Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5167BF3D80B4F4D22270A25A2A9B8D9410DFE66B.cer
File:                     5167BF3D80B4F4D22270A25A2A9B8D9410DFE66B.cer (raw, json)
Hash identifier:          pX6atk3CZJRIZIPemqf62u4gpe2BhoH/KC7Mo31Z5a4=
Subject key identifier:   51:67:BF:3D:80:B4:F4:D2:22:70:A2:5A:2A:9B:8D:94:10:DF:E6:6B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7B9BEB404DDD64B79342BBFFA08F3BDEA9F3E19A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/5167BF3D80B4F4D22270A25A2A9B8D9410DFE66B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Jan 2024 23:58:10 +0000
Certificate not after:    Wed 01 Jan 2025 00:03:10 +0000
Subordinate resources:    AS: 61573
                          IP: 138.122.60.0/22
                          IP: 2804:25e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9b:eb:40:4d:dd:64:b7:93:42:bb:ff:a0:8f:3b:de:a9:f3:e1:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  2 23:58:10 2024 GMT
            Not After : Jan  1 00:03:10 2025 GMT
        Subject: CN=5167BF3D80B4F4D22270A25A2A9B8D9410DFE66B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:61:8d:5e:5e:cb:fd:7b:68:5c:7f:18:37:3a:
                    a0:94:f7:48:1e:53:9c:6d:72:d9:2d:59:ad:be:5d:
                    88:df:fd:98:ae:16:17:eb:cf:ce:d6:50:7c:20:26:
                    9e:13:3f:c2:97:6d:7d:0a:6b:f9:73:2b:8d:6f:ea:
                    c9:ad:f6:b0:52:54:5e:6c:e1:9f:17:2d:af:90:b9:
                    ea:35:0c:31:ff:b3:1a:71:39:43:5d:a7:f3:ca:2b:
                    2d:76:3f:91:50:16:b1:3e:a6:86:96:6d:c2:e1:ee:
                    6a:61:2b:bd:f6:69:06:7a:4f:d2:10:09:cf:56:7b:
                    d2:14:fa:de:88:af:38:6e:bd:77:f1:d7:90:41:0d:
                    85:b4:fa:b2:a2:82:49:b0:84:e6:5f:da:70:1b:52:
                    76:2d:9f:d1:c1:76:cc:12:aa:9e:e3:f8:30:fc:ff:
                    f3:35:55:e7:b5:3e:7b:9f:dd:c3:39:73:bb:b8:98:
                    a0:c3:aa:d1:ad:ea:5e:32:bc:b8:ce:b9:94:af:9b:
                    70:ec:a7:1a:55:38:70:df:1a:75:91:65:43:64:ef:
                    2e:2d:54:ab:ef:78:86:ab:14:07:31:f2:c0:98:5a:
                    05:3d:8d:10:dc:4a:e1:a4:68:a3:20:64:65:d4:c4:
                    44:e1:3a:48:0e:5b:c8:54:db:d3:46:a0:80:35:6c:
                    12:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:67:BF:3D:80:B4:F4:D2:22:70:A2:5A:2A:9B:8D:94:10:DF:E6:6B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/5167BF3D80B4F4D22270A25A2A9B8D9410DFE66B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.60.0/22
                IPv6:
                  2804:25e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61573

    Signature Algorithm: sha256WithRSAEncryption
         25:25:39:71:88:76:05:b9:47:2c:d8:e2:f9:18:1a:3c:e0:fb:
         b7:07:86:41:8e:d7:5b:75:8d:ad:98:a5:0b:f6:6e:b5:97:6f:
         b8:64:86:ca:9d:9b:3c:f9:4b:2c:29:c4:5a:9b:1a:60:00:62:
         cd:0c:a5:05:1c:d0:98:de:2e:99:2b:04:de:c7:32:32:ce:11:
         53:e8:aa:10:f9:36:6d:d9:b5:c0:44:64:c0:85:84:b1:f1:ca:
         76:5d:29:7f:a2:e2:6b:3b:c5:5c:e5:d6:b0:06:b4:bb:d0:30:
         3a:b8:c8:8c:bf:68:af:e2:d1:5c:b8:db:76:78:09:8e:73:48:
         72:ac:f2:75:cd:dc:c5:3d:cd:0d:e7:56:03:6e:b8:5e:84:e3:
         da:76:cc:f9:dc:d6:37:d5:6c:eb:b3:f8:7f:3a:63:8b:8b:cb:
         be:bc:91:b2:d3:e6:72:27:12:45:1c:77:91:ec:50:0b:7b:b1:
         14:1e:0f:f4:a5:64:ef:20:9c:05:e1:f9:74:96:9f:31:48:d8:
         9c:26:48:da:fc:f4:77:16:49:df:97:12:f5:1f:2f:ba:0c:1a:
         81:0d:35:c8:4b:ee:29:42:44:d3:a5:72:be:fc:70:7e:d2:17:
         b6:42:af:2a:f3:fd:b3:65:32:10:45:fc:72:99:9b:8c:fe:73:
         95:3b:f0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org