Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A56E8A92F7DB96FA288D623B1F7EDE10694759CE.cer
File:                     A56E8A92F7DB96FA288D623B1F7EDE10694759CE.cer (raw, json)
Hash identifier:          ZUSsORJI/Q7MhMtplLpY+CRs9PsSyiy8lGYerSxWgMc=
Subject key identifier:   A5:6E:8A:92:F7:DB:96:FA:28:8D:62:3B:1F:7E:DE:10:69:47:59:CE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       02DBEC75888EFAA3875CC858530E996B861A6401
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/A56E8A92F7DB96FA288D623B1F7EDE10694759CE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 21 Oct 2023 11:32:18 +0000
Certificate not after:    Sat 19 Oct 2024 11:37:18 +0000
Subordinate resources:    AS: 267214
                          IP: 45.230.160.0/22
                          IP: 2804:4a08::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:db:ec:75:88:8e:fa:a3:87:5c:c8:58:53:0e:99:6b:86:1a:64:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 21 11:32:18 2023 GMT
            Not After : Oct 19 11:37:18 2024 GMT
        Subject: CN=A56E8A92F7DB96FA288D623B1F7EDE10694759CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:cd:b4:af:2a:cb:16:20:2c:44:9e:2b:14:
                    c0:3c:97:1b:ba:4a:a1:b7:dc:be:af:1d:46:6d:d7:
                    ae:70:c1:85:35:db:6d:e3:4d:39:e0:98:c9:d4:1a:
                    44:49:09:b3:b5:e4:4d:b3:6b:57:22:9b:29:10:c8:
                    70:c7:bc:0c:f0:f3:d8:86:bf:bb:d3:04:ae:7b:31:
                    50:d7:25:70:06:9c:42:0b:2d:00:a3:49:29:23:49:
                    fd:34:e6:dd:f7:4e:7f:23:07:e7:1c:fa:fb:85:af:
                    82:e3:7c:ae:2e:77:15:04:1d:26:ff:6a:67:2b:ba:
                    9a:e6:6c:4b:5c:ca:d7:dd:0d:ae:a1:78:db:78:b7:
                    f9:67:c0:54:75:50:64:4c:81:b3:70:a7:9a:4e:f6:
                    c2:06:e5:32:52:a6:df:00:0c:a0:55:3b:24:44:45:
                    6a:ce:a4:05:cb:93:d3:be:d7:65:5d:fa:f7:89:94:
                    74:51:62:6a:d2:94:2d:8c:8d:fe:55:b1:3b:36:ae:
                    d8:a1:cc:4e:c3:b8:41:a8:bb:e1:16:05:bf:22:7b:
                    ae:3a:af:fd:e9:13:1d:60:7d:53:5b:c8:e8:2f:d3:
                    2b:49:86:7c:56:19:fa:bc:32:8d:bc:46:ef:ba:61:
                    40:a6:ae:c5:f7:cd:6d:98:b7:23:7c:4d:f9:3e:b9:
                    9f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:6E:8A:92:F7:DB:96:FA:28:8D:62:3B:1F:7E:DE:10:69:47:59:CE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/A56E8A92F7DB96FA288D623B1F7EDE10694759CE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.160.0/22
                IPv6:
                  2804:4a08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267214

    Signature Algorithm: sha256WithRSAEncryption
         57:4e:69:c8:e8:ea:a1:af:2d:c2:db:1c:da:81:f6:db:a1:77:
         4f:44:30:72:e5:53:da:b5:1d:9e:f9:fd:00:1e:10:c4:03:93:
         dc:a2:db:86:d0:d5:42:31:0f:ec:42:b7:f7:24:26:58:8c:5a:
         3b:3e:a9:66:6f:9b:0f:6a:e5:b7:a1:11:5d:c0:be:0b:47:ac:
         5d:8b:66:a3:b1:5e:3e:6a:61:e4:e2:0c:ee:69:1f:53:2d:72:
         29:ea:b2:1a:14:60:3d:71:8e:ff:00:84:f5:9c:87:4c:08:ff:
         ea:a3:aa:b7:3c:22:20:2c:8c:35:85:51:d8:57:62:cb:c9:2a:
         0b:01:0c:d1:ce:e3:cf:38:16:6b:d1:97:55:e7:0f:84:2a:b9:
         92:cf:a0:2b:82:3a:7c:fa:c6:35:95:4e:23:7a:a0:bc:42:56:
         fd:23:7e:72:a8:ce:1c:03:8c:d4:d5:25:83:e6:db:99:3f:06:
         27:34:df:c2:ce:e8:02:94:ab:4d:35:ec:da:6a:64:31:5a:47:
         56:85:ac:fd:e5:ec:0c:20:68:88:ed:ad:c3:28:ca:c3:a7:09:
         f9:eb:27:c3:e9:7d:2b:c0:4d:15:8e:07:40:22:f8:72:78:c3:
         07:37:f4:e5:6a:9f:14:84:5c:a7:82:10:4b:d1:13:7b:ce:dd:
         05:5b:a7:e2
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUAtvsdYiO+qOHXMhYUw6Za4YaZAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMjExMTMyMThaFw0yNDEwMTkxMTM3MThaMDMxMTAvBgNV
BAMTKEE1NkU4QTkyRjdEQjk2RkEyODhENjIzQjFGN0VERTEwNjk0NzU5Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGus20ryrLFiAsRJ4rFMA8lxu6
SqG33L6vHUZt165wwYU1223jTTngmMnUGkRJCbO15E2za1cimykQyHDHvAzw89iG
v7vTBK57MVDXJXAGnEILLQCjSSkjSf005t33Tn8jB+cc+vuFr4LjfK4udxUEHSb/
amcruprmbEtcytfdDa6heNt4t/lnwFR1UGRMgbNwp5pO9sIG5TJSpt8ADKBVOyRE
RWrOpAXLk9O+12Vd+veJlHRRYmrSlC2Mjf5VsTs2rtihzE7DuEGou+EWBb8ie646
r/3pEx1gfVNbyOgv0ytJhnxWGfq8Mo28Ru+6YUCmrsX3zW2YtyN8Tfk+uZ93AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSlboqS99uW+iiN
Yjsfft4QaUdZzjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81VTlkRWlNRno2SFk5TGthVnQ0VDZGMWc5SkJLMkhIdk5t
SjZaUDh3dGUxNS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNVU5ZEVpTUZ6NkhZOUxrYVZ0NFQ2RjFnOUpCSzJISHZO
bUo2WlA4d3RlMTUvMC9BNTZFOEE5MkY3REI5NkZBMjg4RDYyM0IxRjdFREUxMDY5
NDc1OUNFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt5qAwDQQCAAIwBwMF
ACgESggwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBPOMA0GCSqGSIb3DQEBCwUA
A4IBAQBXTmnI6Oqhry3C2xzagfbboXdPRDBy5VPatR2e+f0AHhDEA5PcotuG0NVC
MQ/sQrf3JCZYjFo7Pqlmb5sPauW3oRFdwL4LR6xdi2ajsV4+amHk4gzuaR9TLXIp
6rIaFGA9cY7/AIT1nIdMCP/qo6q3PCIgLIw1hVHYV2LLySoLAQzRzuPPOBZr0ZdV
5w+EKrmSz6Argjp8+sY1lU4jeqC8Qlb9I35yqM4cA4zU1SWD5tuZPwYnNN/CzugC
lKtNNezaamQxWkdWhaz95ewMIGiI7a3DKMrDpwn56yfD6X0rwE0VjgdAIvhyeMMH
N/Tlap8UhFynghBL0RN7zt0FW6fi
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org