Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5FBBD7D3060CEAC338166ADFE9D0CD74C1B0CC09.cer
File:                     5FBBD7D3060CEAC338166ADFE9D0CD74C1B0CC09.cer (raw, json)
Hash identifier:          Jer6uHs04Q+kKutY/oAlxR+nbXyQ5WLZuKKYTvf5ky8=
Subject key identifier:   5F:BB:D7:D3:06:0C:EA:C3:38:16:6A:DF:E9:D0:CD:74:C1:B0:CC:09
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       693BA4A3558550F5611A672C1195CCBB9BF55647
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/5FBBD7D3060CEAC338166ADFE9D0CD74C1B0CC09.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Sep 2023 12:29:32 +0000
Certificate not after:    Tue 03 Sep 2024 12:34:32 +0000
Subordinate resources:    AS: 262530
                          IP: 45.174.164.0/22
                          IP: 170.231.196.0/22
                          IP: 177.67.72.0/21
                          IP: 200.33.88.0/21
                          IP: 2804:9f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:3b:a4:a3:55:85:50:f5:61:1a:67:2c:11:95:cc:bb:9b:f5:56:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  5 12:29:32 2023 GMT
            Not After : Sep  3 12:34:32 2024 GMT
        Subject: CN=5FBBD7D3060CEAC338166ADFE9D0CD74C1B0CC09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:58:cf:db:4e:28:a5:4c:12:6e:41:0f:5e:1e:
                    6f:c0:62:60:02:95:a6:42:67:a9:9f:24:6e:1d:83:
                    91:0c:9d:81:65:1d:2d:aa:e1:54:5b:14:f2:b2:2d:
                    e2:6d:85:1d:52:4e:31:fb:63:79:23:da:01:13:74:
                    c2:a3:72:93:41:6e:27:e1:69:b7:92:cc:2b:ef:e5:
                    66:94:73:56:f2:21:9a:b2:87:1a:7e:3e:68:7a:a2:
                    bf:e8:02:4f:18:8d:d8:45:3e:8e:a2:02:ed:2c:30:
                    7e:33:95:ad:4f:34:64:6b:9e:5b:95:c0:24:41:fa:
                    d8:2b:eb:1c:58:b1:15:51:30:04:01:e7:67:0e:1b:
                    ba:6d:e1:62:d0:c2:fd:21:7c:b1:bd:10:c9:8d:e0:
                    9e:6b:08:ed:c3:1b:a8:26:83:bf:a7:ac:59:b3:38:
                    c0:10:07:86:53:1d:b3:d4:cb:9a:88:f1:47:02:9a:
                    6d:bd:bf:da:6c:11:58:1c:55:fa:07:dd:a3:2e:40:
                    65:15:f9:0e:96:80:6b:f5:d9:68:d4:86:e5:a8:9b:
                    47:a6:52:a8:5c:80:2e:3f:49:b7:15:5b:6e:2e:39:
                    06:6a:83:54:80:09:f2:3d:fd:d0:e8:26:6e:e7:6f:
                    0a:e5:19:b2:15:12:e4:6d:12:fd:f0:51:a9:31:d4:
                    c8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:BB:D7:D3:06:0C:EA:C3:38:16:6A:DF:E9:D0:CD:74:C1:B0:CC:09
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/1/5FBBD7D3060CEAC338166ADFE9D0CD74C1B0CC09.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.164.0/22
                  170.231.196.0/22
                  177.67.72.0/21
