Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5A0114F9C2DC26BD72AD5D256F3BA1C6E5157583.cer
File:                     5A0114F9C2DC26BD72AD5D256F3BA1C6E5157583.cer (raw, json)
Hash identifier:          ooadVxneWJz9CoDCR9FSkILF4Ndj5OI0B0WfEQ/i644=
Subject key identifier:   5A:01:14:F9:C2:DC:26:BD:72:AD:5D:25:6F:3B:A1:C6:E5:15:75:83
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3852BD3484057A4AD313278A748715229B845870
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CMuVurvn3CdgrrPNeruiP7kzyKGfnitfZHM67oTiv9VU/0/5A0114F9C2DC26BD72AD5D256F3BA1C6E5157583.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CMuVurvn3CdgrrPNeruiP7kzyKGfnitfZHM67oTiv9VU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Oct 2023 14:23:29 +0000
Certificate not after:    Wed 02 Oct 2024 14:28:29 +0000
Subordinate resources:    AS: 271163
                          IP: 179.42.60.0/22
                          IP: 2804:7738::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:52:bd:34:84:05:7a:4a:d3:13:27:8a:74:87:15:22:9b:84:58:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  4 14:23:29 2023 GMT
            Not After : Oct  2 14:28:29 2024 GMT
        Subject: CN=5A0114F9C2DC26BD72AD5D256F3BA1C6E5157583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:da:f7:f9:db:d2:74:9d:95:2b:2a:ed:f3:66:
                    de:1b:b0:5e:b6:fe:52:02:41:7e:b1:1f:b1:fd:fd:
                    6d:bb:44:89:9d:45:8c:fe:1f:8f:cd:50:63:45:a9:
                    16:bc:1b:1c:bd:6b:98:6c:dd:9f:96:10:89:4a:e8:
                    c6:7f:fb:9b:ad:7c:b6:26:dc:5b:cf:2d:56:e9:55:
                    f4:82:d2:10:89:b7:b7:45:fc:6e:5b:83:62:46:94:
                    da:0a:3c:fd:95:c1:60:e7:b2:db:2b:4b:f4:79:52:
                    9d:9a:96:36:b8:3c:b7:a4:9e:33:49:95:6b:f1:fb:
                    6b:86:31:2f:01:b9:e4:3e:9d:0a:28:8b:54:3c:84:
                    44:23:08:53:ac:05:fe:13:55:32:e4:a2:8a:29:27:
                    90:c3:48:46:a6:eb:f7:55:0e:68:05:7c:18:b8:89:
                    a1:cf:26:eb:38:e8:ba:52:97:96:c8:61:3d:d1:1f:
                    b9:fd:08:f8:21:6b:99:53:43:cd:34:3d:a8:fe:ac:
                    8a:95:18:aa:57:5f:e0:7e:44:06:24:54:6b:ba:44:
                    ec:db:10:1f:54:a4:b2:e9:e9:66:7d:a5:1b:87:23:
                    2f:52:81:a1:68:0a:3e:a4:d5:33:29:20:d9:8a:ea:
                    b8:38:59:ba:c9:61:8c:ee:f9:3b:69:43:9d:14:78:
                    31:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:01:14:F9:C2:DC:26:BD:72:AD:5D:25:6F:3B:A1:C6:E5:15:75:83
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CMuVurvn3CdgrrPNeruiP7kzyKGfnitfZHM67oTiv9VU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CMuVurvn3CdgrrPNeruiP7kzyKGfnitfZHM67oTiv9VU/0/5A0114F9C2DC26BD72AD5D256F3BA1C6E5157583.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.60.0/22
                IPv6:
                  2804:7738::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271163

    Signature Algorithm: sha256WithRSAEncryption
         5b:2a:e8:63:7c:d7:e2:94:79:36:ce:61:d1:24:5a:1e:b6:69:
         b4:9b:64:5a:2e:97:7d:fe:7d:a3:81:5b:3c:bb:71:f6:b8:e3:
         31:68:22:8f:8d:46:d5:5f:13:e7:50:58:71:fc:46:ca:9e:30:
         c2:3c:3a:48:84:df:2b:cb:33:b3:52:11:69:86:12:a9:86:bd:
         94:f9:cb:d2:84:18:bf:cc:6d:d3:ca:5e:4e:be:28:96:14:2b:
         9e:31:74:27:8e:dc:cf:6b:23:ad:c9:8f:46:0d:c7:1e:df:34:
         45:ab:3a:19:39:24:60:35:10:38:6c:7d:79:c3:ed:e2:0f:8b:
         e5:85:d9:e7:9b:9b:1b:83:28:55:2b:9b:73:8c:e3:ca:fb:91:
         9a:de:87:f1:a5:cb:56:e9:dd:48:86:49:82:51:2b:7a:3d:6a:
         d0:2e:87:75:15:58:b6:f0:76:a3:ba:e0:f5:e3:d8:77:51:f7:
         46:67:86:0d:06:47:66:78:d7:09:d2:8b:2e:e6:c6:75:6f:33:
         8e:ad:db:78:17:f1:c3:16:e3:45:79:9e:7b:c2:cd:f6:9e:25:
         14:d4:e4:ee:89:df:46:53:b7:3f:d0:a5:d0:34:db:bd:fc:0d:
         ce:7d:b9:88:cc:02:51:34:13:49:d7:8d:af:b1:a5:0c:80:8b:
         24:13:b1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org