Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5F2C428A9AA6A79D1173E8C2A73422D261F0C6E0.cer
File:                     5F2C428A9AA6A79D1173E8C2A73422D261F0C6E0.cer (raw, json)
Hash identifier:          MDyzLi70KWLu2ODGRgb9D/DRbMKkFfbRgudgCqE6WWo=
Subject key identifier:   5F:2C:42:8A:9A:A6:A7:9D:11:73:E8:C2:A7:34:22:D2:61:F0:C6:E0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2922CF94A313DA0F7B885926AD3B932D4F0DC2D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/0/5F2C428A9AA6A79D1173E8C2A73422D261F0C6E0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Mar 2024 22:01:11 +0000
Certificate not after:    Fri 28 Mar 2025 22:06:11 +0000
Subordinate resources:    AS: 267058
                          IP: 45.228.96.0/22
                          IP: 2804:4780::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:22:cf:94:a3:13:da:0f:7b:88:59:26:ad:3b:93:2d:4f:0d:c2:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 29 22:01:11 2024 GMT
            Not After : Mar 28 22:06:11 2025 GMT
        Subject: CN=5F2C428A9AA6A79D1173E8C2A73422D261F0C6E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:73:49:aa:fe:78:29:1a:ee:c8:9d:e4:15:
                    cf:77:b2:77:01:6b:d6:3b:a6:8d:f6:09:d2:c8:ff:
                    9f:b7:67:8e:ea:59:68:7a:aa:d4:82:8d:0b:13:d7:
                    2e:84:60:ab:b0:44:72:0f:40:cd:cb:3a:7b:ec:4c:
                    d5:02:34:ef:7e:72:e0:6b:84:ac:2b:10:b8:df:77:
                    9f:12:37:24:7f:a4:88:f0:dd:d6:72:16:17:ce:7b:
                    7b:6e:43:ba:17:52:cd:12:d0:4c:75:0f:4f:0f:40:
                    0d:c5:29:cd:f1:13:fe:1e:09:ca:8f:d9:29:cd:94:
                    e0:84:a4:6c:69:4b:c8:db:1c:83:fd:77:ff:2b:b8:
                    7a:b0:b5:28:af:69:c5:b2:2d:65:cc:a3:5a:1a:d9:
                    03:0b:7b:20:3c:0a:c9:de:14:95:10:f0:63:95:06:
                    19:83:1d:ef:bb:62:09:f7:e7:32:11:f1:de:59:64:
                    3f:84:77:7b:23:96:a5:99:3b:c3:98:72:99:50:81:
                    64:ee:dd:9e:02:55:eb:e5:83:45:01:d2:dc:ab:65:
                    5b:48:7b:26:c0:34:1a:aa:04:c7:a3:f4:73:9d:45:
                    21:43:52:3a:ee:5d:8f:e7:de:d1:3a:cc:0e:5f:60:
                    48:ae:a6:d6:e0:3d:b1:29:3d:b0:f8:c0:b9:f1:bd:
                    f4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:2C:42:8A:9A:A6:A7:9D:11:73:E8:C2:A7:34:22:D2:61:F0:C6:E0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/0/5F2C428A9AA6A79D1173E8C2A73422D261F0C6E0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.96.0/22
                IPv6:
