Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5940C19E46A00D616E69354C6F425903A1505095.cer
File:                     5940C19E46A00D616E69354C6F425903A1505095.cer (raw, json)
Hash identifier:          R1G0B9B6Y+nrjdEGVquJh7bhombG5qOZ86aoiOsvnQU=
Subject key identifier:   59:40:C1:9E:46:A0:0D:61:6E:69:35:4C:6F:42:59:03:A1:50:50:95
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       240C676FB43E450203A8EB66E3B99BDD3D94C0A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/5940C19E46A00D616E69354C6F425903A1505095.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 20 May 2023 02:10:53 +0000
Certificate not after:    Sat 18 May 2024 02:15:53 +0000
Subordinate resources:    AS: 266941
                          IP: 45.225.48.0/22
                          IP: 2804:45a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0c:67:6f:b4:3e:45:02:03:a8:eb:66:e3:b9:9b:dd:3d:94:c0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 20 02:10:53 2023 GMT
            Not After : May 18 02:15:53 2024 GMT
        Subject: CN=5940C19E46A00D616E69354C6F425903A1505095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3b:f6:28:99:00:f7:3c:99:c2:83:29:15:9d:
                    2b:9d:f1:27:47:5e:76:af:bd:cb:af:d1:7b:c3:6a:
                    e6:bd:90:a0:6a:6f:52:9c:c4:93:65:7c:50:f2:f0:
                    2d:be:64:30:9e:86:07:71:0f:dd:fb:d5:a7:f3:ea:
                    b8:2d:52:71:73:ab:0b:b0:09:2f:d2:b8:87:77:4c:
                    79:f2:9f:20:05:7d:d0:76:13:e2:1b:4b:5a:04:ed:
                    94:91:91:33:cc:3a:7b:5d:13:9c:7b:a1:12:69:f8:
                    24:d2:5a:ad:ba:08:94:a1:b8:f6:a3:82:3d:c4:c8:
                    08:8d:f9:4a:44:c9:64:2b:73:42:ff:7b:5c:d7:79:
                    0d:79:5a:a8:c5:39:e8:1c:1b:88:9d:fa:8b:22:b7:
                    22:a3:b8:7f:c7:7e:96:7e:eb:a7:fa:37:11:f1:fb:
                    6f:d7:21:46:d3:6c:a0:50:20:16:eb:37:bb:18:e1:
                    b8:80:31:31:93:2c:00:9e:ab:f8:d2:7b:4b:16:6a:
                    46:f7:bd:aa:e0:22:11:5d:94:40:63:47:5f:bf:f8:
                    6d:ac:09:2a:fd:2a:54:8d:f3:6d:ce:0b:cf:49:8d:
                    ba:2b:3d:19:74:f7:a7:a3:ff:13:dd:39:a7:f3:34:
                    e5:b6:8d:f4:4e:bc:11:ea:6c:47:36:ba:23:08:cd:
                    b6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                59:40:C1:9E:46:A0:0D:61:6E:69:35:4C:6F:42:59:03:A1:50:50:95
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/5940C19E46A00D616E69354C6F425903A1505095.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.48.0/22
                IPv6:
                  2804:45a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266941

    Signature Algorithm: sha256WithRSAEncryption
         b5:07:1e:09:17:67:0b:7c:f0:9f:16:b2:3c:96:1f:fc:3d:88:
         a9:23:60:ad:76:a0:86:9e:30:43:e6:77:79:0d:5e:50:4c:cb:
         21:3a:58:f7:98:37:41:ae:09:d2:10:78:2d:33:c3:40:11:fe:
         a1:9e:2a:28:bf:67:d3:07:c5:10:47:e3:8e:5a:ba:37:01:39:
         64:87:e7:15:d6:aa:33:c4:51:fd:76:a8:f9:9b:5a:2c:86:b5:
         77:ff:c0:26:a0:1c:9d:9d:96:d7:9f:83:13:9c:6f:59:70:11:
         1d:71:53:1e:09:c4:73:0e:49:80:e3:5b:2f:de:89:28:3b:30:
         dc:8e:cf:71:a2:0b:68:df:0d:b9:49:82:c0:11:44:47:b4:da:
         57:68:82:c6:53:c2:8a:6a:ce:9c:82:9a:8f:e4:52:06:4a:d0:
         7b:5c:af:a8:0e:79:ce:1a:19:70:66:ae:7c:e9:5b:4a:14:d6:
         04:a0:9c:4c:f7:ba:e2:a4:c1:b4:cd:35:c7:57:f5:7a:ed:5d:
         8e:ef:cf:85:d5:7b:7e:01:13:a9:a9:4e:12:31:71:d9:b5:8a:
         14:70:a2:ac:09:6d:e0:e5:36:1e:4a:cd:e0:6a:6d:bc:0a:f8:
         37:82:cf:28:19:77:c9:e6:c4:a5:a4:cf:0b:54:1e:4c:a0:98:
         c5:14:24:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org