Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5F47A84915FD013B7D512A34571AB39A5FC143F9.cer
File:                     5F47A84915FD013B7D512A34571AB39A5FC143F9.cer (raw, json)
Hash identifier:          5gxM4T5EDmqNqaLhJA89pX5WMF/3eUL03RPXMTQw8rk=
Subject key identifier:   5F:47:A8:49:15:FD:01:3B:7D:51:2A:34:57:1A:B3:9A:5F:C1:43:F9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       61AF3DCFC2A299E8201B76EC49A2D547D54582DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/5F47A84915FD013B7D512A34571AB39A5FC143F9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 14 Mar 2022 20:08:25 +0000
Certificate not after:    Mon 13 Mar 2023 20:13:25 +0000
Subordinate resources:    AS: 266651
                          IP: 128.201.40.0/22
                          IP: 2804:3f4c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:af:3d:cf:c2:a2:99:e8:20:1b:76:ec:49:a2:d5:47:d5:45:82:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 14 20:08:25 2022 GMT
            Not After : Mar 13 20:13:25 2023 GMT
        Subject: CN=5F47A84915FD013B7D512A34571AB39A5FC143F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9f:82:71:eb:b9:ed:00:5e:46:98:8d:66:16:
                    d9:b5:0a:ee:a4:a5:1c:9d:62:db:37:5a:16:36:25:
                    12:d5:45:f0:ad:cb:7c:c1:b8:a4:6e:36:0e:cd:cb:
                    8c:94:c8:e5:dc:29:23:87:5a:71:03:79:61:1c:cb:
                    c8:7c:30:81:49:b8:36:49:81:7f:5a:b5:83:df:4d:
                    c7:28:e5:d8:4a:cb:ad:82:ba:a0:15:99:2d:6e:94:
                    9a:f2:3b:7a:2f:12:6f:bd:d0:09:f7:cf:0e:ce:63:
                    7f:e7:70:ca:ba:05:e4:e7:c9:94:ce:fa:e2:7a:56:
                    31:f1:9c:a9:e1:60:f2:f5:3f:56:4a:86:49:a8:64:
                    70:58:e2:ee:c9:3a:ef:14:67:81:2b:49:84:92:36:
                    32:15:37:57:a4:9c:bc:0c:bd:c8:7f:a0:10:31:2a:
                    c8:bd:c6:49:a2:1f:73:9f:e0:88:01:8d:1b:c6:7d:
                    62:8d:90:6c:f1:aa:c4:b5:19:b4:f2:57:90:b7:d5:
                    11:71:40:ef:4c:bd:f8:22:62:86:8f:f6:41:65:49:
                    3d:3c:86:d3:68:7d:51:43:54:45:12:bc:3a:81:e9:
                    b5:4a:e9:4e:d3:9d:f4:8a:e3:41:29:62:d8:e3:4d:
                    a5:c1:ed:f2:5a:33:f3:38:98:76:c1:56:bd:8e:8f:
                    2f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:47:A8:49:15:FD:01:3B:7D:51:2A:34:57:1A:B3:9A:5F:C1:43:F9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/5F47A84915FD013B7D512A34571AB39A5FC143F9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.40.0/22
                IPv6:
                  2804:3f4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266651

    Signature Algorithm: sha256WithRSAEncryption
         b6:68:55:a0:4b:f0:8e:6b:d8:0c:42:af:32:c2:ba:97:04:76:
         0d:98:0b:9e:c5:23:a3:4f:39:d4:f8:6c:53:47:8c:90:a3:9f:
         30:5d:18:5a:70:80:cd:3c:6e:44:a5:39:b6:4f:c9:ad:05:fa:
         4a:94:b6:f2:4c:46:e1:a1:6c:e5:d3:f2:b0:1b:ec:b4:3e:d7:
         12:ee:f9:30:e4:d5:7c:11:9e:9c:07:79:c4:f2:8f:b9:d5:05:
         7f:31:31:18:37:52:31:7b:8f:e5:67:40:0f:6e:09:86:70:b7:
         47:ba:a1:d5:5e:ee:41:69:ea:18:85:ef:91:fb:8c:4e:95:81:
         28:9b:05:76:5c:1d:69:5a:74:bb:b9:67:85:b5:f2:ac:42:6d:
         49:f6:86:9c:87:aa:63:6c:a5:45:06:85:55:5b:59:af:22:c6:
         4d:b7:b9:e6:22:67:9a:fa:35:52:9d:10:8f:73:4c:59:47:60:
         cf:da:72:a1:48:22:9a:8c:b9:b4:0c:d0:68:cb:53:90:c6:8d:
         b3:33:9b:2c:47:ec:fd:ee:5f:a1:0a:21:41:a2:ce:42:8a:db:
         a2:95:ce:36:18:41:e8:bf:24:ae:d4:31:ce:33:13:3d:29:31:
         4f:18:aa:3c:18:bd:9c:d3:99:97:1f:7b:0d:e0:bc:bc:bb:76:
         7c:92:0c:44
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUYa89z8KimeggG3bsSaLVR9VFgt8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjAzMTQyMDA4MjVaFw0yMzAzMTMyMDEzMjVaMDMxMTAvBgNV
BAMTKDVGNDdBODQ5MTVGRDAxM0I3RDUxMkEzNDU3MUFCMzlBNUZDMTQzRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCin4Jx67ntAF5GmI1mFtm1Cu6k
pRydYts3WhY2JRLVRfCty3zBuKRuNg7Ny4yUyOXcKSOHWnEDeWEcy8h8MIFJuDZJ
gX9atYPfTcco5dhKy62CuqAVmS1ulJryO3ovEm+90An3zw7OY3/ncMq6BeTnyZTO
+uJ6VjHxnKnhYPL1P1ZKhkmoZHBY4u7JOu8UZ4ErSYSSNjIVN1eknLwMvch/oBAx
Ksi9xkmiH3Of4IgBjRvGfWKNkGzxqsS1GbTyV5C31RFxQO9MvfgiYoaP9kFlST08
htNofVFDVEUSvDqB6bVK6U7TnfSK40EpYtjjTaXB7fJaM/M4mHbBVr2Ojy+pAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRfR6hJFf0BO31R
KjRXGrOaX8FD+TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FcEE3RThWMXlwbUtqR3k1Z2JLOFlKTVBpd3gybXhtVDRN
N1BtTHhVaUhpUC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FcEE3RThWMXlwbUtqR3k1Z2JLOFlKTVBpd3gybXhtVDRN
N1BtTHhVaUhpUC8wLzVGNDdBODQ5MTVGRDAxM0I3RDUxMkEzNDU3MUFCMzlBNUZD
MTQzRjkubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoDJKDANBAIAAjAHAwUA
KAQ/TDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEZswDQYJKoZIhvcNAQELBQAD
ggEBALZoVaBL8I5r2AxCrzLCupcEdg2YC57FI6NPOdT4bFNHjJCjnzBdGFpwgM08
bkSlObZPya0F+kqUtvJMRuGhbOXT8rAb7LQ+1xLu+TDk1XwRnpwHecTyj7nVBX8x
MRg3UjF7j+VnQA9uCYZwt0e6odVe7kFp6hiF75H7jE6VgSibBXZcHWladLu5Z4W1
8qxCbUn2hpyHqmNspUUGhVVbWa8ixk23ueYiZ5r6NVKdEI9zTFlHYM/acqFIIpqM
ubQM0GjLU5DGjbMzmyxH7P3uX6EKIUGizkKK26KVzjYYQei/JK7UMc4zEz0pMU8Y
qjwYvZzTmZcfew3gvLy7dnySDEQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org