Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.cer
File:                     5116EB855CD239DCD4FE641CE53B61BA406A6AB8.cer (raw, json)
Hash identifier:          D8q1xla56Tlgg1efiXM/d+hR+cM++py2uRHr5Rp55PU=
Subject key identifier:   51:16:EB:85:5C:D2:39:DC:D4:FE:64:1C:E5:3B:61:BA:40:6A:6A:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       40525CD61D37A69AB143155A8F938623FF71B053
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 20:53:41 +0000
Certificate not after:    Thu 13 Feb 2025 20:58:41 +0000
Subordinate resources:    AS: 265140
                          IP: 143.255.0.0/22
                          IP: 2804:2b34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:52:5c:d6:1d:37:a6:9a:b1:43:15:5a:8f:93:86:23:ff:71:b0:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 20:53:41 2024 GMT
            Not After : Feb 13 20:58:41 2025 GMT
        Subject: CN=5116EB855CD239DCD4FE641CE53B61BA406A6AB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:05:73:fc:20:a0:bc:94:81:63:88:f5:85:
                    d5:57:36:eb:ba:f6:73:11:38:81:fb:a8:5c:64:da:
                    b2:42:d5:e5:ad:7e:a0:17:1e:27:46:f9:c0:42:77:
                    2e:27:20:2c:8b:e3:5f:1b:5f:b1:5e:14:2f:10:dc:
                    23:02:31:84:28:9a:bc:a1:2f:6f:2d:66:c7:92:b7:
                    9b:19:a4:76:30:04:57:45:4d:bd:12:17:73:98:08:
                    bd:96:49:a5:25:8d:3e:03:cc:1f:0d:14:da:07:ca:
                    e5:2b:ac:36:65:55:48:b0:03:11:f0:cd:75:b3:55:
                    ee:bc:8c:8d:c9:89:24:5d:6b:05:90:59:18:77:f5:
                    6d:3a:01:d1:b5:ff:0e:40:41:90:34:bf:e5:61:cb:
                    83:ce:6a:28:d0:aa:16:f2:74:9c:5c:db:3b:33:6a:
                    2c:f9:be:94:53:54:f9:ee:bb:02:20:8e:df:a8:83:
                    24:0d:25:91:40:0e:f4:99:1e:ce:6a:c0:bc:2b:ef:
                    01:61:9b:63:7f:b6:fa:fd:98:30:42:96:36:3d:fb:
                    5f:33:d4:a2:66:9f:95:53:66:5b:83:36:39:c5:59:
                    6a:ff:8a:77:41:b1:97:31:dd:31:6c:39:9d:83:3a:
                    39:55:c2:c6:2e:f0:28:1b:4f:ad:12:d0:84:0b:77:
                    59:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:16:EB:85:5C:D2:39:DC:D4:FE:64:1C:E5:3B:61:BA:40:6A:6A:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.0.0/22
                IPv6:
                  2804:2b34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265140

    Signature Algorithm: sha256WithRSAEncryption
         45:a6:7f:9d:ab:c8:13:8d:ad:1a:df:20:a5:8a:2d:84:f1:59:
         e6:52:6b:21:76:63:a3:cd:d4:1b:a6:6c:c3:c3:b5:5b:8f:b4:
         84:45:95:64:7e:bc:4c:45:40:d6:85:c7:9a:99:d9:5f:7c:6d:
         60:21:16:3b:8a:ec:59:c4:e6:d9:4d:8d:13:b3:17:f7:41:ab:
         14:ca:4c:00:56:24:b6:02:0a:49:08:31:33:dc:b0:2f:c3:44:
         9e:72:da:7f:67:77:d2:fc:5c:1d:b4:7b:4c:eb:90:8a:05:69:
         ce:f3:af:c0:d3:35:0f:40:4c:e1:ee:56:d7:db:af:70:3e:b3:
         f0:7c:ba:39:e6:77:a3:01:03:5f:4f:d8:f2:78:95:e3:f9:0b:
         a6:57:0a:00:eb:93:cc:29:a7:c0:8f:31:14:6d:c9:f0:67:6a:
         7e:45:aa:47:f9:8a:b7:85:11:4f:44:3d:58:8a:ba:3e:ad:25:
         55:86:97:c5:ac:5f:5a:6b:1d:c8:17:49:d4:8c:f9:ac:09:ad:
         d1:29:ce:5d:9f:9b:0b:0a:e2:71:69:5a:1b:ee:5d:fb:1d:17:
         18:fa:bf:fc:02:1f:97:2d:97:8e:3a:66:11:fc:66:4f:8b:b2:
         aa:46:e1:26:51:8a:52:3f:0c:8c:77:a7:e7:ed:66:04:0d:19:
         f0:d2:ea:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org