Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
File:                     5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer (raw, json)
Hash identifier:          BDISVgPnqc8MrqG/rDOA0IJVk0C9qpimfvi9zeJMD40=
Subject key identifier:   5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       313908EDA4BFA0057C6D9947383EBB1D8244CB84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Aug 2023 12:17:39 +0000
Certificate not after:    Thu 08 Aug 2024 12:22:39 +0000
Subordinate resources:    AS: 61717
                          IP: 45.71.144.0/22
                          IP: 131.72.4.0/22
                          IP: 170.233.16.0/22
                          IP: 2804:1b44::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:39:08:ed:a4:bf:a0:05:7c:6d:99:47:38:3e:bb:1d:82:44:cb:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 10 12:17:39 2023 GMT
            Not After : Aug  8 12:22:39 2024 GMT
        Subject: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:67:c4:f8:98:c0:0b:e4:d2:27:f1:0a:e9:f2:
                    c2:75:b1:a7:b0:da:72:7d:8a:ec:57:d6:7c:f1:45:
                    ab:0a:01:aa:e1:e1:e0:0f:cf:9f:ed:03:92:43:7b:
                    1f:08:c8:0d:35:fb:8d:ef:f5:94:ec:0f:08:ed:c7:
                    f7:67:cb:a3:92:8f:f7:11:01:bf:51:b1:14:cb:25:
                    aa:ea:53:33:c1:57:d5:6d:8a:2e:bd:a5:e2:de:1a:
                    66:bd:2d:86:0c:fa:70:ba:91:7f:ed:71:ae:6f:4e:
                    5c:f5:cf:d7:98:99:7b:9b:e2:b6:73:04:cf:20:11:
                    5e:fc:04:9d:22:f9:67:57:f6:3c:68:23:66:a6:bd:
                    28:aa:84:28:9b:a7:3b:6e:70:9b:2a:42:b0:5c:e0:
                    98:56:a3:09:59:0b:3f:53:70:1f:12:3d:eb:4f:51:
                    28:90:73:d2:0b:f4:cf:31:ce:e1:45:a2:95:ec:33:
                    20:70:e8:ea:d4:4f:51:25:30:73:05:19:b0:58:30:
                    3a:61:a5:1c:02:88:bc:4c:06:e0:f3:54:5d:ff:57:
                    a2:e8:41:ea:55:a7:1c:37:6a:cd:8f:21:b7:21:7a:
                    4d:8e:21:4a:49:a3:1c:f7:e7:86:ff:e5:7e:0d:65:
                    27:d7:ba:a0:c9:ba:3b:d1:ba:91:75:fb:b5:1a:91:
                    e2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.144.0/22
                  131.72.4.0/22
                  170.233.16.0/22
                IPv6:
                  2804:1b44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61717

    Signature Algorithm: sha256WithRSAEncryption
         8f:bf:fc:8b:38:0e:91:8d:1d:99:11:c2:5e:68:2a:9a:a3:7e:
         49:17:19:b9:d4:27:f7:56:59:cf:3f:2e:9e:2b:7c:25:f0:7c:
         0c:18:85:bc:a4:61:72:b3:ec:c8:12:a8:ea:40:1e:e5:dc:ec:
         05:ea:f5:09:48:58:af:99:55:e4:be:a9:6c:46:23:ef:b5:48:
         89:ea:df:ac:17:f3:0d:ff:d7:62:2f:99:b6:c8:c2:de:41:be:
         fe:de:3f:66:83:9e:fe:c5:fe:71:f0:95:ce:1c:25:48:2c:a3:
         4a:5a:7d:aa:86:10:82:84:6b:50:90:0b:dd:a8:e5:a6:fb:a7:
         dd:89:cc:0d:1b:96:7a:4f:24:e4:5e:cb:a9:57:fa:fe:87:85:
         ec:2d:cf:ca:d5:2d:a7:b7:d5:5d:3d:54:0f:20:92:89:73:99:
         ab:a5:5f:b9:76:16:c2:e5:fd:6a:d6:14:b4:01:39:d7:80:e2:
         7d:30:87:61:77:c0:e3:25:54:3c:b4:49:f6:8c:0b:ba:16:58:
         66:dc:aa:87:4e:bc:54:5a:fd:ca:cb:66:9a:db:f5:26:b8:08:
         2e:ee:64:81:91:69:b7:b0:ad:15:af:a4:f4:e4:f4:8a:71:e3:
         07:74:ff:13:df:78:f6:4b:a4:2b:a5:5a:79:f3:56:7e:31:6a:
         02:ae:67:f1
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIUMTkI7aS/oAV8bZlHOD67HYJEy4QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MTAxMjE3MzlaFw0yNDA4MDgxMjIyMzlaMDMxMTAvBgNV
BAMTKDVDOTkxNEEzNUFDQkFCQUM2QTZFNUZBQTU5OTQ5N0REOTdDNDEyQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Z8T4mMAL5NIn8Qrp8sJ1saew
2nJ9iuxX1nzxRasKAarh4eAPz5/tA5JDex8IyA01+43v9ZTsDwjtx/dny6OSj/cR
Ab9RsRTLJarqUzPBV9Vtii69peLeGma9LYYM+nC6kX/tca5vTlz1z9eYmXub4rZz
BM8gEV78BJ0i+WdX9jxoI2amvSiqhCibpztucJsqQrBc4JhWowlZCz9TcB8SPetP
USiQc9IL9M8xzuFFopXsMyBw6OrUT1ElMHMFGbBYMDphpRwCiLxMBuDzVF3/V6Lo
QepVpxw3as2PIbchek2OIUpJoxz354b/5X4NZSfXuqDJujvRupF1+7UakeLPAgMB
AAGjggMnMIIDIzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRcmRSjWsurrGpu
X6pZlJfdl8QSpTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81N3ZQTnpuZ0U4ZkVEVmdpY0ZYSkFaeXRmTTgxOGpYbzlQ
Rms2VDFMS0dKWC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNTd2UE56bmdFOGZFRFZnaWNGWEpBWnl0Zk04MThqWG85
UEZrNlQxTEtHSlgvMC81Qzk5MTRBMzVBQ0JBQkFDNkE2RTVGQUE1OTk0OTdERDk3
QzQxMkE1Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAItR5ADBAKDSAQDBAKq
6RAwDQQCAAIwBwMFACgEG0QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPEVMA0G
CSqGSIb3DQEBCwUAA4IBAQCPv/yLOA6RjR2ZEcJeaCqao35JFxm51Cf3VlnPPy6e
K3wl8HwMGIW8pGFys+zIEqjqQB7l3OwF6vUJSFivmVXkvqlsRiPvtUiJ6t+sF/MN
/9diL5m2yMLeQb7+3j9mg57+xf5x8JXOHCVILKNKWn2qhhCChGtQkAvdqOWm+6fd
icwNG5Z6TyTkXsupV/r+h4XsLc/K1S2nt9VdPVQPIJKJc5mrpV+5dhbC5f1q1hS0
ATnXgOJ9MIdhd8DjJVQ8tEn2jAu6Flhm3KqHTrxUWv3Ky2aa2/UmuAgu7mSBkWm3
sK0Vr6T05PSKceMHdP8T33j2S6QrpVp581Z+MWoCrmfx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org