Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5265AD242CC40D9E4E242C25E31152E30289153C.cer
File:                     5265AD242CC40D9E4E242C25E31152E30289153C.cer (raw, json)
Hash identifier:          nBhIsKPz4/oUYiZI/WBrOEbZXrMxDkpM8lxrgggDCsE=
Subject key identifier:   52:65:AD:24:2C:C4:0D:9E:4E:24:2C:25:E3:11:52:E3:02:89:15:3C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2656FD5ABBFDD46F8D66557A2EBCB5470AA4FE71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/5265AD242CC40D9E4E242C25E31152E30289153C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 20 Aug 2022 00:41:10 +0000
Certificate not after:    Sat 19 Aug 2023 00:46:10 +0000
Subordinate resources:    AS: 265928
                          IP: 131.196.132.0/22
                          IP: 2804:4004::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:56:fd:5a:bb:fd:d4:6f:8d:66:55:7a:2e:bc:b5:47:0a:a4:fe:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 20 00:41:10 2022 GMT
            Not After : Aug 19 00:46:10 2023 GMT
        Subject: CN=5265AD242CC40D9E4E242C25E31152E30289153C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:65:2b:b0:f6:b8:1e:28:31:77:b2:87:6f:
                    6a:63:b8:69:12:2e:b6:34:d4:09:5d:73:47:9b:ab:
                    11:a5:cc:f8:39:70:29:13:e1:87:b7:d0:c4:df:58:
                    db:55:45:22:a8:55:92:69:78:9d:64:d7:f6:4c:db:
                    e9:36:ac:42:f1:97:b4:92:32:a1:00:0b:ee:fc:ee:
                    22:24:4b:c1:da:91:1c:97:10:3d:5d:2b:6a:74:fa:
                    31:69:dc:cf:e4:fb:7a:09:49:0d:9b:fe:62:b4:4f:
                    51:8e:f0:e1:c3:2c:4a:0e:d3:ba:22:43:6f:2f:06:
                    6e:f3:76:ac:8f:ed:da:fe:fb:16:fd:76:fc:63:8c:
                    0c:a0:e6:10:f4:3c:7b:dc:f9:86:69:f7:c8:6c:32:
                    41:5b:98:ad:6f:b5:3b:ce:fe:eb:8b:75:45:80:7c:
                    11:4e:11:5c:de:00:8c:51:ea:8a:4c:51:c7:da:7d:
                    a0:bc:c5:9d:69:94:f4:d5:8e:0a:10:3f:79:c7:db:
                    55:6c:bf:88:08:33:e1:7a:9f:6e:51:a2:3d:bb:a1:
                    1b:6c:84:f6:cf:19:02:15:45:37:17:f0:51:05:eb:
                    62:59:8e:48:3b:44:76:54:18:5b:71:c6:33:de:9c:
                    fc:73:a4:7a:aa:ab:2a:2b:6c:24:04:f5:e4:51:ac:
                    bb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:65:AD:24:2C:C4:0D:9E:4E:24:2C:25:E3:11:52:E3:02:89:15:3C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/5265AD242CC40D9E4E242C25E31152E30289153C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.132.0/22
                IPv6:
                  2804:4004::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265928

    Signature Algorithm: sha256WithRSAEncryption
         81:b5:8f:27:f8:8b:32:ae:e0:8c:11:dc:45:27:15:53:da:9d:
         fc:c9:67:ae:9b:4f:0a:c8:83:f5:93:0c:24:f4:53:24:95:57:
         ca:90:63:12:f6:9c:c8:38:69:de:89:a6:59:a8:6d:e0:4f:bd:
         52:25:40:b3:6b:c3:cc:a7:d4:b3:22:53:2d:d9:c8:ac:2b:28:
         84:1c:65:ee:de:5f:ab:45:f0:8d:1e:c4:cd:b7:d3:9e:36:d3:
         94:34:b6:ea:7f:6c:99:62:9e:78:78:69:b5:75:15:5a:ba:fc:
         c0:64:d0:d3:dc:55:15:8d:35:79:3d:d5:d4:24:c5:30:49:0a:
         3c:f2:54:70:9c:19:bd:6b:73:59:2a:94:b0:b0:55:eb:96:a1:
         32:67:8c:69:e5:35:a8:b3:78:7c:ce:f6:7a:31:3f:34:3b:a7:
         c4:05:b0:4e:c1:59:c2:dc:04:9b:5b:fa:46:6e:08:f7:44:b3:
         2d:cb:4d:8e:35:72:7f:77:0a:a3:18:df:77:20:10:6c:af:5b:
         21:3e:d7:c1:e4:28:be:6d:f6:9b:62:7e:35:62:c5:50:e3:1a:
         ba:50:fa:36:f2:28:7e:94:0c:50:96:3d:a0:21:b8:ac:ba:90:
         d6:8f:65:09:42:71:4a:ca:6c:ce:1b:0e:0e:8c:c0:61:1c:a4:
         39:56:12:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org