Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/01A5BB618102F09B211A954EB238D3A5A0FA221B.cer
File:                     01A5BB618102F09B211A954EB238D3A5A0FA221B.cer (raw, json)
Hash identifier:          SaCWAm5B2Q7BNeaIEILCXJwSX0Ws9KQLauQLimq1Bto=
Subject key identifier:   01:A5:BB:61:81:02:F0:9B:21:1A:95:4E:B2:38:D3:A5:A0:FA:22:1B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       28C4B00FAB73C5AD285FC0DA6AAF83EE611F3946
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/01A5BB618102F09B211A954EB238D3A5A0FA221B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 May 2023 14:11:55 +0000
Certificate not after:    Wed 29 May 2024 14:16:55 +0000
Subordinate resources:    AS: 267517
                          IP: 201.182.120.0/22
                          IP: 2804:42a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c4:b0:0f:ab:73:c5:ad:28:5f:c0:da:6a:af:83:ee:61:1f:39:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 31 14:11:55 2023 GMT
            Not After : May 29 14:16:55 2024 GMT
        Subject: CN=01A5BB618102F09B211A954EB238D3A5A0FA221B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:58:75:13:ef:b8:ba:49:1f:a0:14:16:b2:50:
                    1d:51:c5:05:9b:3b:51:4c:dc:23:07:df:e9:58:93:
                    e0:9c:c7:e1:4d:a8:03:60:02:0b:91:25:6a:9d:b0:
                    0d:68:bc:11:a3:6e:5a:13:84:53:bd:cb:e5:65:5d:
                    d5:79:a9:5d:00:9d:84:1d:ef:07:f5:3d:5c:1c:e2:
                    71:65:d9:84:dc:0a:a3:dc:35:0e:ab:fd:9c:11:74:
                    82:af:fa:26:21:16:97:a4:ed:df:08:7d:1e:6c:e8:
                    c9:1e:b3:aa:ac:f9:94:82:33:32:c9:c7:78:f6:41:
                    8f:d2:99:fb:82:10:90:0d:c3:5b:f5:9e:8b:9b:2c:
                    32:5e:79:ee:70:a8:85:4a:38:b9:34:c1:6f:9f:89:
                    a2:6c:36:20:f3:f9:a3:f0:e0:cf:6c:2b:28:30:d3:
                    77:80:64:bd:3f:d7:69:41:c8:61:0e:d4:ef:d8:8d:
                    42:8a:a7:21:4a:82:d2:6f:e6:23:ea:e9:31:37:ea:
                    8f:20:4d:ce:8b:1c:63:b7:2c:79:75:59:1a:ed:db:
                    e3:ff:9a:ce:22:7f:89:54:f5:e5:48:a8:f5:9e:94:
                    56:38:4a:3f:20:9c:8f:09:ff:6a:b8:9d:e6:86:b7:
                    75:0d:df:b9:ed:bb:62:64:bd:6a:d8:e4:05:df:b6:
                    ae:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:A5:BB:61:81:02:F0:9B:21:1A:95:4E:B2:38:D3:A5:A0:FA:22:1B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/01A5BB618102F09B211A954EB238D3A5A0FA221B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.120.0/22
                IPv6:
                  2804:42a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267517

    Signature Algorithm: sha256WithRSAEncryption
         0d:4f:86:07:a6:a4:ef:aa:00:d9:45:a1:b1:ae:b5:72:d1:5f:
         c0:7e:72:33:85:68:e1:a1:de:57:55:60:d4:91:b2:c7:aa:d4:
         5f:8c:af:43:c3:c1:a7:76:5d:29:1a:06:4c:48:73:f6:38:93:
         fa:bb:f8:dd:b0:c7:c4:3e:ae:c6:5f:68:75:88:71:fa:ae:6c:
         00:9c:c4:b3:9f:39:eb:8b:e5:c0:93:4e:fe:b9:3b:9a:f6:76:
         1c:0f:91:f3:57:e9:a8:ad:f5:06:95:3c:99:91:a0:e6:d1:33:
         4b:10:86:50:78:cc:f3:ad:75:47:e4:13:4f:e9:2a:8c:15:f6:
         29:04:6e:c3:27:90:43:29:4e:fa:b7:4e:04:cb:64:dd:e6:78:
         38:d6:fb:99:14:a5:8f:c1:d9:52:be:8b:bf:d8:71:a9:63:2f:
         54:2d:f1:07:73:3e:15:6e:a2:23:50:58:c1:ed:c8:5e:9b:f0:
         71:65:3c:90:de:2d:c6:94:c2:5d:ed:77:3e:64:9f:47:28:4d:
         5e:6a:62:fc:f1:05:81:f4:7d:ce:5f:4c:dc:7a:41:c4:35:c8:
         b7:0e:28:ea:fe:ce:29:4a:83:aa:22:ec:ae:62:02:60:28:51:
         f7:28:c2:6f:50:5b:24:3b:1d:f8:61:c1:24:82:6c:58:6d:46:
         a1:77:ee:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org