Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/05876BB69FB976D3881038CA42BDD73570BF8FAC.cer
File:                     05876BB69FB976D3881038CA42BDD73570BF8FAC.cer (raw, json)
Hash identifier:          LE9wXe0EzSnLQ5dQMXqSoxJvaPUtfkrVq63kNmh3Mmw=
Subject key identifier:   05:87:6B:B6:9F:B9:76:D3:88:10:38:CA:42:BD:D7:35:70:BF:8F:AC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       541A2B53CCD4E7C6C976CC6AD91898A8B368F580
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/05876BB69FB976D3881038CA42BDD73570BF8FAC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Nov 2023 03:22:45 +0000
Certificate not after:    Wed 06 Nov 2024 03:27:45 +0000
Subordinate resources:    AS: 262797
                          IP: 131.72.92.0/22
                          IP: 179.97.64.0/21
                          IP: 186.237.0.0/20
                          IP: 2804:23c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1a:2b:53:cc:d4:e7:c6:c9:76:cc:6a:d9:18:98:a8:b3:68:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  8 03:22:45 2023 GMT
            Not After : Nov  6 03:27:45 2024 GMT
        Subject: CN=05876BB69FB976D3881038CA42BDD73570BF8FAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:17:ca:98:97:44:59:c6:85:2c:9c:65:99:33:
                    56:60:2e:13:b5:a4:cc:87:43:9f:c0:dd:e1:e3:2b:
                    b4:6e:fc:36:ad:de:74:82:c3:e0:3c:91:ca:aa:6b:
                    2b:b4:76:ec:ed:49:e4:df:3e:9e:8d:72:76:a3:c0:
                    56:4f:99:f7:0a:44:f1:2e:75:ed:67:a1:25:bb:c8:
                    3b:9d:b4:d3:9a:0d:e3:66:7f:c4:47:c2:fc:62:cb:
                    09:ae:16:d2:04:c2:e1:9e:7c:ce:2d:d0:5c:45:80:
                    e3:b1:14:8b:9d:6d:a6:6f:d9:a4:0c:a7:3b:65:32:
                    04:12:c0:de:ee:4e:c1:41:d7:48:c1:8a:b3:11:05:
                    48:39:d6:97:d5:56:6f:9a:46:00:dc:ae:93:8a:bf:
                    1d:65:f9:dc:ab:91:df:a8:b0:19:f5:69:8c:cd:bc:
                    44:d3:4f:e4:b2:f3:99:51:50:e9:77:83:9d:28:69:
                    31:83:63:29:fd:d1:06:88:d3:df:82:fa:04:4a:0f:
                    57:33:85:18:68:00:9d:68:e0:e9:74:c1:84:16:c2:
                    43:84:f2:1d:c5:5d:9d:8d:7e:d0:63:dc:27:43:25:
                    ac:fb:27:09:d4:d1:cb:98:42:9f:0e:53:e5:21:b0:
                    57:b9:a3:98:5e:80:51:fc:71:9d:f4:49:cf:af:6d:
                    52:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:87:6B:B6:9F:B9:76:D3:88:10:38:CA:42:BD:D7:35:70:BF:8F:AC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/05876BB69FB976D3881038CA42BDD73570BF8FAC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.92.0/22
                  179.97.64.0/21
                  186.237.0.0/20
                IPv6:
                  2804:23c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262797

    Signature Algorithm: sha256WithRSAEncryption
         38:77:1a:c6:2f:6c:c7:09:8b:5a:52:bb:71:21:ba:a2:14:87:
         6e:7c:8f:ab:90:88:7c:35:9c:05:ff:e1:3f:01:57:d4:c3:47:
         4f:9b:6a:3b:72:79:55:a2:6a:b3:d8:b3:38:f2:7f:24:ed:73:
         92:8e:4b:54:c5:72:e8:50:d2:07:ec:c1:3b:60:58:de:4c:06:
         bd:b4:82:64:39:1f:8e:30:a8:fd:7d:c6:b6:aa:12:06:d9:b2:
         b2:36:26:6b:66:24:4f:00:ac:fc:00:dd:9e:16:21:b3:c4:20:
         23:19:7b:15:e5:c7:9c:d4:6f:7e:aa:97:66:45:3a:7d:e9:09:
         68:12:c5:e1:24:80:04:0d:ad:54:80:de:a0:62:27:5b:f6:87:
         52:5d:13:5f:0f:66:1d:68:57:81:8a:f0:09:96:66:c9:27:1b:
         1a:94:b4:15:4c:2d:14:a1:da:3c:b3:1a:80:12:a3:aa:4e:7f:
         d7:37:fc:03:c6:2c:36:3d:00:1c:e0:f4:ce:27:ab:8e:19:1b:
         35:70:c7:9e:9a:35:77:09:2e:3e:b7:19:11:63:33:47:c0:93:
         b4:f9:57:25:03:69:1f:48:fd:ab:7e:bc:aa:28:f3:20:40:48:
         5c:42:40:ff:2f:3f:ef:83:a1:27:b4:0b:13:90:b7:cb:a7:37:
         a8:a5:76:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org