Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5A4B203CF6C5A4FD2D00BEB3AEA7A3E9EE167807.cer
File:                     5A4B203CF6C5A4FD2D00BEB3AEA7A3E9EE167807.cer (raw, json)
Hash identifier:          fCdXQj4q/cVyuHM7RrFD/FwGzo9rggbELPRF5GlsyYI=
Subject key identifier:   5A:4B:20:3C:F6:C5:A4:FD:2D:00:BE:B3:AE:A7:A3:E9:EE:16:78:07
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4013EE13D79008699DE8BD9B24E3300C753AC632
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/0/5A4B203CF6C5A4FD2D00BEB3AEA7A3E9EE167807.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 27 Jan 2024 23:55:36 +0000
Certificate not after:    Sun 26 Jan 2025 00:00:36 +0000
Subordinate resources:    AS: 269378
                          IP: 45.185.140.0/22
                          IP: 2804:63b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:13:ee:13:d7:90:08:69:9d:e8:bd:9b:24:e3:30:0c:75:3a:c6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 27 23:55:36 2024 GMT
            Not After : Jan 26 00:00:36 2025 GMT
        Subject: CN=5A4B203CF6C5A4FD2D00BEB3AEA7A3E9EE167807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6a:f4:e8:57:7e:9e:fd:5b:88:c0:bb:e0:78:
                    9f:ac:c9:84:14:00:9a:d9:bd:d3:9b:02:bd:d7:cc:
                    3a:0a:c7:98:b3:b1:dc:d8:c6:6a:c2:bf:43:e9:70:
                    21:6c:09:fb:ca:72:45:6f:1c:13:56:cb:82:bc:c5:
                    5b:3f:8d:05:7a:74:90:c8:37:f2:7c:1a:84:70:7d:
                    5d:08:69:bc:35:ec:fa:f2:9e:2d:b2:7e:76:bf:46:
                    70:02:e2:ad:26:8a:f5:13:72:6f:bf:43:f0:cd:3a:
                    08:1f:50:ca:a9:6f:fb:40:63:f7:61:3b:fc:58:1b:
                    6a:3e:fd:18:f0:49:79:74:2e:fa:d3:c1:e3:52:05:
                    b1:ee:03:ae:37:78:2c:3c:f7:fc:95:b5:5c:a4:d5:
                    b1:bc:c6:c4:30:ed:52:a1:e9:bc:96:ff:25:92:62:
                    41:b1:95:40:1d:80:b2:eb:db:a7:92:c7:b2:4d:0f:
                    c6:73:c8:0a:ee:71:14:9f:52:ba:49:0d:47:dd:36:
                    6c:e2:e6:d7:31:c9:04:63:6f:bf:5b:a1:20:0a:01:
                    f7:b7:16:21:a6:9f:a6:f0:94:e4:5d:d8:4e:9f:55:
                    19:57:3d:20:ef:bf:e6:7b:55:ea:2a:17:d9:25:64:
                    17:24:46:18:12:80:46:77:f2:17:1a:c8:50:e2:8f:
                    64:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:4B:20:3C:F6:C5:A4:FD:2D:00:BE:B3:AE:A7:A3:E9:EE:16:78:07
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/0/5A4B203CF6C5A4FD2D00BEB3AEA7A3E9EE167807.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.140.0/22
                IPv6:
                  2804:63b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269378

    Signature Algorithm: sha256WithRSAEncryption
         12:05:f2:09:6e:bc:4d:5b:89:ad:53:1d:16:69:06:e6:19:36:
         5c:82:8d:63:52:42:f1:7a:79:7d:f0:95:91:dc:cd:11:1f:d7:
         db:3e:c8:f5:d2:20:70:56:36:18:f8:16:5f:03:76:3d:91:44:
         94:c6:f1:b2:26:3b:c8:5c:7e:56:c3:86:5b:1d:0d:16:fe:ac:
         91:95:06:8c:05:8c:40:fc:80:1e:5f:18:9d:46:57:54:89:f5:
         6d:6f:18:95:0b:b8:ef:f7:c1:b9:92:3c:e6:74:04:28:46:7f:
         5c:03:b8:18:4f:5c:9e:7f:bc:ae:ee:70:00:46:f3:0d:f6:cc:
         4e:8b:73:80:7f:df:94:76:9a:a9:fc:36:61:ab:65:be:19:d7:
         8c:6a:d7:3b:06:8b:13:91:a5:a5:e0:99:43:46:e3:f4:4b:bc:
         98:27:73:7e:4d:a7:d0:83:43:29:9e:c8:55:c9:aa:25:79:3f:
         00:83:1e:aa:38:6a:47:70:2f:62:ce:ca:bc:d4:08:b5:e9:be:
         91:ab:cf:5a:a3:76:1e:57:e9:c4:40:79:78:56:3f:c9:9c:5a:
         6e:ee:d2:2d:8c:b3:92:52:4f:1b:45:6a:29:0f:2e:d3:de:23:
         12:3c:07:d3:15:a4:2e:8a:29:48:e2:23:06:c9:6d:17:8a:f4:
         6a:24:75:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org