Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A.cer
File:                     52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A.cer (raw, json)
Hash identifier:          jbVUbWhwkSw3ad51MBsT+sDcE+Lobugtpy94X3VZ/c0=
Subject key identifier:   52:FC:BB:FF:5F:F3:EE:EA:4A:47:AA:50:D3:79:4E:C4:EB:07:BE:7A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       01850B93899BE12150D1C8B14F64730F10949DC1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Nov 2023 00:27:32 +0000
Certificate not after:    Thu 21 Nov 2024 00:32:32 +0000
Subordinate resources:    AS: 266607
                          IP: 45.7.192.0/22
                          IP: 2804:3e94::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:0b:93:89:9b:e1:21:50:d1:c8:b1:4f:64:73:0f:10:94:9d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 23 00:27:32 2023 GMT
            Not After : Nov 21 00:32:32 2024 GMT
        Subject: CN=52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:91:c0:23:54:ee:97:46:36:66:8c:9c:26:
                    7e:0e:56:bf:76:83:9b:1a:4a:1d:a2:e4:f0:0e:55:
                    96:3b:8b:4e:f6:c1:30:32:4b:05:71:46:1f:d8:d0:
                    2a:50:82:9b:a3:99:f4:56:59:8f:11:32:0e:3a:9f:
                    5a:47:c2:22:2d:72:07:e0:49:99:a3:5d:87:9e:f9:
                    01:cb:30:49:f4:9f:41:f9:0c:a7:a6:7c:54:1d:48:
                    5c:dd:b9:3d:4d:e0:9c:7e:4a:4c:98:e3:8b:47:04:
                    e0:21:d1:fc:ed:42:94:21:60:d0:dc:07:36:44:2b:
                    35:48:21:0f:15:d3:b0:ec:37:ad:30:da:1c:0d:8f:
                    f8:0d:54:f7:40:4e:87:94:a4:43:19:f7:38:6c:f8:
                    2a:52:6e:ae:ad:e3:37:ef:e8:91:f0:cd:8f:91:0e:
                    fc:81:f1:c8:6f:3d:0b:0e:42:a3:f4:be:3f:90:d9:
                    4c:80:23:a6:5e:a0:dc:c3:29:ab:7c:b3:48:91:e3:
                    ac:c5:c1:b5:6f:ce:81:c1:dc:91:6e:bf:50:0a:bb:
                    8a:31:46:52:94:df:64:6a:a7:87:70:45:d1:d4:6a:
                    8c:d8:57:1a:93:43:33:5d:e2:ed:f0:a8:7c:94:d8:
                    64:2b:09:18:32:2c:a9:55:be:2d:91:e7:07:b3:7c:
                    7d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:FC:BB:FF:5F:F3:EE:EA:4A:47:AA:50:D3:79:4E:C4:EB:07:BE:7A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/52FCBBFF5FF3EEEA4A47AA50D3794EC4EB07BE7A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.192.0/22
                IPv6:
                  2804:3e94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266607

    Signature Algorithm: sha256WithRSAEncryption
         02:a6:f3:0a:1a:15:dc:e8:bf:f1:62:4d:3d:9e:e2:fc:e7:5a:
         f4:0e:3c:25:b4:95:f1:57:ee:29:5d:34:11:fc:8a:0a:05:f8:
         c2:ac:60:f9:3a:09:10:bd:05:e3:73:e4:ee:6e:ab:97:57:5e:
         13:7e:67:35:0d:d2:96:18:27:d4:c1:e6:43:df:e3:76:f6:cc:
         27:11:eb:c7:9d:f1:49:8d:15:f8:3a:af:c3:d9:3e:c3:32:f1:
         0b:30:30:9e:cb:f5:15:c0:09:f3:74:15:52:db:55:78:9d:d0:
         88:b5:e3:75:31:3d:0c:95:8d:58:98:51:d1:e1:87:e8:d6:28:
         c6:4b:ab:e3:cc:9c:67:64:64:ed:41:b7:7b:ac:f3:0f:df:0b:
         84:6d:b7:e3:77:eb:ca:ea:f0:41:1e:5f:77:4c:93:e3:e6:0a:
         19:e3:09:83:a4:25:ee:9a:b5:66:36:3b:ae:e5:76:d5:e8:fb:
         cd:97:33:31:cc:0c:1e:af:70:f2:8d:d8:88:40:22:79:8e:97:
         8d:4a:06:06:bb:06:f8:2f:be:99:cd:04:60:bd:8d:c4:46:3b:
         70:51:98:cf:13:9f:24:ef:b9:79:d8:72:ee:70:ff:9b:4e:ba:
         5f:d9:72:3f:73:3f:d0:90:e7:17:d7:90:c1:5e:0d:d0:60:5d:
         c4:9c:68:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org