Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5ABB4A56B7F3875E27270A05E5A25A7C98157E08.cer
File:                     5ABB4A56B7F3875E27270A05E5A25A7C98157E08.cer (raw, json)
Hash identifier:          Uy8FbILkcqlo5nYjimRWZvwnOmUpix5YPqig52X93QE=
Subject key identifier:   5A:BB:4A:56:B7:F3:87:5E:27:27:0A:05:E5:A2:5A:7C:98:15:7E:08
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4552F1210BDFCDCD5EA2CA95CC27612770F6955A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/1/5ABB4A56B7F3875E27270A05E5A25A7C98157E08.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Nov 2023 19:22:51 +0000
Certificate not after:    Tue 26 Nov 2024 19:27:51 +0000
Subordinate resources:    AS: 269537
                          IP: 45.188.168.0/22
                          IP: 2804:6624::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:52:f1:21:0b:df:cd:cd:5e:a2:ca:95:cc:27:61:27:70:f6:95:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 28 19:22:51 2023 GMT
            Not After : Nov 26 19:27:51 2024 GMT
        Subject: CN=5ABB4A56B7F3875E27270A05E5A25A7C98157E08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:df:c6:6e:98:29:72:8b:a8:1d:a2:12:05:b5:
                    af:25:de:9c:75:73:fb:17:0f:12:6c:21:72:e0:82:
                    72:8f:6b:18:f7:0f:07:e3:b3:eb:02:ff:0f:55:60:
                    21:bb:31:f8:7c:38:21:0e:1b:ec:e1:72:42:de:26:
                    e8:09:12:64:44:45:99:45:0a:5c:e5:e1:9f:c3:f8:
                    34:3d:a8:06:f7:c6:6a:03:e4:ed:9e:f5:5e:67:8d:
                    1f:c8:ac:4b:a9:03:04:26:0f:53:84:2b:f7:99:47:
                    1a:b5:b9:03:61:c6:e8:4b:3f:0c:64:5d:54:a9:cf:
                    ad:23:f2:4c:c4:e7:9e:7c:9f:88:8c:0f:98:63:81:
                    d5:a8:f3:7f:e5:26:f0:e4:d4:24:62:eb:66:9d:a8:
                    7e:3f:ed:73:99:ae:69:49:ac:3a:c2:00:37:80:60:
                    cf:35:03:e9:95:6c:4b:04:35:1b:66:54:95:96:b8:
                    89:93:8f:d3:cf:9f:31:e2:c2:d4:18:6f:8a:26:fd:
                    f3:3e:f2:48:c6:73:f7:f7:67:cb:88:eb:13:14:b1:
                    15:d8:e6:7d:e0:ae:fd:21:a5:66:f3:17:db:09:51:
                    0c:05:f1:ca:ca:38:d0:73:59:db:32:17:f5:da:77:
                    86:d8:ec:83:d8:c1:91:9f:5e:f7:bd:22:3d:ed:34:
                    ea:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:BB:4A:56:B7:F3:87:5E:27:27:0A:05:E5:A2:5A:7C:98:15:7E:08
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/1/5ABB4A56B7F3875E27270A05E5A25A7C98157E08.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.168.0/22
                IPv6:
                  2804:6624::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269537

    Signature Algorithm: sha256WithRSAEncryption
         9e:e3:0d:cc:89:64:fe:eb:89:04:4d:fc:36:59:2b:ac:a0:77:
         4a:bc:c8:e5:7c:47:b5:bc:37:46:b3:6f:e5:53:d6:a3:9d:cb:
         03:e4:bf:a7:17:9e:21:c3:c1:e3:67:3a:f2:16:5b:41:b3:73:
         3f:ef:7d:7d:00:74:fb:75:8a:1f:97:91:e1:25:f1:ee:4e:55:
         0f:98:3c:df:92:5a:33:67:88:3c:49:a2:5a:d1:0a:b9:4c:dc:
         18:98:e4:b9:c7:74:45:ba:d7:20:19:f8:af:86:0e:ab:b5:1a:
         dc:6a:90:8d:14:85:de:4f:f3:ce:61:c7:13:52:f1:c1:cb:18:
         a9:9c:f4:a2:ee:3d:bd:8d:38:22:75:34:49:0c:ae:e5:7e:68:
         80:f1:de:c5:0f:9c:d1:44:21:4b:8d:bc:27:9e:ab:2b:69:d7:
         1b:f8:ec:b0:6d:d6:89:72:d4:da:47:60:db:4b:d5:6b:92:6d:
         5c:1a:4b:4d:b2:f3:84:7c:01:95:31:9d:3a:2d:9a:db:f1:65:
         67:63:97:dc:bf:28:2c:12:b4:bc:a5:81:62:3f:0f:65:e6:5d:
         09:de:ba:e4:c3:d0:ec:e7:ff:96:49:30:e0:09:26:8b:84:e7:
         0c:28:c3:50:21:cc:32:84:b3:13:d9:13:92:78:61:e6:fb:07:
         3a:e6:9d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org