a1:9a:e7:ca:d2:38:0a:d7:13:78:d0:
         4b:f8:bf:a2:c4:15:0e:cc:5b:20:4b:54:43:0e:e0:c5:3d:a0:
         2c:81:9e:7d:06:31:1d:6e:d1:81:68:0c:bb:5a:30:c0:ac:5c:
         53:ec:eb:ef:ef:ba:5f:0d:40:6d:16:9d:05:dd:64:39:43:8c:
         92:c2:6c:2d:12:d1:60:90:0c:13:31:1a:51:b2:9f:4c:f3:35:
         08:bd:db:dd
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUJClJoByvDm9BukzETLnRyliQ3qkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA3MjUxNjM2NTFaFw0yMzA3MjQxNjQxNTFaMDMxMTAvBgNV
BAMTKDVCODk5OUI5NUI0NzIwNTlCOUY3MTY1QkYyRkJBMkY3Q0JDMkVDNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt/DeRtCo0nkdVVdmiAhKPS0MQ
Otr5UTSR/bJPjrFg3+nb1oqkkcjrbtDSWJt3apbm2KveSnE7AVDfVAl/EylNmmgM
Cp4/norY/pptpHlFsChPwzEEq0SEChpQhscNkdUPbf6kDwENJJoCBaN8R0CyFO5a
WFkHDI84Lwi0EOYH/vtg127+CAzc28i3BfgzT70Dgn1v2o1YuM/6fd0pIxXUqYmL
Wlyn0V2DYrdyoEsENc5fg+Qq8jP8FGgDCAtMxBiH8EeajXqV+AZ6pt3YbruLa/bZ
CjLVTub06utw/9XxUXnxb6cYttuxwqtO6Ea/3yahS3Y6uBealJHuq30P19axAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRbiZm5W0cgWbn3
Flvy+6L3y8LsTDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84NHFRdEI5Z0tlVG9vTk4zSnEyMjNBZ1FTSjRkdDFLTWl4
cXJQeG5VNzN0Si8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84NHFRdEI5Z0tlVG9vTk4zSnEyMjNBZ1FTSjRkdDFLTWl4
cXJQeG5VNzN0Si8wLzVCODk5OUI5NUI0NzIwNTlCOUY3MTY1QkYyRkJBMkY3Q0JD
MkVDNEMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqf5oDANBAIAAjAHAwUA
KAQr7DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEC+AwDQYJKoZIhvcNAQELBQAD
ggEBADmZ4LiXI5LwEDXfKQ7nOuQn0ExBEJL5KQOhGM8fBbRdheyqFKkKiTaUhGrz
kf/M4ji71npOkp1yjuxrmSQthuqV8t72f4y78tWsLS5TnDs3l9bzfHt3YttGtymV
3FGRPIiRsCBFd+b8cmF3p8fZMOYx7dzzVAXtj87DSfbAYCTzthUYxk99WbEJ5ByS
deTB2Qc0FLfRag38AvxVfGdjFDdNsopC1fvSNcqhmufK0jgK1xN40Ev4v6LEFQ7M
WyBLVEMO4MU9oCyBnn0GMR1u0YFoDLtaMMCsXFPs6+/vul8NQG0WnQXdZDlDjJLC
bC0S0WCQDBMxGlGyn0zzNQi9290=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org