Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5FE7C6C165846A9B24245DA8A36A5EAE763326EC.cer
File:                     5FE7C6C165846A9B24245DA8A36A5EAE763326EC.cer (raw, json)
Hash identifier:          1hPP9BlYDQQtE1PEEJ69bxjH07JR8wcckZDGCNCkSn0=
Subject key identifier:   5F:E7:C6:C1:65:84:6A:9B:24:24:5D:A8:A3:6A:5E:AE:76:33:26:EC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0BCE76F42AA0C6DA12DA8A5D392EB7ECDCAA8C58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/5FE7C6C165846A9B24245DA8A36A5EAE763326EC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Jun 2022 18:14:07 +0000
Certificate not after:    Thu 08 Jun 2023 18:19:07 +0000
Subordinate resources:    AS: 262582
                          IP: 138.99.32.0/22
                          IP: 177.84.96.0/21
                          IP: 177.93.88.0/21
                          IP: 2804:664::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ce:76:f4:2a:a0:c6:da:12:da:8a:5d:39:2e:b7:ec:dc:aa:8c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  9 18:14:07 2022 GMT
            Not After : Jun  8 18:19:07 2023 GMT
        Subject: CN=5FE7C6C165846A9B24245DA8A36A5EAE763326EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e6:07:05:16:d5:5d:a3:1d:2e:0d:62:89:01:
                    52:c3:34:3c:d1:b1:f0:36:22:64:c1:92:45:79:78:
                    c7:48:94:cf:6f:e8:d0:91:92:6e:e8:64:4a:62:63:
                    20:0e:6b:16:fb:f4:93:ce:fa:e6:c5:f8:e9:83:d0:
                    a5:5c:0b:fe:e4:b9:cc:48:59:48:4f:86:fe:31:d1:
                    d4:ca:d8:06:52:75:f9:42:7c:a3:c7:02:f9:40:ec:
                    4b:aa:f1:f8:b1:ce:4a:16:f2:bb:fe:4d:f2:a7:b1:
                    00:1d:0b:29:89:54:f3:c8:7d:6e:cd:93:1c:23:36:
                    19:b1:34:bf:68:12:a2:38:72:17:5d:ab:21:9e:d9:
                    3b:45:bd:14:87:d6:d4:61:fd:d7:cd:10:43:43:92:
                    3c:dc:cf:fb:39:d4:d8:e6:49:dd:0f:2b:03:bf:e1:
                    39:76:3e:74:7e:56:af:91:58:41:c0:80:06:77:0e:
                    a2:b5:98:fe:9e:9e:ae:bb:b7:0d:4c:8d:83:ba:5c:
                    f8:42:b6:cf:de:4e:c6:ab:b3:55:50:75:86:29:c8:
                    5b:9f:49:6a:86:a3:22:03:7e:f6:20:40:13:39:8e:
                    c0:d9:3c:04:ea:19:bf:38:5c:0c:6c:27:99:2c:5d:
                    8c:2e:ee:8c:98:54:55:91:a9:3e:01:3a:94:2c:6a:
                    3b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:E7:C6:C1:65:84:6A:9B:24:24:5D:A8:A3:6A:5E:AE:76:33:26:EC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/5FE7C6C165846A9B24245DA8A36A5EAE763326EC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.32.0/22
                  177.84.96.0/21
                  177.93.88.0/21
