Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5004E61A4C37B6E4B16A7FF42AC504376068BC6A.cer
File:                     5004E61A4C37B6E4B16A7FF42AC504376068BC6A.cer (raw, json)
Hash identifier:          uKxKjYboNY4cPv3pgDhK+nbkvNU0lRnXL9nR+IwTZKI=
Subject key identifier:   50:04:E6:1A:4C:37:B6:E4:B1:6A:7F:F4:2A:C5:04:37:60:68:BC:6A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       643B0144AD5BAA9CB6DC506022FF83FB0C38A025
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/5004E61A4C37B6E4B16A7FF42AC504376068BC6A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 16:52:03 +0000
Certificate not after:    Mon 10 Mar 2025 16:57:03 +0000
Subordinate resources:    AS: 268485
                          IP: 45.162.8.0/22
                          IP: 2804:51ec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3b:01:44:ad:5b:aa:9c:b6:dc:50:60:22:ff:83:fb:0c:38:a0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 16:52:03 2024 GMT
            Not After : Mar 10 16:57:03 2025 GMT
        Subject: CN=5004E61A4C37B6E4B16A7FF42AC504376068BC6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f9:af:31:1b:a5:03:b1:87:90:f8:5f:b2:f4:
                    d7:09:f9:9c:45:54:b4:9d:96:0f:f8:24:61:de:d2:
                    14:dc:fe:1a:c7:f4:d8:4a:e3:95:0c:89:f4:9c:e4:
                    ba:88:58:bf:d4:e9:69:49:b3:c6:70:ca:75:cb:41:
                    04:a0:cc:9d:b6:8e:eb:e4:6d:bb:fe:e9:bb:bb:0e:
                    14:90:e3:30:e8:1f:c5:30:8d:76:39:28:12:83:96:
                    3c:ae:17:77:f8:81:bc:cd:99:c3:b9:9f:13:3f:5b:
                    26:53:b6:82:dc:74:e0:15:59:5d:51:62:5d:7e:90:
                    25:33:99:e5:ca:4e:f3:2d:ab:3b:a2:22:26:64:62:
                    3b:e1:89:85:65:aa:24:66:2e:e5:7b:8a:ea:4b:6e:
                    12:0b:e9:4e:7d:2f:40:80:74:02:1c:e7:05:0b:93:
                    6e:01:5c:8f:b6:0e:99:8d:13:f9:f2:e5:fc:15:84:
                    1d:b6:8f:7b:e1:07:a7:27:0b:bd:0b:9a:5f:a6:c8:
                    dc:ea:a8:0d:11:d3:da:a8:b7:26:92:0c:92:5c:a6:
                    3d:83:b2:8e:3d:f3:b2:6b:08:47:c9:f5:e1:a9:03:
                    12:76:59:5e:55:88:72:50:31:38:61:95:12:09:e0:
                    4d:d4:9a:15:8d:9b:1e:ef:fe:7c:e5:a3:ce:00:86:
                    95:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:04:E6:1A:4C:37:B6:E4:B1:6A:7F:F4:2A:C5:04:37:60:68:BC:6A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/0/5004E61A4C37B6E4B16A7FF42AC504376068BC6A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.8.0/22
                IPv6:
                  2804:51ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268485

    Signature Algorithm: sha256WithRSAEncryption
         41:01:bd:80:71:e9:e6:86:ad:a4:4f:5f:33:4d:9c:36:b1:d7:
         13:2f:f4:9d:c7:5c:e5:e6:37:28:f4:25:bd:ff:43:2e:3d:89:
         5c:db:a3:38:4b:9b:cf:54:83:54:81:24:af:c8:a6:19:80:5a:
         55:8f:45:a5:da:a3:b9:e3:ad:0f:8b:77:3b:2d:ee:16:6b:bf:
         4d:18:c3:34:ef:d9:42:1e:ee:61:fa:e1:35:b0:ca:4c:c9:f7:
         fa:a1:e2:62:35:77:52:4f:62:33:e3:64:28:63:a3:81:5d:65:
         d9:bf:a0:03:4b:c0:72:c9:f5:23:b4:fe:83:0e:09:7d:c5:9d:
         b0:30:9c:43:21:ef:35:d1:1e:08:96:85:6f:67:43:11:73:2a:
         ab:e6:de:53:ef:aa:1f:46:d4:d5:8c:39:db:2b:9e:a2:5e:e7:
         a0:3f:17:dc:1a:43:40:be:64:51:96:89:71:d8:b8:7e:ce:d2:
         32:09:b5:b5:a7:4d:fe:0b:8f:c8:8f:ed:45:bd:0d:7e:1b:a7:
         6a:fc:e4:1b:3d:56:58:a2:32:a8:3c:c4:fb:ca:d2:2c:28:7a:
         22:ff:0a:c7:5e:3c:ba:bb:9a:85:34:61:19:d5:89:bb:07:d0:
         33:76:ce:03:74:5c:53:1d:4e:cc:e3:32:68:c6:02:35:31:9a:
         93:a1:c7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org