Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5A3C0FB082094686B6059479445F41235E171BCB.cer
File:                     5A3C0FB082094686B6059479445F41235E171BCB.cer (raw, json)
Hash identifier:          mxDHSCYi6IOcP5T6Q2SG/xA7E9cFpMCJmqYAYU/Md4Q=
Subject key identifier:   5A:3C:0F:B0:82:09:46:86:B6:05:94:79:44:5F:41:23:5E:17:1B:CB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1FA82DD0332387ECEF97C0A5D92A9126EEFDAEFC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/5A3C0FB082094686B6059479445F41235E171BCB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Jan 2024 18:51:05 +0000
Certificate not after:    Mon 06 Jan 2025 18:56:05 +0000
Subordinate resources:    AS: 266071
                          IP: 45.4.120.0/22
                          IP: 2804:3a1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a8:2d:d0:33:23:87:ec:ef:97:c0:a5:d9:2a:91:26:ee:fd:ae:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  8 18:51:05 2024 GMT
            Not After : Jan  6 18:56:05 2025 GMT
        Subject: CN=5A3C0FB082094686B6059479445F41235E171BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f5:4f:2b:7c:c1:27:5c:39:90:d3:3b:b5:5a:
                    e8:1f:04:6b:4e:a1:69:84:36:9c:8f:98:63:8c:ae:
                    5d:59:5b:ae:da:8a:cf:16:a0:79:9c:66:26:7b:7b:
                    05:21:b6:1f:1f:90:c3:55:f1:b8:00:81:ab:cf:86:
                    13:5e:b1:5e:c5:95:de:c7:2a:58:39:a1:40:f0:24:
                    ce:a9:2a:de:3c:dc:c3:77:b8:06:58:a3:11:41:e1:
                    17:cc:d5:fd:13:2a:2d:cc:02:7e:ab:f5:38:88:43:
                    e8:53:2a:b8:16:6e:df:7a:98:1e:80:17:3e:d6:ed:
                    e3:bc:af:21:22:24:85:d2:a5:7c:22:b0:44:7a:9b:
                    24:fc:7d:b3:fa:2f:81:d9:6f:23:03:e4:f2:59:62:
                    3c:5e:98:79:af:44:97:69:8c:cb:b6:30:57:fa:00:
                    3a:35:56:66:67:76:29:43:ba:f1:56:72:8a:35:b4:
                    d2:db:08:76:61:74:ef:a6:6a:63:75:21:ce:c7:fa:
                    cd:33:0f:c8:00:46:03:2b:dc:27:7c:eb:b1:6d:ab:
                    8a:71:d3:6f:3f:b9:7b:85:be:43:9d:fa:04:1d:a9:
                    17:fc:d2:81:19:54:cf:33:56:17:64:16:b8:16:9e:
                    99:70:e7:16:76:35:f0:68:7b:20:b8:21:4b:a1:f6:
                    be:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:3C:0F:B0:82:09:46:86:B6:05:94:79:44:5F:41:23:5E:17:1B:CB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/5A3C0FB082094686B6059479445F41235E171BCB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.120.0/22
                IPv6:
                  2804:3a1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266071

    Signature Algorithm: sha256WithRSAEncryption
         8f:7b:ee:ad:d1:ee:65:f7:dc:35:ee:ed:2d:60:64:b3:f0:0d:
         81:c9:a6:88:bb:a9:f1:27:76:4f:0a:a1:c0:4f:37:56:9b:c5:
         0a:69:b5:63:c1:39:c2:35:4e:7e:68:60:cc:a8:55:ee:2e:d8:
         bf:54:12:52:c3:77:e9:00:9f:46:f6:59:5e:e8:8c:8c:6e:93:
         de:58:37:c4:54:79:cb:bb:95:24:a1:4e:f8:69:59:e7:27:95:
         5e:90:83:a2:28:81:00:c6:d8:99:24:e6:5f:39:31:06:3a:03:
         87:81:44:5b:bd:90:27:22:c7:a1:cd:6a:30:2e:02:d8:4c:40:
         bd:4f:e1:c3:83:f9:f8:a5:6f:89:6f:ac:56:69:04:68:74:17:
         0a:57:f4:96:d5:5c:4b:9d:e8:85:41:7b:af:fe:52:f5:2f:31:
         c9:d1:dc:9e:3c:81:f6:92:28:31:15:b1:8e:a9:26:99:c2:04:
         03:60:ab:63:30:b7:df:a1:35:d0:bb:75:37:0b:25:1b:3e:43:
         44:9c:14:11:35:8c:cc:bc:1e:bf:29:9d:28:5a:9e:31:33:d8:
         aa:d0:c8:bd:e5:05:f0:29:7a:09:a2:b1:ce:0d:e4:36:99:40:
         98:39:35:9d:3c:b8:cd:f4:58:35:0f:ff:e9:30:20:90:d6:5e:
         99:67:a2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org