Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5A34EBB236AC09269769AD2519F48D435AD04EA2.cer
File:                     5A34EBB236AC09269769AD2519F48D435AD04EA2.cer (raw, json)
Hash identifier:          uS91IYJLL/YUa/SbKCpNKtdULcrnlJJ0Qm18P1uZT78=
Subject key identifier:   5A:34:EB:B2:36:AC:09:26:97:69:AD:25:19:F4:8D:43:5A:D0:4E:A2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       37DADD27679295EE0E37708E7BF5DD8CEFF7F110
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/5A34EBB236AC09269769AD2519F48D435AD04EA2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Sep 2022 16:45:10 +0000
Certificate not after:    Mon 25 Sep 2023 16:50:10 +0000
Subordinate resources:    AS: 270594
                          IP: 177.37.28.0/22
                          IP: 2804:6e64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:da:dd:27:67:92:95:ee:0e:37:70:8e:7b:f5:dd:8c:ef:f7:f1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 26 16:45:10 2022 GMT
            Not After : Sep 25 16:50:10 2023 GMT
        Subject: CN=5A34EBB236AC09269769AD2519F48D435AD04EA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:97:85:b0:01:4e:43:c8:08:33:81:c5:b0:
                    9c:2e:c4:8b:d5:c1:12:a9:9d:ef:3d:78:b8:be:1a:
                    90:a8:4e:b2:b7:e4:e5:4c:9f:01:c1:6e:9d:75:71:
                    de:41:df:d1:f6:e5:2d:60:46:60:22:e9:fa:3d:0c:
                    03:3a:6e:62:38:bc:57:73:fc:63:13:2e:95:ed:a4:
                    a7:c8:ac:a5:46:8a:0c:3e:50:cd:03:f7:a7:f0:9a:
                    bf:04:73:cf:2d:03:06:fe:70:dc:c7:4d:76:1d:29:
                    2d:c9:b5:41:07:d6:88:90:41:1d:e6:aa:5d:1d:6f:
                    64:e4:79:19:8a:96:f9:65:31:4b:c5:c2:3d:8a:a9:
                    66:b6:f1:db:2b:e7:a3:72:50:e7:99:f2:87:4b:90:
                    23:44:4d:a5:9f:d7:48:1b:8c:7a:4e:cc:f5:7d:f5:
                    15:69:a8:a4:ba:52:8c:07:21:d5:66:33:e8:aa:77:
                    19:81:74:2c:ef:51:f5:46:6d:87:cc:0b:82:a0:66:
                    8b:83:2c:98:7c:df:b4:41:24:ab:a0:6c:bf:97:45:
                    f9:5c:31:18:cc:b3:d0:13:79:5a:6c:6d:c4:68:23:
                    30:52:b2:0d:27:6a:d3:a5:c0:f9:27:9c:ff:4a:0f:
                    05:f9:76:08:c8:20:6e:50:9b:9e:ce:62:e0:d2:45:
                    c5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:34:EB:B2:36:AC:09:26:97:69:AD:25:19:F4:8D:43:5A:D0:4E:A2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/5A34EBB236AC09269769AD2519F48D435AD04EA2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.28.0/22
                IPv6:
                  2804:6e64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270594

    Signature Algorithm: sha256WithRSAEncryption
         8a:e8:0b:bf:75:66:e5:f1:05:45:8f:2d:17:63:f3:01:75:8f:
         57:c0:d5:23:c1:0f:b5:9a:a3:16:35:73:53:37:03:65:06:30:
         db:0b:41:f2:98:05:49:b9:c1:cc:cc:73:1d:bd:e3:05:1a:04:
         f5:a5:68:b6:f0:52:7c:44:a8:11:b8:fd:a8:ec:26:87:d7:1c:
         f3:40:56:b9:84:39:61:69:7c:f0:06:de:8d:c2:32:37:08:b5:
         70:dc:ac:00:a8:dd:0f:7e:cc:00:eb:d2:b2:24:bb:26:78:1c:
         66:78:42:d6:be:33:ed:9d:52:75:87:4c:1d:f6:a3:ae:ab:66:
         b4:27:41:cd:76:a8:7a:0c:73:cf:4e:5f:c7:ec:95:a1:0b:38:
         f9:2a:d5:e3:35:8b:de:f3:12:c6:62:3f:81:8b:57:0a:08:ae:
         88:71:28:b0:0f:22:7d:64:30:02:a9:bb:c6:d1:1b:85:5d:23:
         c9:c5:50:fa:69:82:d8:44:59:52:d2:30:69:76:4b:1d:8b:68:
         e5:a6:41:ff:05:86:14:2d:d5:af:06:a0:54:af:0b:8a:a5:92:
         90:e3:0b:53:97:d3:1b:92:4a:d2:63:20:2a:94:e7:1c:19:17:
         fe:a0:52:d1:4c:8a:2c:53:c4:88:46:79:23:b6:1a:65:79:73:
         15:33:5c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org