Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/51CB6A72A3C19030CD4E1495D4C560E9488371B9.cer
File:                     51CB6A72A3C19030CD4E1495D4C560E9488371B9.cer (raw, json)
Hash identifier:          rK6UZzz5A2p03pzJuwv3WoRR5gN5hrwsXRmRFDGyf8A=
Subject key identifier:   51:CB:6A:72:A3:C1:90:30:CD:4E:14:95:D4:C5:60:E9:48:83:71:B9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       04140F471D3F8B666AADB6BF16A5CAEF0CE291F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6d9yjGw4QEJX9cpdYZURqr9SuAbvcBGS4pJZ4mk4Gnc4/0/51CB6A72A3C19030CD4E1495D4C560E9488371B9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6d9yjGw4QEJX9cpdYZURqr9SuAbvcBGS4pJZ4mk4Gnc4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Jun 2023 23:47:39 +0000
Certificate not after:    Mon 03 Jun 2024 23:52:39 +0000
Subordinate resources:    AS: 52985
                          IP: 191.232.0.0/13
                          IP: 2801:80:1d0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:14:0f:47:1d:3f:8b:66:6a:ad:b6:bf:16:a5:ca:ef:0c:e2:91:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  5 23:47:39 2023 GMT
            Not After : Jun  3 23:52:39 2024 GMT
        Subject: CN=51CB6A72A3C19030CD4E1495D4C560E9488371B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:40:4e:d3:85:30:e6:fc:a5:6c:6c:51:bd:
                    01:54:5c:d5:e3:a8:9f:be:47:50:4d:6c:ad:c0:f1:
                    c0:2e:08:96:27:67:0d:db:fd:99:8c:05:d8:41:a1:
                    03:75:7e:54:19:fa:2a:8f:12:de:ce:0f:22:3b:bf:
                    84:7f:9e:c3:7b:a1:4d:c8:dc:cc:b1:5f:8a:cc:85:
                    0a:8c:e6:66:b2:ab:7e:32:28:5a:1d:78:a8:f5:81:
                    c0:8a:e8:16:2c:c2:ae:41:e7:19:5b:17:0f:a0:7f:
                    fc:82:be:1d:05:15:d9:52:51:67:74:3e:ef:49:3c:
                    ab:b3:e6:62:a6:77:f6:e9:dc:36:b8:6f:51:e2:10:
                    83:33:c5:53:13:54:8a:42:46:5f:8e:e4:60:7a:d6:
                    e8:da:e5:bc:e8:91:ad:a5:19:f3:6a:94:44:e6:d1:
                    a7:dc:5b:3e:cc:e7:19:da:2e:a4:f4:44:06:81:49:
                    54:01:d8:e0:5d:eb:22:59:83:0b:71:9e:c7:f9:8e:
                    f2:46:8e:53:5c:f4:2b:d2:52:8a:9e:33:28:32:45:
                    86:72:7b:ab:cb:ef:61:de:db:30:08:8b:46:81:c8:
                    21:68:ed:c6:00:d8:2e:42:79:4c:bd:01:76:b5:b8:
                    b5:33:b9:8a:e4:c6:c2:d4:fe:50:68:bc:18:d7:0d:
                    1e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:CB:6A:72:A3:C1:90:30:CD:4E:14:95:D4:C5:60:E9:48:83:71:B9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6d9yjGw4QEJX9cpdYZURqr9SuAbvcBGS4pJZ4mk4Gnc4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6d9yjGw4QEJX9cpdYZURqr9SuAbvcBGS4pJZ4mk4Gnc4/0/51CB6A72A3C19030CD4E1495D4C560E9488371B9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.232.0.0/13
                IPv6:
                  2801:80:1d0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52985

    Signature Algorithm: sha256WithRSAEncryption
         0c:4a:99:68:79:ad:16:c3:ad:79:a3:de:79:db:f4:be:77:ce:
         3e:04:41:e6:dd:3b:b8:46:05:48:d6:7a:a1:16:25:ba:3e:70:
         dc:b5:34:e8:af:a6:09:ac:4e:92:5e:78:91:b4:f1:c9:8a:c4:
         ff:58:ae:b6:fc:3b:32:0c:13:3b:3f:b2:52:9b:96:12:c0:bc:
         1a:bf:a9:3f:62:7a:4b:5f:40:42:3b:3c:a7:7d:8e:8f:64:7e:
         cb:98:c0:f4:28:c7:0f:b7:82:e9:df:c3:93:c6:d2:d5:43:4a:
         98:6e:52:4c:b9:5d:87:ad:27:3c:b3:13:8b:31:78:01:99:4a:
         99:02:5b:e8:8c:ce:18:80:3b:23:7a:21:e5:50:b8:7c:c5:33:
         68:d8:52:1d:08:39:a0:fe:db:10:22:14:08:0b:34:f2:fe:d5:
         34:30:c6:14:4c:d6:5e:55:ed:c8:48:c2:5a:36:67:5d:f7:44:
         d4:67:08:45:63:5c:fa:b6:26:82:c7:73:67:3d:e5:ce:10:4b:
         3b:e6:4c:ef:0e:9b:94:1c:4e:11:e4:6b:c6:6d:91:71:6a:01:
         e0:04:8a:cc:da:13:eb:05:a7:45:eb:30:14:59:7e:a9:57:31:
         a3:ad:99:62:cf:fe:60:97:4a:5b:2b:d8:6d:24:1c:92:2f:7a:
         6d:e5:b9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org