Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5AAF0BC4A9FBF3363CDD06A1C60C313152450B6F.cer
File:                     5AAF0BC4A9FBF3363CDD06A1C60C313152450B6F.cer (raw, json)
Hash identifier:          YsJRvhj9hjiSZbgDArKueGKehdOO1JLZvQDO8zq7f90=
Subject key identifier:   5A:AF:0B:C4:A9:FB:F3:36:3C:DD:06:A1:C6:0C:31:31:52:45:0B:6F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       604119B1BF640FE605ED0345D4F3369BA0529827
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/1/5AAF0BC4A9FBF3363CDD06A1C60C313152450B6F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Feb 2024 12:24:47 +0000
Certificate not after:    Fri 21 Feb 2025 12:29:47 +0000
Subordinate resources:    AS: 269022
                          IP: 45.178.144.0/22
                          IP: 2804:5e44::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:41:19:b1:bf:64:0f:e6:05:ed:03:45:d4:f3:36:9b:a0:52:98:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 23 12:24:47 2024 GMT
            Not After : Feb 21 12:29:47 2025 GMT
        Subject: CN=5AAF0BC4A9FBF3363CDD06A1C60C313152450B6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:91:1e:ab:c0:dd:83:c8:aa:b1:72:fa:bf:dc:
                    29:8f:29:85:29:d1:6b:d9:50:80:6b:5e:0f:39:28:
                    48:91:cb:1f:b9:9f:9c:3b:3b:07:c7:bc:56:70:79:
                    5a:fd:e5:11:bb:f7:8f:b5:51:16:c4:e5:e5:72:d8:
                    4d:5a:0f:f6:03:21:6f:f3:f2:b1:a9:1c:e1:8b:0e:
                    39:dd:24:a8:07:f7:d4:dc:6c:1a:58:49:02:af:a9:
                    12:d3:f1:d0:e6:28:55:3d:95:63:ce:48:d2:8c:32:
                    c6:88:46:0e:96:31:7f:d9:99:2e:17:2d:14:40:1e:
                    e7:f5:b8:be:50:fb:43:77:42:27:a2:fb:99:f9:bf:
                    bc:d9:7a:16:13:96:fe:09:59:51:0b:70:91:23:a3:
                    62:c3:e3:e5:98:0a:b2:04:b6:42:1c:1f:0e:63:48:
                    6c:e6:fc:e7:26:af:bb:9d:84:ea:6a:47:5b:80:4e:
                    63:e7:90:af:26:ae:04:f6:ec:9b:04:5c:2c:af:c6:
                    b3:da:cb:e1:be:a9:0f:a6:d0:e4:70:f3:c7:02:43:
                    a3:86:12:e9:5d:88:42:dd:d1:4a:5e:b4:3a:30:6b:
                    e7:31:16:17:4d:06:a7:de:1b:fc:1a:31:6a:89:ea:
                    41:d7:16:68:28:c1:76:4b:90:b9:94:1b:b5:2d:2b:
                    e7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:AF:0B:C4:A9:FB:F3:36:3C:DD:06:A1:C6:0C:31:31:52:45:0B:6F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/1/5AAF0BC4A9FBF3363CDD06A1C60C313152450B6F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.144.0/22
                IPv6:
                  2804:5e44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269022

    Signature Algorithm: sha256WithRSAEncryption
         9c:aa:d1:8f:38:2b:88:3b:28:c6:61:eb:36:73:66:8a:32:ee:
         de:f4:f1:e5:93:f8:78:3d:3f:2b:3c:49:e2:18:dd:f7:20:98:
         48:44:4c:b3:97:79:55:68:52:e1:e4:d5:26:8d:bf:30:b7:b7:
         3f:dd:04:ea:49:5a:80:f5:89:f6:8f:a8:82:ea:39:fb:6e:41:
         60:9d:e9:85:f3:23:c5:45:2c:97:8d:81:48:91:e7:ab:15:ca:
         77:ac:d6:73:fb:23:b2:34:91:5f:c1:aa:b4:2b:1c:e1:e9:ea:
         e8:26:d7:6f:a5:6d:59:7f:bc:85:e7:c5:47:6e:1b:da:10:08:
         a3:e9:de:01:37:ee:4f:4c:6e:4d:ad:28:f9:fc:c4:4a:7f:ed:
         ce:dd:c3:c2:8f:5b:e8:25:fd:5d:5b:7a:e1:2e:bf:c3:82:12:
         77:07:d9:17:2f:8d:d6:e7:15:4c:8b:22:37:bf:06:54:ef:66:
         62:b5:43:70:3b:e7:c8:8a:90:18:46:9d:56:99:0a:6b:b0:dd:
         8f:fa:58:28:df:19:8b:50:1e:ff:64:ff:a1:97:1f:3c:72:3c:
         41:7f:17:aa:57:75:bd:d0:ce:5c:69:49:e8:8b:34:95:97:b0:
         f6:56:61:9c:b3:4d:cc:c1:03:80:79:d0:66:31:ba:9a:80:8d:
         81:57:15:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org