Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D552E799518BE11EB398BA00E9BDD3127A582632.cer
File:                     D552E799518BE11EB398BA00E9BDD3127A582632.cer (raw, json)
Hash identifier:          I/bPWB3YIE7jc+Z/lUKYlhNe82ovs3AOYUBFMcI+HR8=
Subject key identifier:   D5:52:E7:99:51:8B:E1:1E:B3:98:BA:00:E9:BD:D3:12:7A:58:26:32
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0CB74D8133099FAC4D2086A4C307AF82F18C49F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/D552E799518BE11EB398BA00E9BDD3127A582632.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Feb 2024 17:16:19 +0000
Certificate not after:    Wed 19 Feb 2025 17:21:19 +0000
Subordinate resources:    AS: 265161
                          IP: 143.255.212.0/22
                          IP: 2804:2b94::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b7:4d:81:33:09:9f:ac:4d:20:86:a4:c3:07:af:82:f1:8c:49:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 21 17:16:19 2024 GMT
            Not After : Feb 19 17:21:19 2025 GMT
        Subject: CN=D552E799518BE11EB398BA00E9BDD3127A582632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:af:02:53:ef:6a:08:5d:81:e2:6d:ae:ed:a7:
                    53:a2:98:68:d3:90:6f:5b:40:88:3e:8b:6f:c2:9b:
                    ee:d4:12:ad:85:1f:06:18:81:ad:66:61:e5:7a:99:
                    a4:10:32:a1:56:3c:99:27:f2:45:b1:ec:bb:9c:b2:
                    0c:56:e0:a3:42:e4:3a:c9:5b:f6:38:9b:d9:29:34:
                    9d:8d:0c:00:7a:28:fe:65:e8:c2:26:01:19:c9:e0:
                    ec:95:1f:68:66:78:fc:2e:33:ea:d0:e3:68:25:97:
                    15:71:8f:f6:4a:a0:26:6a:aa:9f:eb:c3:35:6d:54:
                    df:16:16:6b:cb:94:40:46:9f:28:6c:68:3a:ca:6a:
                    32:68:99:0d:dc:54:d6:f7:11:fb:11:af:88:b7:86:
                    74:c5:ca:03:e6:9f:ff:a2:bb:2a:4a:15:c5:15:f6:
                    e5:1e:d1:8e:9e:77:06:74:a7:cd:82:1a:6a:ce:16:
                    08:ba:cf:ee:84:6a:02:79:57:f6:14:7f:0f:ae:1f:
                    fa:fe:ff:38:99:29:81:2f:5c:8d:db:ba:d2:a0:59:
                    7d:c0:26:a7:d6:e2:b0:8f:ac:5a:dd:a9:79:bd:08:
                    1d:6c:17:59:b3:66:66:cd:c4:3c:4d:94:14:39:de:
                    da:18:44:b1:53:60:d2:a6:42:17:80:10:f5:1a:58:
                    28:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:52:E7:99:51:8B:E1:1E:B3:98:BA:00:E9:BD:D3:12:7A:58:26:32
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/D552E799518BE11EB398BA00E9BDD3127A582632.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.212.0/22
                IPv6:
                  2804:2b94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265161

    Signature Algorithm: sha256WithRSAEncryption
         1b:9b:c5:ef:a7:ab:67:f6:90:53:a7:82:d5:38:08:ac:11:49:
         d0:f1:96:63:0d:10:ce:07:05:c5:57:ee:8f:9d:74:23:13:11:
         8b:49:ce:1b:3a:6c:d1:a8:1b:1e:61:1a:28:9b:69:be:8b:4a:
         a6:fd:ad:1b:f9:56:19:ae:26:59:f1:8d:8e:88:10:f7:6a:46:
         8d:7e:77:94:08:c7:77:e9:ed:9d:2b:5a:1a:5e:f4:2f:85:d9:
         75:3a:bd:83:e5:6d:5c:30:9b:e2:1b:10:c1:0b:7d:2b:5c:70:
         44:3d:3d:9d:bb:ee:42:75:5c:7d:ad:fa:01:98:4d:76:72:28:
         c3:19:67:b7:c9:29:93:04:ff:f4:23:01:61:90:ce:65:f6:1a:
         64:86:ba:f8:11:ba:f4:6b:34:02:bd:94:ab:79:34:87:40:da:
         10:69:12:58:51:55:89:e6:37:04:b2:c5:f9:15:71:7c:ba:17:
         11:cc:ee:4a:36:f7:e6:28:51:17:ed:80:3f:d3:bb:a5:c8:e9:
         00:2a:c7:06:42:0a:58:9a:34:af:91:1e:ff:06:0b:f2:58:91:
         00:ae:9b:ef:d8:44:4e:47:42:6e:d8:f1:1f:09:83:89:0f:14:
         f2:48:8b:7d:ef:37:2a:27:2a:48:d5:d3:11:02:33:39:5f:99:
         31:7a:fc:96
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUDLdNgTMJn6xNIIakwwevgvGMSfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjExNzE2MTlaFw0yNTAyMTkxNzIxMTlaMDMxMTAvBgNV
BAMTKEQ1NTJFNzk5NTE4QkUxMUVCMzk4QkEwMEU5QkREMzEyN0E1ODI2MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZrwJT72oIXYHiba7tp1OimGjT
kG9bQIg+i2/Cm+7UEq2FHwYYga1mYeV6maQQMqFWPJkn8kWx7LucsgxW4KNC5DrJ
W/Y4m9kpNJ2NDAB6KP5l6MImARnJ4OyVH2hmePwuM+rQ42gllxVxj/ZKoCZqqp/r
wzVtVN8WFmvLlEBGnyhsaDrKajJomQ3cVNb3EfsRr4i3hnTFygPmn/+iuypKFcUV
9uUe0Y6edwZ0p82CGmrOFgi6z+6EagJ5V/YUfw+uH/r+/ziZKYEvXI3butKgWX3A
JqfW4rCPrFrdqXm9CB1sF1mzZmbNxDxNlBQ53toYRLFTYNKmQheAEPUaWCiNAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTVUueZUYvhHrOY
ugDpvdMSelgmMjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IeThhcXc4cmJ3OE5WdE16NFhBY1dadjN5b0FtdjZxYjFC
b1l2Qkt2R2JoSC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSHk4YXF3OHJidzhOVnRNejRYQWNXWnYzeW9BbXY2cWIx
Qm9ZdkJLdkdiaEgvMC9ENTUyRTc5OTUxOEJFMTFFQjM5OEJBMDBFOUJERDMxMjdB
NTgyNjMyLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKP/9QwDQQCAAIwBwMF
ACgEK5QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAvJMA0GCSqGSIb3DQEBCwUA
A4IBAQAbm8Xvp6tn9pBTp4LVOAisEUnQ8ZZjDRDOBwXFV+6PnXQjExGLSc4bOmzR
qBseYRoom2m+i0qm/a0b+VYZriZZ8Y2OiBD3akaNfneUCMd36e2dK1oaXvQvhdl1
Or2D5W1cMJviGxDBC30rXHBEPT2du+5CdVx9rfoBmE12cijDGWe3ySmTBP/0IwFh
kM5l9hpkhrr4Ebr0azQCvZSreTSHQNoQaRJYUVWJ5jcEssX5FXF8uhcRzO5KNvfm
KFEX7YA/07ulyOkAKscGQgpYmjSvkR7/BgvyWJEArpvv2EROR0Ju2PEfCYOJDxTy
SIt97zcqJypI1dMRAjM5X5kxevyW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org