Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5AC857044932470260E44A2750076A9293F37835.cer
File:                     5AC857044932470260E44A2750076A9293F37835.cer (raw, json)
Hash identifier:          JdLBR6h1gAUZiW1/NvxAhTZeDSKQTpCKg6LVchkTVV4=
Subject key identifier:   5A:C8:57:04:49:32:47:02:60:E4:4A:27:50:07:6A:92:93:F3:78:35
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4E11D1A4CF799C5EC2BC10D2F675B2D1F44F9CD8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/5AC857044932470260E44A2750076A9293F37835.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 Jan 2024 00:19:16 +0000
Certificate not after:    Wed 29 Jan 2025 00:24:16 +0000
Subordinate resources:    AS: 271478
                          IP: 45.236.72.0/22
                          IP: 179.0.120.0/22
                          IP: 2804:7c24::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:11:d1:a4:cf:79:9c:5e:c2:bc:10:d2:f6:75:b2:d1:f4:4f:9c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 31 00:19:16 2024 GMT
            Not After : Jan 29 00:24:16 2025 GMT
        Subject: CN=5AC857044932470260E44A2750076A9293F37835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:6d:aa:de:7a:e3:e5:b5:57:fc:3f:9a:d6:
                    e7:94:df:18:2e:32:e6:eb:8f:d4:59:48:0d:1e:07:
                    de:ce:65:1b:88:25:6f:f2:4e:c6:13:86:f4:fe:ea:
                    b4:1b:56:87:cb:20:69:a4:dd:06:f5:df:96:e2:28:
                    57:b6:44:cb:b2:81:44:57:7e:cf:86:cc:89:6f:3f:
                    25:1f:e5:d7:2f:81:72:ec:6f:27:28:e3:64:f7:f5:
                    dc:8e:d4:1c:f0:c8:51:2e:c9:97:e4:b0:b8:2e:1b:
                    ff:df:06:4f:e2:6b:a3:1b:b6:f4:17:67:28:be:1c:
                    c6:f7:68:f2:04:45:15:0c:93:a3:54:31:19:93:fb:
                    20:00:b0:f4:1a:c5:b5:ee:be:70:8c:eb:8a:87:8b:
                    c7:c7:be:0b:c9:7f:17:17:e6:b4:4b:9c:3b:81:95:
                    9a:8b:7d:7d:8f:3f:c2:a8:9c:e1:8d:ee:1c:d2:d6:
                    12:c9:70:50:7d:ce:bb:b7:27:c7:7a:a0:5e:ed:27:
                    4b:42:ec:6f:65:41:a5:40:bf:c6:8e:93:1a:b9:fd:
                    43:63:8e:1e:f7:b7:62:f0:81:66:a9:3c:aa:10:7a:
                    1f:22:39:db:f1:2b:31:57:aa:a0:93:5c:4f:c6:0e:
                    10:50:b0:81:4b:0f:d3:61:71:62:46:7a:ae:9c:d8:
                    b3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:C8:57:04:49:32:47:02:60:E4:4A:27:50:07:6A:92:93:F3:78:35
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/5AC857044932470260E44A2750076A9293F37835.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.72.0/22
                  179.0.120.0/22
                IPv6:
                  2804:7c24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271478

    Signature Algorithm: sha256WithRSAEncryption
         38:83:7f:2c:b1:1d:fb:c8:e4:71:fe:53:fb:63:53:c5:a9:5f:
         d8:e3:9e:0b:9a:65:37:dc:0a:b6:5f:68:1d:86:16:df:87:d8:
         5c:18:88:36:f6:89:b6:bc:a7:88:40:3d:17:8f:c8:5b:16:66:
         36:e4:11:01:35:41:78:18:26:22:59:a6:64:47:64:e3:89:6f:
         9c:e8:80:a4:72:6c:73:62:6b:50:f6:30:d2:50:3e:27:d4:2c:
         04:90:03:bc:82:34:b8:35:6f:73:be:b6:1f:16:17:8b:e2:5a:
         d5:42:28:87:b8:52:ff:b9:65:33:04:a1:71:e2:11:47:99:3b:
         14:87:b8:63:c2:47:ed:72:cc:e9:65:1d:92:f6:f1:f0:bc:31:
         cb:3f:54:a6:57:f1:fd:63:8f:b8:17:0b:e5:f8:d4:a7:3e:fc:
         28:51:6b:dc:83:a7:72:19:c1:f1:38:b9:07:b2:7c:0a:a7:07:
         9a:69:4d:c1:88:2d:cd:f9:69:05:fe:30:76:10:26:d5:77:0b:
         79:db:60:85:46:b2:79:c3:1e:f4:81:83:d0:f8:aa:8a:8d:ee:
         2b:e7:11:9c:67:eb:ea:fd:61:fc:a7:f1:1b:77:de:c4:1f:bb:
         66:06:16:8b:84:e1:4d:c9:67:75:e3:28:3d:89:71:08:05:03:
         f2:a6:76:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----