Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5127EDC1200F5C835E17931F880AF6765AB24521.cer
File:                     5127EDC1200F5C835E17931F880AF6765AB24521.cer (raw, json)
Hash identifier:          53NIJQnPxGZM3SOZzRHk+gZCE8a5k7ZySpuZKuJ8eow=
Subject key identifier:   51:27:ED:C1:20:0F:5C:83:5E:17:93:1F:88:0A:F6:76:5A:B2:45:21
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       47C53A3F3654007E2FF3909E5553AAD0C19BBEC1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5127EDC1200F5C835E17931F880AF6765AB24521.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 19:20:07 +0000
Certificate not after:    Thu 20 Feb 2025 19:25:07 +0000
Subordinate resources:    AS: 265254
                          IP: 168.0.164.0/22
                          IP: 2804:2cf8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c5:3a:3f:36:54:00:7e:2f:f3:90:9e:55:53:aa:d0:c1:9b:be:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 19:20:07 2024 GMT
            Not After : Feb 20 19:25:07 2025 GMT
        Subject: CN=5127EDC1200F5C835E17931F880AF6765AB24521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c1:c8:7f:6d:67:d2:37:68:54:ff:5d:37:ba:
                    51:c6:7c:32:77:c0:3b:b6:fe:4d:df:c8:21:41:fb:
                    5b:4a:97:50:a8:55:5d:0a:e9:52:67:5f:18:de:e9:
                    b9:5d:ad:63:3c:cc:60:0f:a0:2a:b8:d9:ea:eb:ed:
                    54:9f:34:52:cc:31:fc:86:ad:52:e2:3c:41:b3:e9:
                    0b:6c:17:e0:32:92:ba:20:0a:e8:66:d2:8a:6c:1f:
                    5c:cf:f1:dc:de:b1:aa:e1:32:c8:71:59:09:ee:9a:
                    a4:c0:75:3b:b1:20:de:18:4b:86:12:91:74:54:6a:
                    64:ed:49:e0:68:09:34:a5:d1:18:e0:4f:47:da:86:
                    b1:66:55:72:c9:7c:fd:b3:a1:59:60:fd:22:0a:ee:
                    10:4c:05:5d:74:93:26:41:2a:cd:65:8e:19:8c:6b:
                    24:7a:c4:8f:66:b2:83:fb:c9:56:e2:5a:5f:2d:35:
                    2b:d7:36:cf:e0:19:03:70:82:43:20:92:bd:30:dc:
                    54:5a:42:00:29:77:31:d2:9e:a8:f1:3a:2a:cc:ea:
                    cd:bf:bb:4b:2b:46:af:d3:c6:d4:c6:e3:56:f4:d3:
                    32:cd:51:ee:05:7e:eb:e4:9a:3b:43:23:d0:56:6d:
                    79:e1:3f:5f:8a:08:53:b1:d1:70:7d:f0:b1:ea:9f:
                    0c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:27:ED:C1:20:0F:5C:83:5E:17:93:1F:88:0A:F6:76:5A:B2:45:21
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/5127EDC1200F5C835E17931F880AF6765AB24521.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.164.0/22
                IPv6:
                  2804:2cf8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265254

    Signature Algorithm: sha256WithRSAEncryption
         6a:a6:c7:8d:11:66:46:34:99:6e:1b:a8:3a:e7:0c:fc:6b:67:
         83:12:6c:5a:31:e3:12:1d:68:28:13:3f:6e:6e:92:8d:58:a0:
         a4:c6:70:70:7f:8b:7f:f7:e9:ef:c1:66:22:dc:13:56:09:16:
         d2:76:80:46:73:44:8b:f1:53:88:b5:52:d7:f0:ff:1d:d1:f9:
         b5:06:66:6c:9b:3e:45:7a:0d:47:f1:34:73:04:13:5a:39:49:
         8d:43:eb:bc:10:7d:41:5d:c2:a4:85:49:05:c6:e5:5e:64:4a:
         2b:69:1e:63:35:1c:64:43:74:ea:bc:aa:23:13:eb:5c:e0:cf:
         6c:5e:f7:56:86:4c:27:39:da:33:a2:ce:f4:01:3e:78:7e:3c:
         b8:26:da:84:01:e9:2e:db:0b:dd:e2:29:6b:6e:47:26:2c:02:
         e1:35:c2:d8:be:bd:f7:03:fe:6a:ca:e9:ac:13:c1:db:17:35:
         49:f1:37:95:dc:40:fa:62:1a:6c:3c:48:fb:db:60:a8:fa:08:
         f2:d5:6d:4b:b9:ec:79:e7:77:97:ea:6b:05:99:0d:a3:6d:2e:
         07:7a:66:f0:4a:8a:19:ec:05:62:a5:88:eb:6a:56:4d:70:51:
         a9:3f:57:ef:83:e1:e3:7e:9f:a8:dd:65:79:89:09:c8:a2:13:
         3c:e7:4f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org