                  200.33.88.0/21
                IPv6:
                  2804:9f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262530

    Signature Algorithm: sha256WithRSAEncryption
         30:19:7b:68:70:96:1e:ae:37:c0:54:3f:4a:4c:0f:86:42:2e:
         5a:4c:0f:60:52:6a:ab:cc:0f:77:45:11:8a:80:58:58:4b:ff:
         bb:39:32:e3:e8:c4:c5:dc:19:9a:35:26:90:79:ae:16:1e:8f:
         a3:8a:f9:ef:47:38:13:4b:e4:c6:0e:48:03:6f:94:01:a1:ee:
         55:46:8b:a3:4a:bc:9f:43:32:ef:93:4e:86:ca:b5:19:7e:53:
         9b:c5:03:07:3a:ed:49:34:6a:9a:22:81:ed:6f:9b:f1:4e:d4:
         9e:c2:e2:5d:9c:b0:fd:ba:bf:08:41:e3:d3:3e:9b:09:6c:93:
         a5:39:e3:54:07:9f:8b:f3:97:6e:87:3e:52:ea:f3:4e:16:73:
         fc:3e:e6:2c:5f:24:5e:aa:f9:7c:86:2d:4f:f0:d8:50:f4:b3:
         ce:c5:fc:4b:ec:c8:6a:14:ac:f0:d4:52:1a:47:d2:b5:fb:4f:
         01:3a:2a:66:dd:4c:96:0b:02:2d:70:ba:73:4d:bb:c6:d4:42:
         22:05:80:50:54:83:c9:e7:70:f9:43:2c:2e:06:b0:9a:99:c6:
         40:43:a4:24:4d:c6:a3:37:4e:8a:6a:d9:ea:e3:88:28:ba:00:
         98:52:0c:db:9e:94:21:fe:d7:df:b0:d2:5a:9f:49:e7:ce:9b:
         2e:66:2c:3a
-----BEGIN CERTIFICATE-----
MIIGIzCCBQugAwIBAgIUaTuko1WFUPVhGmcsEZXMu5v1VkcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MDUxMjI5MzJaFw0yNDA5MDMxMjM0MzJaMDMxMTAvBgNV
BAMTKDVGQkJEN0QzMDYwQ0VBQzMzODE2NkFERkU5RDBDRDc0QzFCMENDMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwWM/bTiilTBJuQQ9eHm/AYmAC
laZCZ6mfJG4dg5EMnYFlHS2q4VRbFPKyLeJthR1STjH7Y3kj2gETdMKjcpNBbifh
abeSzCvv5WaUc1byIZqyhxp+Pmh6or/oAk8YjdhFPo6iAu0sMH4zla1PNGRrnluV
wCRB+tgr6xxYsRVRMAQB52cOG7pt4WLQwv0hfLG9EMmN4J5rCO3DG6gmg7+nrFmz
OMAQB4ZTHbPUy5qI8UcCmm29v9psEVgcVfoH3aMuQGUV+Q6WgGv12WjUhuWom0em
UqhcgC4/SbcVW24uOQZqg1SACfI9/dDoJm7nbwrlGbIVEuRtEv3wUakx1MhLAgMB
AAGjggMtMIIDKTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRfu9fTBgzqwzgW
at/p0M10wbDMCTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BenZHWWU4dFVTZzVnR2VXblJnZUN4MUR0SnRiaXU4UW9B
OUZuOEZSc3RGZy8xLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQXp2R1llOHRVU2c1Z0dlV25SZ2VDeDFEdEp0Yml1OFFv
QTlGbjhGUnN0RmcvMS81RkJCRDdEMzA2MENFQUMzMzgxNjZBREZFOUQwQ0Q3NEMx
QjBDQzA5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAItrqQDBAKq58QDBAOx
Q0gDBAPIIVgwDQQCAAIwBwMFACgECfQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
BAGCMA0GCSqGSIb3DQEBCwUAA4IBAQAwGXtocJYerjfAVD9KTA+GQi5aTA9gUmqr
zA93RRGKgFhYS/+7OTLj6MTF3BmaNSaQea4WHo+jivnvRzgTS+TGDkgDb5QBoe5V
RoujSryfQzLvk06GyrUZflObxQMHOu1JNGqaIoHtb5vxTtSewuJdnLD9ur8IQePT
PpsJbJOlOeNUB5+L85duhz5S6vNOFnP8PuYsXyReqvl8hi1P8NhQ9LPOxfxL7Mhq
FKzw1FIaR9K1+08BOipm3UyWCwItcLpzTbvG1EIiBYBQVIPJ53D5QywuBrCamcZA
Q6QkTcajN06Katnq44gougCYUgzbnpQh/tffsNJan0nnzpsuZiw6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org