                IPv6:
                  2804:664::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262582

    Signature Algorithm: sha256WithRSAEncryption
         a3:2b:88:25:03:65:56:ae:3b:61:77:4d:81:d4:14:a7:24:d6:
         4e:df:95:07:e3:f8:b5:4e:8b:09:a4:24:0c:f3:68:d9:c5:06:
         da:ed:ea:21:f3:cd:3c:e1:e2:5b:76:cf:71:50:cf:30:0b:c1:
         46:00:cc:4f:cb:7f:e3:09:3a:98:06:e7:58:4d:bb:b6:c4:22:
         ec:fb:ba:0b:6b:dd:95:0a:4a:60:2a:04:b8:95:8c:67:37:70:
         91:b9:f2:f0:31:8d:c8:e8:34:44:85:0d:c9:62:ef:02:6f:1f:
         b1:10:2c:9b:fe:2a:90:96:13:5a:a8:12:b9:0f:fd:0b:ba:ee:
         28:23:07:8e:9f:28:f4:81:46:3d:f6:0f:34:10:27:b9:b3:35:
         49:ba:67:79:6c:04:f0:b5:52:57:60:7e:66:da:99:24:2c:9c:
         a2:4d:85:63:77:2a:8f:1f:d4:c8:b9:fa:73:ef:c5:d1:a3:43:
         dd:7a:32:0d:f4:e6:a5:0f:49:b9:8a:f7:96:26:23:32:d9:51:
         51:0d:60:91:7f:df:e4:e1:1f:28:be:7c:3e:b6:47:11:a8:1c:
         0b:e6:8d:15:5c:6c:5f:22:52:17:f0:0d:89:ab:bc:14:cc:4d:
         2a:c2:22:f5:cc:32:b9:b1:8d:f0:10:93:c5:55:bc:47:e7:4a:
         c9:92:19:4d
-----BEGIN CERTIFICATE-----
MIIGHDCCBQSgAwIBAgIUC8529CqgxtoS2opdOS637NyqjFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA2MDkxODE0MDdaFw0yMzA2MDgxODE5MDdaMDMxMTAvBgNV
BAMTKDVGRTdDNkMxNjU4NDZBOUIyNDI0NURBOEEzNkE1RUFFNzYzMzI2RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA5gcFFtVdox0uDWKJAVLDNDzR
sfA2ImTBkkV5eMdIlM9v6NCRkm7oZEpiYyAOaxb79JPO+ubF+OmD0KVcC/7kucxI
WUhPhv4x0dTK2AZSdflCfKPHAvlA7Euq8fixzkoW8rv+TfKnsQAdCymJVPPIfW7N
kxwjNhmxNL9oEqI4chddqyGe2TtFvRSH1tRh/dfNEENDkjzcz/s51NjmSd0PKwO/
4Tl2PnR+Vq+RWEHAgAZ3DqK1mP6enq67tw1MjYO6XPhCts/eTsars1VQdYYpyFuf
SWqGoyIDfvYgQBM5jsDZPATqGb84XAxsJ5ksXYwu7oyYVFWRqT4BOpQsajsrAgMB
AAGjggMmMIIDIjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRf58bBZYRqmyQk
Xaijal6udjMm7DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FWlBMS3ZjcEh6UDhDeTJqRFJKTVFVSGlMVVBOdHp2WGZR
bUtOQ0djRUx2RS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FWlBMS3ZjcEh6UDhDeTJqRFJKTVFVSGlMVVBOdHp2WGZR
bUtOQ0djRUx2RS8wLzVGRTdDNkMxNjU4NDZBOUIyNDI0NURBOEEzNkE1RUFFNzYz
MzI2RUMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAopjIAMEA7FUYAMEA7Fd
WDANBAIAAjAHAwUAKAQGZDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAbYwDQYJ
KoZIhvcNAQELBQADggEBAKMriCUDZVauO2F3TYHUFKck1k7flQfj+LVOiwmkJAzz
aNnFBtrt6iHzzTzh4lt2z3FQzzALwUYAzE/Lf+MJOpgG51hNu7bEIuz7ugtr3ZUK
SmAqBLiVjGc3cJG58vAxjcjoNESFDcli7wJvH7EQLJv+KpCWE1qoErkP/Qu67igj
B46fKPSBRj32DzQQJ7mzNUm6Z3lsBPC1UldgfmbamSQsnKJNhWN3Ko8f1Mi5+nPv
xdGjQ916Mg305qUPSbmK95YmIzLZUVENYJF/3+ThHyi+fD62RxGoHAvmjRVcbF8i
UhfwDYmrvBTMTSrCIvXMMrmxjfAQk8VVvEfnSsmSGU0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org