Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.cer
File:                     5A818535C81DE2F3D1470551E35BAA5F089D9720.cer (raw, json)
Hash identifier:          9laHvwdaLZS+9PKXdNVOo7s77QDFNce044HtZQQHD0g=
Subject key identifier:   5A:81:85:35:C8:1D:E2:F3:D1:47:05:51:E3:5B:AA:5F:08:9D:97:20
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1F170E1BD6F5CCB3C3C90348AAEE5287D6B4E2B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Jun 2023 14:02:57 +0000
Certificate not after:    Tue 25 Jun 2024 14:07:57 +0000
Subordinate resources:    AS: 52737
                          IP: 177.85.56.0/21
                          IP: 2804:7964::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:17:0e:1b:d6:f5:cc:b3:c3:c9:03:48:aa:ee:52:87:d6:b4:e2:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 27 14:02:57 2023 GMT
            Not After : Jun 25 14:07:57 2024 GMT
        Subject: CN=5A818535C81DE2F3D1470551E35BAA5F089D9720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:79:01:ed:fb:e2:c6:00:2c:00:b1:21:0f:e2:
                    2a:98:84:3f:a0:15:d8:5c:a8:5b:35:c5:1a:2f:50:
                    39:4f:d9:9b:89:4d:87:e7:d0:91:03:17:a4:6c:f1:
                    89:67:dd:dc:9d:12:cf:6a:34:42:36:30:94:56:36:
                    88:77:42:ed:75:15:47:c9:c2:96:a4:4f:0e:b2:cd:
                    aa:5b:e4:cc:b0:38:54:14:ba:9d:41:3d:5b:03:f8:
                    33:9c:f1:1d:68:d1:42:49:39:35:fd:e9:3c:3e:6e:
                    ea:4b:b7:48:76:0a:3d:c1:96:f9:c5:af:71:e9:d4:
                    07:48:a6:d7:b3:77:23:27:9a:63:37:e4:b0:ea:b0:
                    27:40:2c:12:1d:e5:70:4c:1f:8a:82:95:46:5f:d2:
                    7c:a0:28:46:ee:d2:b1:c1:e7:41:cf:86:fd:1d:d2:
                    10:12:2d:e4:90:4c:4a:24:dc:bf:cd:fd:3e:e4:cb:
                    e7:a4:78:7f:b7:ba:62:3f:bc:c2:4d:c5:da:04:7b:
                    95:bd:99:37:4e:18:ef:95:e1:08:51:91:e3:83:b9:
                    80:83:d3:4f:b9:63:49:de:34:55:d2:32:84:1d:70:
                    f6:ed:d8:97:bd:ec:f3:6b:93:98:6e:5a:d9:5e:2b:
                    9e:7c:cb:01:a4:21:f1:ec:eb:79:1c:9a:09:ce:a1:
                    97:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:81:85:35:C8:1D:E2:F3:D1:47:05:51:E3:5B:AA:5F:08:9D:97:20
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.56.0/21
                IPv6:
                  2804:7964::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52737

    Signature Algorithm: sha256WithRSAEncryption
         95:c0:37:99:08:bc:69:4b:ea:61:d1:1d:8e:68:e8:41:79:a2:
         87:05:04:dc:5a:5c:66:9b:1e:fa:3e:9c:fb:15:c4:1c:78:1a:
         d9:18:ed:69:2c:a4:39:3b:79:53:2a:be:42:86:2d:dd:61:a3:
         82:7d:67:1d:a2:4c:60:d8:8a:87:9b:b5:27:8d:aa:87:ef:ec:
         1b:49:fa:60:12:a4:cb:a8:dc:de:f1:de:32:be:dc:ed:7a:2f:
         a3:8f:2a:33:3d:53:3e:f9:5e:19:95:6f:71:c0:b6:3e:ed:c3:
         5b:58:b7:6c:4a:c9:19:f4:a1:bb:72:e3:d5:13:29:4c:4e:c1:
         87:1b:5d:2e:a4:15:35:f3:31:3c:5d:21:d9:8e:fb:98:be:04:
         a4:74:77:a5:fe:a1:f4:c7:e4:68:1c:37:cf:0c:3b:eb:34:aa:
         ee:ee:37:c2:3f:8b:ca:fb:94:f2:21:9b:f1:db:6d:77:6b:53:
         54:e9:ff:43:25:3b:24:d6:ce:21:ca:84:11:72:d1:79:e8:9c:
         1d:61:e1:51:cd:db:d4:c1:a6:91:e6:20:e1:a8:5f:73:14:c0:
         d0:53:aa:cb:fa:6d:45:97:5e:62:84:c1:bc:65:8a:db:74:a3:
         cd:4f:7c:fe:fc:7b:23:c6:26:bd:fd:03:72:8d:47:fe:72:ed:
         30:5b:f2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org