Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5A1F9FFCE92796694A6DE62917F0216062FB2318.cer
File:                     5A1F9FFCE92796694A6DE62917F0216062FB2318.cer (raw, json)
Hash identifier:          o2bHBm7Jw2+q6GArjkX5Y4iJBAN6lJqg3TTkPmcBpu8=
Subject key identifier:   5A:1F:9F:FC:E9:27:96:69:4A:6D:E6:29:17:F0:21:60:62:FB:23:18
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4B25FC3FCEF398744A3DC2F26FEE685102840233
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/5A1F9FFCE92796694A6DE62917F0216062FB2318.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Feb 2024 00:48:38 +0000
Certificate not after:    Tue 11 Feb 2025 00:53:38 +0000
Subordinate resources:    AS: 263995
                          IP: 138.255.228.0/22
                          IP: 2804:2910::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:25:fc:3f:ce:f3:98:74:4a:3d:c2:f2:6f:ee:68:51:02:84:02:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 13 00:48:38 2024 GMT
            Not After : Feb 11 00:53:38 2025 GMT
        Subject: CN=5A1F9FFCE92796694A6DE62917F0216062FB2318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:66:6f:b5:4e:8d:52:4f:5a:1e:8a:43:f1:2d:
                    23:1b:47:58:1b:8d:0f:32:38:40:a7:75:1a:1a:f1:
                    cc:35:0e:7b:e1:d7:94:1b:9e:87:4f:c2:e7:7b:10:
                    8b:f4:6a:2e:0e:0b:ec:54:4f:5f:74:63:77:db:04:
                    86:2a:56:81:e1:41:52:eb:68:99:ca:db:99:f5:e0:
                    ac:88:f0:76:04:7e:10:e5:14:3a:7d:e7:43:11:a3:
                    d0:6d:eb:ce:8c:20:4d:03:7d:48:70:1c:1f:4f:e2:
                    85:52:dc:3d:37:0b:b6:1d:7e:92:34:16:38:f4:fd:
                    9f:31:2d:6a:97:af:18:a3:2a:79:04:47:8d:b2:d4:
                    fe:ff:b4:23:f8:b3:01:bc:65:9e:13:85:97:c8:8d:
                    9f:6c:52:52:57:d3:43:43:4d:e4:15:fe:a1:d8:78:
                    3d:b3:bb:69:eb:fe:d1:71:c5:6f:7d:4c:50:0f:b9:
                    9a:5d:da:06:95:cc:6f:1b:84:43:40:d0:4e:3c:f3:
                    4a:a8:62:c1:d5:7d:37:c3:82:52:69:90:1f:88:41:
                    5c:2a:5c:5f:c2:0e:ec:08:7b:e2:b9:97:45:ba:81:
                    4e:1c:1c:e8:c2:0a:7e:c1:8b:86:5d:3a:a6:a5:21:
                    76:39:86:59:3c:25:0e:9d:0f:f1:71:87:94:82:22:
                    60:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:1F:9F:FC:E9:27:96:69:4A:6D:E6:29:17:F0:21:60:62:FB:23:18
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/5A1F9FFCE92796694A6DE62917F0216062FB2318.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.228.0/22
                IPv6:
                  2804:2910::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263995

    Signature Algorithm: sha256WithRSAEncryption
         08:f8:d3:13:f9:d1:b5:bd:00:81:5b:3d:c7:92:ae:57:99:60:
         b4:9f:0a:ad:f0:24:8b:60:c4:91:ab:07:1a:4d:30:8e:26:37:
         81:18:71:be:e8:d9:96:02:85:22:a8:b8:08:6a:8b:43:f0:dd:
         d6:f7:ab:be:57:12:0a:40:9b:02:ed:a2:1a:bb:37:61:2f:22:
         e9:60:fb:77:ee:45:4a:90:83:26:38:7b:7b:55:89:c3:ca:00:
         79:ec:b9:1b:9c:5e:87:b3:4e:f9:40:f1:5d:36:bc:0a:d3:21:
         a1:fc:c1:8e:0a:bc:d9:cc:02:66:af:94:04:8f:30:38:59:30:
         50:ba:ac:29:63:f0:b0:1c:42:7d:a4:3e:e0:50:ba:c4:da:64:
         07:c3:00:60:57:83:ce:a8:69:6a:4e:6a:ec:32:e7:77:ae:3a:
         73:b1:af:73:ad:42:8c:6d:74:f8:b4:c4:71:30:f2:99:aa:3a:
         96:3d:92:06:79:27:15:3b:95:f9:da:bc:21:3d:5c:e5:93:b4:
         3d:7f:99:7f:10:bc:40:42:4b:62:60:35:d0:3a:19:f5:59:ea:
         75:c7:32:7e:04:47:a9:65:c4:e2:09:0f:36:6d:ec:7b:2b:6a:
         52:7a:49:c5:bb:e8:e4:eb:c3:5f:8d:96:6d:a4:0e:6c:22:21:
         e2:66:47:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org