Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5193ECB5F74DEC4071FF70BC96987F863B09716D.cer
File:                     5193ECB5F74DEC4071FF70BC96987F863B09716D.cer (raw, json)
Hash identifier:          8moD0XjRVGapoN4hDrg0Xzvz3AVIxn9Ys56tNLJF3uM=
Subject key identifier:   51:93:EC:B5:F7:4D:EC:40:71:FF:70:BC:96:98:7F:86:3B:09:71:6D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7C5C32F8FC7D09E13CB8DFD7B9A6468ED823D87F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/5193ECB5F74DEC4071FF70BC96987F863B09716D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 19:44:24 +0000
Certificate not after:    Tue 11 Mar 2025 19:49:24 +0000
Subordinate resources:    AS: 262493
                          IP: 138.255.216.0/22
                          IP: 168.121.148.0/22
                          IP: 170.82.132.0/22
                          IP: 177.8.48.0/21
                          IP: 177.55.48.0/20
                          IP: 2804:fec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5c:32:f8:fc:7d:09:e1:3c:b8:df:d7:b9:a6:46:8e:d8:23:d8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 19:44:24 2024 GMT
            Not After : Mar 11 19:49:24 2025 GMT
        Subject: CN=5193ECB5F74DEC4071FF70BC96987F863B09716D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4b:2f:c6:b9:98:65:bc:73:68:9a:60:5f:e5:
                    6f:eb:d5:84:ec:fb:05:ba:68:11:04:31:c7:1c:a9:
                    53:6f:b2:ba:73:70:03:6e:70:f5:13:47:b4:5e:4b:
                    c6:c3:7c:de:9a:17:6f:5b:40:75:d4:be:92:5f:08:
                    c4:d7:cc:1e:e6:6e:3d:0e:3e:5c:e5:9f:c7:8c:b6:
                    7e:97:b4:6d:d8:d2:94:6e:45:50:74:1f:0d:03:b0:
                    6a:b4:5f:9f:c3:d3:ed:a5:4d:56:45:c3:4f:37:22:
                    70:56:19:e9:95:b5:7e:76:f8:ce:ee:bf:d2:1f:ea:
                    cc:68:a8:d2:f3:db:3f:df:99:79:df:9f:d1:93:42:
                    3d:1e:27:a9:a2:f1:3f:d3:c8:13:9a:0b:82:b7:f9:
                    11:1e:56:cc:99:cd:bc:48:6f:b2:a9:0e:c9:07:c0:
                    de:07:cf:b1:7a:d7:db:b4:33:6c:96:d0:e6:00:7d:
                    bf:f7:78:0b:22:f3:39:5c:64:f8:d4:73:d2:fd:99:
                    30:4b:3c:eb:46:10:fa:fa:c3:e1:82:f6:c7:86:0f:
                    e5:2c:be:23:40:f1:93:4f:40:a1:e9:2a:30:95:5e:
                    e7:05:55:60:e7:57:2e:ca:30:1a:0a:0f:43:93:65:
                    d1:b0:8e:03:b8:3a:2e:d1:d0:59:8a:9c:b0:0b:5e:
                    78:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:93:EC:B5:F7:4D:EC:40:71:FF:70:BC:96:98:7F:86:3B:09:71:6D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/5193ECB5F74DEC4071FF70BC96987F863B09716D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.216.0/22
                  168.121.148.0/22
                  170.82.132.0/22
                  177.8.48.0/21
                  177.55.48.0/20
                IPv6:
                  2804:fec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262493

    Signature Algorithm: sha256WithRSAEncryption
         3d:86:79:fc:8f:fc:c5:12:1c:77:7d:be:14:d0:dd:b4:41:bf:
         3a:85:6b:32:7e:dc:34:ab:84:b5:46:e2:38:68:e3:e5:e3:8c:
         a7:ea:e3:46:db:5a:90:d9:37:9f:77:bd:6f:18:2d:1c:f9:42:
         e9:6b:08:da:6e:6d:11:4d:57:97:fd:cc:04:64:c5:1b:df:d1:
         33:8d:05:ff:25:c4:1d:8d:22:5b:bf:48:d2:10:1b:c1:b5:0e:
         2a:70:a8:b8:6d:ff:83:09:f5:6c:36:b9:cd:70:55:c3:8e:66:
         ab:68:fa:69:92:17:5b:3c:24:e3:e7:e2:e0:8b:04:4b:f8:f4:
         f5:ec:c5:65:94:64:ad:94:59:90:cc:b1:ce:9e:07:cf:83:a5:
         fa:74:91:f5:ad:1f:8d:d1:f3:21:2c:00:45:6a:97:af:ac:23:
         5d:0a:4a:95:f8:40:b9:4d:f9:68:60:9a:a8:cd:c4:68:5b:6b:
         7f:57:82:b6:2d:9d:a4:67:24:03:f7:d6:be:f2:53:10:5b:9d:
         b7:80:d4:8c:8e:af:d0:28:e4:ce:df:52:cd:66:d5:df:47:e7:
         11:3d:32:f8:ae:47:d8:e1:c3:59:dd:91:0e:14:ee:da:3b:42:
         bc:a8:3f:c8:d3:c4:c1:6e:46:ea:76:aa:1f:41:bc:60:57:c5:
         70:c3:f5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org