                  2804:4780::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267058

    Signature Algorithm: sha256WithRSAEncryption
         12:75:18:57:fd:6c:ea:92:e5:1d:f0:5c:8d:f5:08:84:23:b6:
         50:e4:b4:71:0a:95:11:ef:2e:cd:34:08:cb:10:5c:1c:5d:ce:
         34:9e:d0:d6:3e:1e:1e:f3:e0:7b:71:ae:48:ae:8b:79:d7:90:
         03:65:a8:e1:a8:93:a3:55:38:9b:75:ba:e3:e3:bb:aa:5d:f2:
         af:8d:08:77:e2:94:33:42:f0:cf:f7:47:b1:98:05:4e:ee:fb:
         d8:d0:3c:b7:9b:df:d5:cc:cf:52:5b:16:86:6a:b0:98:8b:a8:
         d4:92:0d:e6:ed:cb:92:10:77:5c:43:78:45:b4:76:bd:19:e7:
         2c:41:58:ad:13:83:2e:79:fd:54:62:66:6d:53:0f:56:44:9c:
         c1:1b:cf:17:8a:eb:57:c9:86:1f:82:d6:58:73:96:31:2a:ea:
         63:7c:3c:a8:d8:cc:c5:3b:9e:91:c0:40:59:60:e8:b8:60:43:
         0a:98:93:15:1d:a6:ae:b7:47:9e:20:11:ff:a2:d2:d2:2a:3c:
         d9:ce:a9:89:dc:93:d0:df:e8:14:e4:67:64:a3:29:0b:6a:db:
         da:02:1c:ad:35:84:dc:ac:28:dd:65:6c:5c:d5:f8:ed:cb:89:
         31:aa:53:b0:64:47:5a:d4:85:ba:d5:ba:1d:d4:fd:fe:04:ca:
         06:cf:a0:ef
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUKSLPlKMT2g97iFkmrTuTLU8NwtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjkyMjAxMTFaFw0yNTAzMjgyMjA2MTFaMDMxMTAvBgNV
BAMTKDVGMkM0MjhBOUFBNkE3OUQxMTczRThDMkE3MzQyMkQyNjFGMEM2RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9EnNJqv54KRruyJ3kFc93sncB
a9Y7po32CdLI/5+3Z47qWWh6qtSCjQsT1y6EYKuwRHIPQM3LOnvsTNUCNO9+cuBr
hKwrELjfd58SNyR/pIjw3dZyFhfOe3tuQ7oXUs0S0Ex1D08PQA3FKc3xE/4eCcqP
2SnNlOCEpGxpS8jbHIP9d/8ruHqwtSivacWyLWXMo1oa2QMLeyA8CsneFJUQ8GOV
BhmDHe+7Ygn35zIR8d5ZZD+Ed3sjlqWZO8OYcplQgWTu3Z4CVevlg0UB0tyrZVtI
eybANBqqBMej9HOdRSFDUjruXY/n3tE6zA5fYEiuptbgPbEpPbD4wLnxvfT/AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRfLEKKmqannRFz
6MKnNCLSYfDG4DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Id0ZuN3E1NmI4Zzh3SFBaUDZlR3BLb1FNdTFuYldoVnZk
eU43Q2tpY3h3My8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Id0ZuN3E1NmI4Zzh3SFBaUDZlR3BLb1FNdTFuYldoVnZk
eU43Q2tpY3h3My8wLzVGMkM0MjhBOUFBNkE3OUQxMTczRThDMkE3MzQyMkQyNjFG
MEM2RTAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3kYDANBAIAAjAHAwUA
KARHgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEzIwDQYJKoZIhvcNAQELBQAD
ggEBABJ1GFf9bOqS5R3wXI31CIQjtlDktHEKlRHvLs00CMsQXBxdzjSe0NY+Hh7z
4Htxrkiui3nXkANlqOGok6NVOJt1uuPju6pd8q+NCHfilDNC8M/3R7GYBU7u+9jQ
PLeb39XMz1JbFoZqsJiLqNSSDebty5IQd1xDeEW0dr0Z5yxBWK0Tgy55/VRiZm1T
D1ZEnMEbzxeK61fJhh+C1lhzljEq6mN8PKjYzMU7npHAQFlg6LhgQwqYkxUdpq63
R54gEf+i0tIqPNnOqYnck9Df6BTkZ2SjKQtq29oCHK01hNysKN1lbFzV+O3LiTGq
U7BkR1rUhbrVuh3U/f4EygbPoO8=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org