Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/517FC9E3E8C914E9F3BC2ADD34741D913693B5F8.cer
File:                     517FC9E3E8C914E9F3BC2ADD34741D913693B5F8.cer (raw, json)
Hash identifier:          swNcPg2o5Jx5OXd1PZuKdCq3EwnvBLwmtNPM4EqQBsU=
Subject key identifier:   51:7F:C9:E3:E8:C9:14:E9:F3:BC:2A:DD:34:74:1D:91:36:93:B5:F8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       613E26CCA9F94166914AE274DF373006368004E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/0/517FC9E3E8C914E9F3BC2ADD34741D913693B5F8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Jan 2024 15:03:14 +0000
Certificate not after:    Tue 31 Dec 2024 15:08:14 +0000
Subordinate resources:    AS: 268887
                          IP: 45.174.80.0/22
                          IP: 2804:5c18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3e:26:cc:a9:f9:41:66:91:4a:e2:74:df:37:30:06:36:80:04:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  2 15:03:14 2024 GMT
            Not After : Dec 31 15:08:14 2024 GMT
        Subject: CN=517FC9E3E8C914E9F3BC2ADD34741D913693B5F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:00:14:45:19:ca:2b:27:93:21:68:92:67:cf:
                    f5:53:c7:f1:c9:d4:21:c7:44:40:6c:90:e3:36:c8:
                    fa:1c:ba:ea:8c:6e:38:1f:77:41:e5:2f:49:b7:46:
                    78:62:35:02:16:92:cc:45:59:a8:d9:85:29:d3:d0:
                    ca:ad:6f:e4:b6:dc:ac:62:4e:ba:93:d3:b0:0c:0a:
                    03:bd:67:30:aa:3e:3f:ce:65:74:4f:7c:1f:61:a9:
                    3c:77:62:65:f1:5e:a8:1a:dd:40:c4:1d:ff:4b:54:
                    81:30:56:02:c4:83:12:d5:82:d6:84:3e:bf:f9:18:
                    cc:70:53:68:ae:cc:01:e6:ed:18:2c:4b:48:0e:b4:
                    cb:5a:ff:12:9e:95:14:b5:cc:88:d1:f2:02:34:9a:
                    d3:ad:5c:35:51:e2:c5:3a:72:dc:f3:26:cf:f2:c7:
                    18:25:ee:8e:cb:34:43:55:a4:f9:de:52:78:08:6d:
                    d0:a0:f5:ae:e3:7d:20:80:c2:e4:55:6f:a9:33:65:
                    1b:83:66:a8:ca:c3:1a:d7:55:f2:4e:8a:c4:a7:7c:
                    50:45:38:74:30:2d:01:d6:44:4f:9e:04:2a:ac:e8:
                    aa:69:6d:1e:47:5e:6b:a3:5a:c9:15:32:f6:63:d6:
                    40:54:8f:d3:28:47:ab:8e:7e:9a:68:4b:29:e4:f8:
                    b5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:7F:C9:E3:E8:C9:14:E9:F3:BC:2A:DD:34:74:1D:91:36:93:B5:F8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/0/517FC9E3E8C914E9F3BC2ADD34741D913693B5F8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.80.0/22
                IPv6:
                  2804:5c18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268887

    Signature Algorithm: sha256WithRSAEncryption
         46:08:11:88:34:91:e5:97:52:54:87:57:76:24:28:a4:e7:72:
         e3:42:11:37:d2:f1:88:31:b0:ca:03:ef:a6:1f:19:29:c5:cc:
         f6:a6:eb:33:fb:ef:66:e2:59:4c:01:2c:87:b1:5b:28:fd:fa:
         50:71:63:96:90:79:dc:59:aa:0b:26:b5:fe:d4:48:54:07:60:
         ba:3b:c2:b0:82:84:16:4d:f7:49:51:38:3e:bb:e1:82:77:be:
         fd:5c:85:29:68:78:27:07:fa:64:c3:75:5d:02:47:4b:3d:72:
         7c:c0:76:ab:5b:32:b6:22:0f:d3:e0:6f:1c:c3:41:12:3c:ea:
         f0:5f:2e:92:e4:b9:c7:db:82:d5:9a:23:f7:12:ed:3d:1b:c0:
         ca:1c:c2:2c:97:0b:f6:06:3c:5b:b1:3e:79:9c:ec:38:64:5e:
         88:29:f7:d0:54:5b:36:a5:27:ce:bb:cc:f3:4d:2a:93:d3:10:
         d3:76:25:32:c7:02:99:05:bd:da:ae:e7:43:c1:ff:8e:45:94:
         cc:64:cf:7f:83:61:9e:16:a0:69:0f:5c:38:af:f6:d4:0f:b0:
         6d:b8:df:fe:30:e9:a7:7b:b3:30:fd:7a:89:c2:8f:f7:5c:61:
         18:8d:ad:bd:00:c7:70:2d:91:25:0a:ed:73:42:9c:03:90:e0:
         17:47:48:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org