Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B59DC30CA97960CC8971DA40E40EAB971BC54FBA.cer
File:                     B59DC30CA97960CC8971DA40E40EAB971BC54FBA.cer (raw, json)
Hash identifier:          DEAV8feyf6AWg70weXYPHTHLn383R+NqXeNLIa2QdPA=
Subject key identifier:   B5:9D:C3:0C:A9:79:60:CC:89:71:DA:40:E4:0E:AB:97:1B:C5:4F:BA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       43B5BE49207605174423D666D91AA788341C37F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/B59DC30CA97960CC8971DA40E40EAB971BC54FBA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Dec 2023 21:12:42 +0000
Certificate not after:    Mon 09 Dec 2024 21:17:42 +0000
Subordinate resources:    AS: 264254
                          IP: 138.117.216.0/22
                          IP: 2804:2508::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b5:be:49:20:76:05:17:44:23:d6:66:d9:1a:a7:88:34:1c:37:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 11 21:12:42 2023 GMT
            Not After : Dec  9 21:17:42 2024 GMT
        Subject: CN=B59DC30CA97960CC8971DA40E40EAB971BC54FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1e:2e:80:85:a4:33:b4:b4:b6:c0:44:95:47:
                    af:62:75:a4:57:a9:1b:c0:3c:07:ca:d2:a8:05:85:
                    3a:ff:2c:a8:92:7a:5c:39:2a:09:97:24:41:e5:d0:
                    c0:b1:7e:1f:b3:63:d2:8e:1a:ac:6b:66:65:8b:7e:
                    f8:91:26:81:44:87:8c:e1:2d:f1:f4:39:3c:6f:fa:
                    47:7e:36:70:5a:17:82:29:5f:da:56:12:b3:55:20:
                    11:fa:4a:9b:4d:2a:64:85:ee:a2:1d:47:aa:26:87:
                    f7:e8:f9:4e:03:f2:1c:26:5c:e6:a3:92:7d:f0:e8:
                    b0:81:a0:a1:44:a3:0d:09:e9:30:23:27:a2:5f:0f:
                    fd:f5:9e:15:c7:08:79:56:8a:cd:88:32:17:6d:f4:
                    e7:09:a4:2c:32:ce:bb:21:ac:e8:cb:6c:b1:eb:54:
                    0f:08:5f:b6:31:a1:d6:67:33:89:66:0e:97:85:86:
                    0c:f0:6a:d7:5c:a1:b4:8f:14:31:05:c0:6b:6c:aa:
                    28:e8:d6:9a:8e:75:dc:5b:4c:0d:df:74:14:5d:aa:
                    1d:0f:3e:f3:35:56:62:6f:a6:8a:b3:56:a3:2a:d0:
                    46:fe:f5:83:d5:bb:b7:d4:92:37:d2:46:30:bd:b7:
                    8d:b1:3d:68:9c:37:28:fb:bb:ac:e7:f4:26:a0:24:
                    ac:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:9D:C3:0C:A9:79:60:CC:89:71:DA:40:E4:0E:AB:97:1B:C5:4F:BA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Enqy7rwdU1Qn36Gt6xaFrsh8M64YsT3z19ARpf1u8coY/0/B59DC30CA97960CC8971DA40E40EAB971BC54FBA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.216.0/22
                IPv6:
