Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5F2847FF19664413E34F373356471BF3808443E8.cer
File:                     5F2847FF19664413E34F373356471BF3808443E8.cer (raw, json)
Hash identifier:          8nD141hUdS4aGxytVR45z2G/qPlfKQcLSpp8felIHD4=
Subject key identifier:   5F:28:47:FF:19:66:44:13:E3:4F:37:33:56:47:1B:F3:80:84:43:E8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3DAB4E2A038FEA5ADA1DCAE1E7BF4C6E03778032
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/5F2847FF19664413E34F373356471BF3808443E8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 04 Feb 2022 17:04:09 +0000
Certificate not after:    Fri 03 Feb 2023 17:09:09 +0000
Subordinate resources:    AS: 265078
                          IP: 170.233.112.0/22
                          IP: 2804:3270::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ab:4e:2a:03:8f:ea:5a:da:1d:ca:e1:e7:bf:4c:6e:03:77:80:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  4 17:04:09 2022 GMT
            Not After : Feb  3 17:09:09 2023 GMT
        Subject: CN=5F2847FF19664413E34F373356471BF3808443E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b4:8a:fd:cf:a8:72:c5:27:df:38:34:9d:4c:
                    13:41:57:f6:fa:ac:8b:06:a0:e1:ab:61:fb:49:65:
                    bd:de:1f:21:1f:3e:e6:5a:05:39:6d:45:00:be:80:
                    0b:ec:17:e7:f5:cf:07:a5:ff:97:db:fe:bc:48:ca:
                    57:8f:83:1d:57:55:c7:85:9d:87:fd:54:53:56:6b:
                    56:e7:31:e8:c3:37:16:b7:64:5b:a7:04:19:40:70:
                    a6:78:64:e7:47:2b:47:02:2f:8d:95:48:56:5d:c6:
                    f5:04:53:bd:2e:00:09:8d:aa:55:62:9a:98:ca:cc:
                    fd:71:ae:a6:d9:ac:b4:07:9e:37:43:53:03:2e:e9:
                    00:72:b6:93:36:be:72:3f:ad:80:96:bc:f5:44:1d:
                    a3:83:a1:99:05:c4:38:4e:6d:fa:48:0d:7f:9d:ca:
                    1a:bd:88:32:0c:93:0b:35:40:7c:c7:9b:72:4c:09:
                    0f:b6:ab:25:40:94:4c:a3:0b:8a:a6:fe:00:fc:77:
                    e0:d9:67:cd:84:c2:3f:70:10:b0:b7:7d:f7:59:44:
                    fe:6f:a8:ff:16:f2:5f:2c:cf:02:6e:a5:a1:8f:e8:
                    f3:28:ff:35:f4:27:35:2e:37:01:f1:17:19:0d:5d:
                    c5:49:1e:f1:d3:e4:e6:31:9b:52:28:47:09:bb:c1:
                    b3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:28:47:FF:19:66:44:13:E3:4F:37:33:56:47:1B:F3:80:84:43:E8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/5F2847FF19664413E34F373356471BF3808443E8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.112.0/22
                IPv6:
                  2804:3270::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265078

    Signature Algorithm: sha256WithRSAEncryption
         77:2b:a0:b7:24:45:07:cb:cc:19:46:d6:44:b0:dc:ac:55:25:
         8c:4c:65:c2:1e:f2:d5:5f:51:de:1c:4a:c8:ba:82:a3:0c:97:
         b2:e4:f6:54:2a:dd:65:a2:85:59:af:e8:54:43:a1:d8:09:f7:
         18:13:48:79:1f:d6:f9:ff:96:0e:57:e6:d3:ca:80:1c:1d:3a:
         e2:9f:1a:f7:93:fd:c0:70:af:97:2e:0b:7c:99:df:b7:02:5d:
         51:d2:cb:b7:43:39:8b:58:6a:fd:15:58:b3:6f:71:9c:ba:fa:
         eb:c8:f6:7c:3e:6b:58:ad:ea:9d:75:08:71:e5:aa:ba:fe:02:
         ed:4f:0c:8c:96:61:1b:10:f7:d8:c9:e2:44:d8:74:32:3e:cd:
         69:dc:fa:86:00:76:45:f3:21:17:80:a8:22:20:9a:d3:43:af:
         c8:6d:de:21:f0:2c:ce:ed:a6:3b:ac:5b:90:45:7c:68:43:2f:
         1e:42:a3:c6:8b:5c:73:4e:39:62:df:f9:3c:e2:ef:b2:a6:aa:
         59:14:2a:a6:dd:68:12:14:fc:bc:de:ee:48:14:d6:e5:24:d0:
         79:cf:fb:3d:2c:e7:b7:95:7b:6d:57:d4:7c:6b:cf:0e:76:d3:
         73:5c:ca:d8:3b:66:4a:37:b9:00:4c:ce:e4:7a:05:02:00:4b:
         d0:a9:4b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org