Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.cer
File:                     5A3B8374CEF0DA39D870881A0679C05C040E5145.cer (raw, json)
Hash identifier:          z1LutS10ahwXGba5pNmp1BtrSAMnUU7aY8N6aPImM6s=
Subject key identifier:   5A:3B:83:74:CE:F0:DA:39:D8:70:88:1A:06:79:C0:5C:04:0E:51:45
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       679F3F168178539EF8590B3027FAA4A5AC7084B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 10:58:29 +0000
Certificate not after:    Mon 31 Mar 2025 11:03:29 +0000
Subordinate resources:    AS: 264434
                          IP: 131.221.160.0/22
                          IP: 2804:1e88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9f:3f:16:81:78:53:9e:f8:59:0b:30:27:fa:a4:a5:ac:70:84:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 10:58:29 2024 GMT
            Not After : Mar 31 11:03:29 2025 GMT
        Subject: CN=5A3B8374CEF0DA39D870881A0679C05C040E5145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:30:bf:00:d5:2a:e0:d6:08:0f:67:09:8c:da:
                    82:48:85:3f:c8:9b:1a:e1:9b:53:ca:9f:46:66:0d:
                    27:76:a8:63:ab:53:53:0f:fe:51:25:88:9a:7f:04:
                    0d:fc:98:2b:01:c4:b7:ff:5e:65:b8:07:96:b6:ac:
                    e6:6f:d2:ec:d7:c7:95:4f:18:dc:1f:c5:2b:2d:e0:
                    14:ca:45:fc:74:37:97:50:20:22:aa:7f:66:5f:5b:
                    7c:ec:60:5e:cb:ac:47:b2:cb:8d:52:64:c5:df:12:
                    c3:cd:0a:55:7f:fe:07:2f:a1:8d:c9:17:e8:18:bb:
                    57:53:3e:c2:45:66:89:f4:8b:08:a5:1a:16:52:5c:
                    2c:63:39:ea:36:d8:1b:a7:49:82:2c:51:ba:fe:b2:
                    4c:c3:01:4f:0e:07:10:bf:95:e4:6e:a0:79:88:6d:
                    32:39:ca:f0:ae:12:8f:5a:2a:99:7f:7b:c6:52:df:
                    b5:53:60:d2:3f:da:ac:92:3b:f3:21:ea:93:99:87:
                    bb:9f:56:81:9a:6e:5f:03:68:4f:3f:87:ba:1b:b2:
                    68:b6:fe:e6:48:f9:4f:cc:86:51:f3:18:de:68:7a:
                    ea:69:a0:13:25:c7:d0:62:e0:e1:0d:67:4f:70:fe:
                    aa:f8:c9:71:61:f8:aa:77:ee:32:00:a6:d5:ca:e3:
                    69:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:3B:83:74:CE:F0:DA:39:D8:70:88:1A:06:79:C0:5C:04:0E:51:45
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.160.0/22
                IPv6:
                  2804:1e88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264434

    Signature Algorithm: sha256WithRSAEncryption
         9b:f0:3b:5b:6f:6b:dc:2a:67:e9:f2:cc:07:bf:97:0d:15:2c:
         86:51:6e:e0:0d:fb:a6:51:d1:16:5f:3d:f2:28:40:43:3a:21:
         ed:88:56:2c:b6:47:d4:66:57:6a:29:f1:6f:fa:e8:d2:53:31:
         8a:1d:9e:32:70:b6:fb:f9:ba:23:91:c7:c0:3d:c0:02:bf:f9:
         1a:89:ad:b9:66:0b:a8:e1:77:13:b4:3a:5a:9a:f2:f1:b4:c7:
         eb:2d:f7:18:63:65:df:cf:52:95:f7:24:0c:16:02:f6:fb:9e:
         be:92:77:aa:97:3a:07:bf:38:e1:5a:0f:6a:36:9b:c0:75:31:
         d1:1e:5e:e1:57:5d:80:97:7f:e2:87:d7:8f:cf:86:9d:cd:fe:
         a1:4b:73:91:32:ca:30:4d:82:3b:0a:39:5b:21:bb:fd:ec:7e:
         46:7c:58:87:30:4b:8f:c7:9b:07:3f:06:57:3f:77:28:62:a1:
         d0:a5:20:74:42:88:d5:e3:1e:3e:a6:c2:a4:37:1c:dd:8b:36:
         84:fb:57:56:7a:55:60:12:81:f4:4e:1d:7d:a6:c5:5a:3f:d4:
         4e:af:6c:7f:54:e4:49:49:ff:0b:a5:55:4a:d1:a7:7a:d9:8b:
         fd:67:96:c0:49:03:53:fb:db:de:f7:02:c8:42:33:b1:b2:85:
         69:a3:58:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org