                  2804:2508::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264254

    Signature Algorithm: sha256WithRSAEncryption
         63:e6:67:db:c5:c0:78:ce:5c:74:da:01:3c:da:5b:d5:8f:67:
         51:4f:ec:4a:bf:e4:29:cb:ed:8d:f4:88:56:40:6b:37:d7:53:
         09:77:c9:88:c7:4e:5c:e5:1a:70:c9:5c:fd:ea:f2:8f:15:b9:
         aa:44:e7:ca:ee:3a:d2:67:8e:14:61:70:af:61:db:98:32:23:
         1a:11:e0:5c:54:9f:3c:9c:f0:42:65:c2:0f:ca:8f:a9:4a:10:
         df:44:b1:f9:8c:2c:25:5f:be:ff:42:c8:c0:09:c6:c2:8d:a9:
         f9:fd:1a:55:0a:41:4c:0a:1a:8a:35:da:87:31:62:3a:56:fe:
         1c:76:6f:88:06:b7:4e:55:b0:02:28:be:58:5f:16:40:ae:14:
         75:ab:f4:97:b4:f5:b0:c9:00:bb:33:e1:8d:b3:f0:16:59:fc:
         e9:0e:07:80:6b:83:1c:9b:26:19:8c:f2:41:b7:4d:88:89:c7:
         f3:1d:05:8b:ca:15:24:82:e1:4d:37:fd:76:3d:95:1f:59:fc:
         01:1c:b0:9f:d5:45:08:75:9f:32:d4:1f:d5:6d:11:37:5f:8d:
         df:3d:cf:a6:d3:e5:d9:19:01:43:31:04:dd:5c:46:56:10:58:
         8d:5d:18:63:8a:aa:31:3c:a9:cf:55:19:ba:d7:71:81:31:38:
         94:5a:9f:c3
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUQ7W+SSB2BRdEI9Zm2RqniDQcN/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMTEyMTEyNDJaFw0yNDEyMDkyMTE3NDJaMDMxMTAvBgNV
BAMTKEI1OURDMzBDQTk3OTYwQ0M4OTcxREE0MEU0MEVBQjk3MUJDNTRGQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Hi6AhaQztLS2wESVR69idaRX
qRvAPAfK0qgFhTr/LKiSelw5KgmXJEHl0MCxfh+zY9KOGqxrZmWLfviRJoFEh4zh
LfH0OTxv+kd+NnBaF4IpX9pWErNVIBH6SptNKmSF7qIdR6omh/fo+U4D8hwmXOaj
kn3w6LCBoKFEow0J6TAjJ6JfD/31nhXHCHlWis2IMhdt9OcJpCwyzrshrOjLbLHr
VA8IX7YxodZnM4lmDpeFhgzwatdcobSPFDEFwGtsqijo1pqOddxbTA3fdBRdqh0P
PvM1VmJvpoqzVqMq0Eb+9YPVu7fUkjfSRjC9t42xPWicNyj7u6zn9CagJKzhAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS1ncMMqXlgzIlx
2kDkDquXG8VPujAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FbnF5N3J3ZFUxUW4zNkd0NnhhRnJzaDhNNjRZc1QzejE5
QVJwZjF1OGNvWS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRW5xeTdyd2RVMVFuMzZHdDZ4YUZyc2g4TTY0WXNUM3ox
OUFScGYxdThjb1kvMC9CNTlEQzMwQ0E5Nzk2MENDODk3MURBNDBFNDBFQUI5NzFC
QzU0RkJBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKKddgwDQQCAAIwBwMF
ACgEJQgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAg+MA0GCSqGSIb3DQEBCwUA
A4IBAQBj5mfbxcB4zlx02gE82lvVj2dRT+xKv+Qpy+2N9IhWQGs311MJd8mIx05c
5RpwyVz96vKPFbmqROfK7jrSZ44UYXCvYduYMiMaEeBcVJ88nPBCZcIPyo+pShDf
RLH5jCwlX77/QsjACcbCjan5/RpVCkFMChqKNdqHMWI6Vv4cdm+IBrdOVbACKL5Y
XxZArhR1q/SXtPWwyQC7M+GNs/AWWfzpDgeAa4McmyYZjPJBt02IicfzHQWLyhUk
guFNN/12PZUfWfwBHLCf1UUIdZ8y1B/VbRE3X43fPc+m0+XZGQFDMQTdXEZWEFiN
XRhjiqoxPKnPVRm613GBMTiUWp/D
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org