Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5075EA9FA288700040BED023F3D40B2EAFF02ADE.cer
File:                     5075EA9FA288700040BED023F3D40B2EAFF02ADE.cer (raw, json)
Hash identifier:          uCLgkNyhCjSg7iDG8+9zQ0O0QpmOaoZb4fsFPM0s6eM=
Subject key identifier:   50:75:EA:9F:A2:88:70:00:40:BE:D0:23:F3:D4:0B:2E:AF:F0:2A:DE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       35ABE97E987B8E19A2AC5A6ADC8699581E8239FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/5075EA9FA288700040BED023F3D40B2EAFF02ADE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Oct 2023 01:31:14 +0000
Certificate not after:    Thu 03 Oct 2024 01:36:14 +0000
Subordinate resources:    AS: 264367
                          IP: 131.108.32.0/22
                          IP: 138.185.216.0/22
                          IP: 168.196.136.0/22
                          IP: 2804:1d68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ab:e9:7e:98:7b:8e:19:a2:ac:5a:6a:dc:86:99:58:1e:82:39:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  5 01:31:14 2023 GMT
            Not After : Oct  3 01:36:14 2024 GMT
        Subject: CN=5075EA9FA288700040BED023F3D40B2EAFF02ADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:e4:34:30:dd:a8:c5:71:0e:da:8c:b0:00:
                    96:33:42:3c:54:77:77:e4:52:a3:b8:37:9e:f2:98:
                    a2:bb:59:55:dc:bb:92:68:5f:29:88:0c:92:e2:ce:
                    7f:99:ad:84:8d:be:2c:ec:e6:79:7a:72:82:58:7b:
                    35:4f:88:e1:97:4b:6e:03:fd:ce:ae:5f:a9:13:81:
                    1d:23:6e:9a:f4:54:a4:dc:c1:19:69:3e:11:e1:72:
                    aa:25:df:d4:0b:78:98:9f:0a:b2:62:0e:67:1b:56:
                    9f:59:d5:23:8c:1f:a1:bb:7c:36:a7:82:92:4a:29:
                    be:b2:a6:af:02:0f:04:80:cf:90:56:a2:5b:02:e7:
                    9d:a1:df:fa:05:01:2a:07:e4:7e:76:22:ba:d1:5e:
                    8c:0e:fe:a0:cb:59:af:00:77:c8:b0:ba:53:27:74:
                    0d:7f:a2:e8:32:12:01:ee:04:78:1d:41:ce:f1:ab:
                    20:23:85:2d:54:5d:fa:bf:35:20:4c:13:df:70:a3:
                    7d:d9:ce:ef:69:81:97:3d:5e:d9:0b:02:21:b1:98:
                    f3:42:aa:11:7b:d2:10:e3:7e:07:44:0e:92:14:c9:
                    e7:a3:d2:bd:b0:8b:9f:01:d1:23:08:27:a4:9f:56:
                    5a:c8:0a:be:56:af:40:35:1d:5c:0f:96:a4:4e:d6:
                    9c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:75:EA:9F:A2:88:70:00:40:BE:D0:23:F3:D4:0B:2E:AF:F0:2A:DE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/0/5075EA9FA288700040BED023F3D40B2EAFF02ADE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.32.0/22
                  138.185.216.0/22
                  168.196.136.0/22
                IPv6:
                  2804:1d68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264367

    Signature Algorithm: sha256WithRSAEncryption
         ad:88:20:4b:84:1e:ef:35:f1:c4:f8:d7:70:87:43:41:39:10:
         30:50:84:38:6b:0b:e4:66:14:19:fb:32:41:f4:2a:e9:e8:87:
         a6:cb:2e:41:01:03:58:36:39:eb:4a:6c:4b:77:6e:60:69:04:
         f3:97:04:6c:8e:73:b0:fc:93:57:0d:55:dc:1c:94:8b:19:75:
         31:75:cd:0d:c8:38:76:92:cb:85:4a:be:bc:f9:60:18:9f:33:
         bc:18:32:7b:0d:94:6f:77:51:39:fe:4b:59:08:e6:53:c8:96:
         98:62:97:b2:3a:17:e2:48:67:fa:3e:d5:92:67:7e:1c:7c:c2:
         96:ef:3e:2f:01:7b:7b:cb:31:85:c8:7d:2c:54:d4:7c:56:83:
         c2:d4:6a:ee:0d:8b:9a:ec:52:9a:a2:54:03:21:f5:43:b1:5a:
         b4:78:89:f3:67:8d:2e:06:01:30:89:ba:b7:ec:e6:d4:60:f4:
         97:27:0f:ca:e6:3f:18:19:c9:8f:ad:38:00:fc:98:64:16:03:
         26:83:4a:a8:3a:03:77:98:bb:6e:36:41:a8:36:69:f6:e0:5e:
         2e:f5:f3:10:12:4b:44:fa:1c:18:ea:54:80:26:e9:2d:b0:e9:
         02:f3:f1:dd:4b:a8:7c:c7:d1:c7:6c:ca:5a:27:76:53:7b:43:
         b3:f3:d2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org