Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D505649E656B07EBAC9B91CEC1AE1781059CDC12.cer
File:                     D505649E656B07EBAC9B91CEC1AE1781059CDC12.cer (raw, json)
Hash identifier:          IVYoztx0gS4hGtpd3ljq/OXtGq4fkK2/HjIRKKmXwrs=
Subject key identifier:   D5:05:64:9E:65:6B:07:EB:AC:9B:91:CE:C1:AE:17:81:05:9C:DC:12
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       75BB59B7F93503A5312FF179AB7D9C6EC160F9C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DRg9s79MvHASKDCs1aQpkQRQg1vGDsdYqYmXEfpSkJyg/1/D505649E656B07EBAC9B91CEC1AE1781059CDC12.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DRg9s79MvHASKDCs1aQpkQRQg1vGDsdYqYmXEfpSkJyg/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 20:14:45 +0000
Certificate not after:    Tue 21 May 2024 20:19:45 +0000
Subordinate resources:    AS: 264504
                          IP: 131.255.252.0/22
                          IP: 2804:20a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:bb:59:b7:f9:35:03:a5:31:2f:f1:79:ab:7d:9c:6e:c1:60:f9:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 20:14:45 2023 GMT
            Not After : May 21 20:19:45 2024 GMT
        Subject: CN=D505649E656B07EBAC9B91CEC1AE1781059CDC12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:a1:a1:48:9b:28:5d:c4:01:d9:59:9b:16:04:
                    7f:4d:81:3a:08:50:63:20:e5:48:76:2e:ae:b5:69:
                    31:bf:10:d8:f8:55:df:93:1e:3a:32:ba:4e:cf:bf:
                    c6:7b:1a:d4:ef:1d:72:2f:d5:c1:29:0c:dc:ce:67:
                    1f:9a:f4:be:94:82:b1:37:e3:10:31:cf:e4:5b:4c:
                    b2:fa:78:14:82:b8:d3:bc:1a:d9:c0:23:c7:66:b0:
                    46:d2:30:b3:4d:b0:93:f5:d0:ab:e0:16:b4:2c:a3:
                    06:1d:89:05:d9:4e:d7:87:56:30:49:71:ce:31:56:
                    40:25:f8:2b:86:f6:a3:81:28:12:65:10:78:c5:15:
                    c6:8b:ec:50:7d:b3:2b:ea:e4:f5:6b:da:37:62:55:
                    6c:9a:55:1f:bb:14:5f:63:87:35:d3:21:1a:39:c7:
                    2c:a2:ef:f6:69:98:ba:87:5f:0f:21:f7:9d:c0:6c:
                    b7:ed:28:5e:14:b7:e9:d6:c7:00:e3:28:88:ea:69:
                    f6:17:24:ee:51:f5:36:75:bf:10:cf:49:ee:41:80:
                    77:f8:4e:4e:65:05:df:1b:f8:ac:63:a0:c4:6c:22:
                    0e:03:e1:76:53:93:66:97:ea:f4:f4:aa:fe:22:a7:
                    7b:3c:06:2b:7d:2a:3b:8d:8c:25:7e:40:8f:9c:f4:
                    88:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:05:64:9E:65:6B:07:EB:AC:9B:91:CE:C1:AE:17:81:05:9C:DC:12
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DRg9s79MvHASKDCs1aQpkQRQg1vGDsdYqYmXEfpSkJyg/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DRg9s79MvHASKDCs1aQpkQRQg1vGDsdYqYmXEfpSkJyg/1/D505649E656B07EBAC9B91CEC1AE1781059CDC12.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.252.0/22
                IPv6:
                  2804:20a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264504

    Signature Algorithm: sha256WithRSAEncryption
         7f:06:ab:9d:cf:e6:af:df:7e:7c:a5:5f:2d:ad:64:ed:94:44:
         96:a5:9b:b3:2c:a0:ae:a7:c5:6c:7e:5d:d4:3f:ad:7c:a6:cf:
         e9:69:47:d4:92:06:6b:61:71:b9:77:e2:e9:e5:55:c8:d3:0f:
         c0:e3:aa:ad:6d:9d:84:07:52:cf:22:34:c6:76:60:63:4e:48:
         35:b6:83:4b:8f:b0:bf:c0:90:15:7c:35:52:a8:d5:38:37:da:
         79:a3:f8:68:86:d8:b3:4d:f0:ce:49:8a:8f:81:e7:42:75:bd:
         d6:67:3e:60:77:90:69:5b:65:26:fb:70:4c:f3:76:0a:d9:58:
         80:96:d2:e3:e2:b3:6c:a1:3a:8c:6a:cf:d5:d5:28:dc:14:cc:
         94:03:d1:7a:ad:e8:8e:02:4d:59:7f:7f:d8:ac:74:6b:ef:f9:
         56:40:03:8a:e7:6c:61:4f:3b:70:97:73:f4:ae:29:eb:88:fa:
         26:c5:cd:a4:b8:0d:37:5d:1f:37:77:5c:e3:1b:10:92:83:5c:
         4b:05:af:54:f6:d8:36:f8:42:b3:bb:4f:47:0b:8d:cf:5d:35:
         31:2c:ca:0d:3d:a9:4f:5b:64:51:36:4c:42:63:b1:26:99:64:
         60:27:cf:fb:fb:b0:41:c1:73:49:ed:55:d6:9c:59:27:b3:2e:
         76:f3:3a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org