Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B56D6521DB20BD772608B2AE7C8674DEA8A5598F.cer
File:                     B56D6521DB20BD772608B2AE7C8674DEA8A5598F.cer (raw, json)
Hash identifier:          uebCeIllgr/Am+oXt7BzFwrm96uez59HtwE75Lu7vrA=
Subject key identifier:   B5:6D:65:21:DB:20:BD:77:26:08:B2:AE:7C:86:74:DE:A8:A5:59:8F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5A8F7D4939DC714AE1CA4945EF0AE3977AF6392B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/0/B56D6521DB20BD772608B2AE7C8674DEA8A5598F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 24 Feb 2024 02:18:50 +0000
Certificate not after:    Sat 22 Feb 2025 02:23:50 +0000
Subordinate resources:    AS: 264182
                          IP: 138.97.104.0/22
                          IP: 2804:23c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8f:7d:49:39:dc:71:4a:e1:ca:49:45:ef:0a:e3:97:7a:f6:39:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 24 02:18:50 2024 GMT
            Not After : Feb 22 02:23:50 2025 GMT
        Subject: CN=B56D6521DB20BD772608B2AE7C8674DEA8A5598F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fe:5b:59:09:30:dd:eb:b0:f1:06:2a:42:b8:
                    73:58:7a:24:41:93:3b:eb:b3:96:41:5d:bf:b1:e5:
                    e9:72:2b:30:b0:ea:98:01:7f:30:96:89:a7:7b:bf:
                    e6:ff:cd:9d:dc:58:95:24:24:9d:98:90:59:8b:fe:
                    53:8d:9e:eb:72:0c:65:55:ab:2b:69:a9:fa:72:44:
                    b2:c0:0d:b2:24:21:a5:ba:4a:61:ac:23:07:95:6e:
                    d6:e8:31:b9:b2:a0:6d:48:e8:02:6e:1a:dc:3c:80:
                    24:dd:9f:45:dc:2e:bb:c2:50:17:a1:f3:36:02:ab:
                    cd:81:d9:3e:94:59:a7:dc:22:5d:cb:5e:7e:68:6a:
                    5b:86:77:60:04:c1:dc:20:a9:2e:77:bd:0f:60:59:
                    31:f6:fe:e9:3e:15:4d:c7:c6:6c:be:af:00:71:cb:
                    5c:fc:9e:89:5c:d8:22:93:db:d8:e8:1e:73:a2:60:
                    e4:ff:a2:36:6b:65:10:25:04:e0:13:ba:f3:31:d7:
                    07:20:74:22:c7:bf:2f:ed:d1:9d:82:c9:6b:b2:6e:
                    57:f8:4c:e2:4e:23:d3:b0:fe:59:b4:1b:2e:45:04:
                    27:ae:c2:6d:15:80:c4:8a:08:6d:1f:af:92:43:16:
                    79:ff:9c:e8:42:a4:a6:fc:71:e3:e3:af:5c:fe:41:
                    a8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:6D:65:21:DB:20:BD:77:26:08:B2:AE:7C:86:74:DE:A8:A5:59:8F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/0/B56D6521DB20BD772608B2AE7C8674DEA8A5598F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.104.0/22
                IPv6:
                  2804:23c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264182

    Signature Algorithm: sha256WithRSAEncryption
         4d:f6:c0:1c:10:bc:17:3b:9f:07:4b:53:27:d1:ff:43:67:a9:
         73:cf:be:63:87:d1:aa:d8:cf:9e:bd:aa:7c:a8:15:ec:bd:ca:
         0b:d9:f0:1c:9e:f5:b9:2a:54:aa:6d:f5:b5:be:45:37:76:e5:
         74:09:68:13:5a:bf:0a:2d:7c:ac:a2:9b:22:d1:19:c8:fd:e5:
         f7:59:ff:39:2c:06:4b:3f:e9:5f:4b:bb:17:d8:af:e0:d9:97:
         c5:53:22:19:40:b8:8d:57:3b:ef:78:92:b2:e1:b3:d9:62:c3:
         a6:27:b3:48:07:46:fb:10:ca:0e:21:23:b7:8d:2a:a2:91:f4:
         4f:a0:32:f1:3d:d1:62:73:70:00:9e:40:24:ee:36:dd:0b:2f:
         e2:7f:c6:b2:e8:a2:12:71:be:fd:aa:38:77:a9:c1:e8:57:30:
         5e:be:c6:e5:f9:54:18:57:a7:ff:7b:2e:8c:3a:87:23:ca:74:
         c6:f9:21:29:3f:28:c3:97:b4:8d:1e:ca:39:31:5a:aa:fd:36:
         0e:9a:f8:04:df:12:65:d5:c0:dd:1d:a9:24:b7:99:95:d6:93:
         f3:91:a4:21:44:82:d5:5c:08:86:47:20:2e:3b:0a:3e:d5:ae:
         6d:85:35:9f:de:4c:19:69:4d:3f:d4:9e:52:ac:22:37:63:3d:
         76:3e:9b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org