Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
File:                     51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer (raw, json)
Hash identifier:          VvsuQRom0GVLh2UYrXpEvl38Ep7vPRdHMWdh9y9Uw90=
Subject key identifier:   51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5AD467A93A4ECD2865C03AD32B304765242F0CAA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 Jan 2024 17:54:23 +0000
Certificate not after:    Wed 29 Jan 2025 17:59:23 +0000
Subordinate resources:    AS: 28125
                          IP: 187.19.16.0/20
                          IP: 191.36.160.0/21
                          IP: 2804:1488::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d4:67:a9:3a:4e:cd:28:65:c0:3a:d3:2b:30:47:65:24:2f:0c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 31 17:54:23 2024 GMT
            Not After : Jan 29 17:59:23 2025 GMT
        Subject: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c2:02:15:b7:a0:e8:45:f6:bf:ee:c6:32:18:
                    b1:09:ea:e6:5d:e3:9a:c4:1b:4e:0d:d4:51:0a:b0:
                    45:ef:63:85:d3:a9:cc:d2:5c:e7:83:d0:83:a9:f9:
                    d4:34:cd:ba:75:3a:92:df:22:48:13:59:ec:ae:05:
                    5f:66:29:2f:fd:16:a8:99:d3:a1:3a:88:0b:f0:15:
                    d8:68:f8:50:69:09:29:27:33:65:42:d3:7e:1e:33:
                    0d:94:71:8c:47:61:97:2e:18:4b:31:36:1f:cb:93:
                    9d:6a:84:6a:7e:58:12:a9:99:d5:94:8d:1f:4a:11:
                    5c:4d:25:6d:44:d9:e7:9e:e6:34:8e:11:08:3c:37:
                    e4:93:81:65:5a:b1:b5:a4:1b:93:35:ec:7f:78:4f:
                    9a:00:0e:27:d6:c0:be:fa:58:2c:75:34:9a:e2:b0:
                    19:90:41:b3:0f:1b:aa:8f:f7:da:3c:3c:ca:c6:5b:
                    b3:05:0a:a6:83:be:4e:f5:46:ed:95:b6:79:88:21:
                    29:db:2a:94:d6:92:43:0e:25:a2:66:c4:f7:72:b8:
                    a6:98:80:ea:0f:a0:b0:20:f2:ad:5c:5d:de:a4:fa:
                    a7:09:2b:03:af:30:56:a9:2e:89:51:e2:45:00:18:
                    bf:ff:7d:9c:5a:4a:b0:f1:18:5b:90:ca:41:60:4c:
                    ee:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.16.0/20
                  191.36.160.0/21
                IPv6:
                  2804:1488::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28125

    Signature Algorithm: sha256WithRSAEncryption
         7d:e3:55:d7:2f:f1:f0:90:ff:c8:6c:b0:49:b0:ab:28:94:e6:
         a3:ca:42:84:4b:eb:b5:ee:ee:b7:05:74:45:57:75:d3:9e:cc:
         fa:98:80:3f:4e:79:6d:2c:e7:ea:ae:b2:c7:65:b5:79:d4:f4:
         71:7c:06:9b:4d:97:da:54:21:2b:80:0d:09:2e:93:0e:5b:fe:
         62:0d:78:31:51:bc:63:fd:91:7b:42:99:28:28:18:a4:a8:b0:
         42:07:0c:a7:dd:26:b1:4f:3d:24:b3:ed:b1:d4:a9:33:59:d7:
         7b:71:4d:93:23:97:e8:40:96:b7:a0:4e:fe:8b:4c:cf:6b:ea:
         44:0e:c8:91:80:e8:50:32:89:64:4e:a9:7b:45:69:dc:e5:17:
         b4:db:f7:99:7d:3f:8a:17:5c:cb:06:5a:88:e4:72:ea:30:ba:
         88:03:82:75:29:6b:f0:11:68:ac:27:6e:b9:b5:33:cb:14:66:
         2a:a5:ab:dc:2b:1d:ae:6f:aa:13:7a:b7:d8:ac:44:32:57:99:
         87:73:63:f3:68:77:51:ac:f1:60:53:da:20:8b:8a:e7:94:df:
         bb:b4:39:63:c8:83:28:59:6c:fb:42:09:39:08:19:47:33:43:
         13:fd:28:63:78:29:ea:9b:39:94:29:18:ac:9a:80:4e:5f:31:
         4c:2b:44:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org