Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5ACE36E601FCAE4AD4E037239FA375F66D09A61F.cer
File:                     5ACE36E601FCAE4AD4E037239FA375F66D09A61F.cer (raw, json)
Hash identifier:          TzM7kbDh9voyUibJqPmY1eg1natJGmkxrZ55Pvf7h2g=
Subject key identifier:   5A:CE:36:E6:01:FC:AE:4A:D4:E0:37:23:9F:A3:75:F6:6D:09:A6:1F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E047133AE2391F4AAC809E4E1D32F65BF9018AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/0/5ACE36E601FCAE4AD4E037239FA375F66D09A61F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Aug 2022 14:08:30 +0000
Certificate not after:    Tue 29 Aug 2023 14:13:30 +0000
Subordinate resources:    AS: 267125
                          IP: 45.228.236.0/22
                          IP: 2804:4880::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:04:71:33:ae:23:91:f4:aa:c8:09:e4:e1:d3:2f:65:bf:90:18:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 30 14:08:30 2022 GMT
            Not After : Aug 29 14:13:30 2023 GMT
        Subject: CN=5ACE36E601FCAE4AD4E037239FA375F66D09A61F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:94:eb:76:fc:f0:b8:f1:f8:c5:e8:ac:ef:05:
                    bf:5b:ca:89:28:8d:fe:59:fe:14:57:0b:0d:df:eb:
                    0a:4d:b5:2a:47:b0:5a:9c:c8:f5:42:25:2c:31:66:
                    09:7e:b3:11:6a:7e:56:bc:2f:22:81:c8:9f:11:9e:
                    a2:01:dc:e2:f7:24:ba:a1:c0:21:95:f7:d3:8a:0b:
                    3a:70:ce:0c:0e:68:43:16:aa:4f:ae:7e:40:ee:48:
                    cd:cd:76:cf:86:1c:36:18:38:9e:1d:1e:5e:3a:f7:
                    9b:c9:a5:96:9e:81:85:e2:13:69:5e:00:31:cd:ad:
                    85:c2:6d:a3:f7:a9:e9:54:61:92:88:17:64:e8:27:
                    15:ba:e6:c2:c1:ea:6c:0f:4b:7a:8d:a9:92:24:0a:
                    a7:dd:76:91:88:d6:fd:15:a5:6a:2b:c1:36:e9:30:
                    c5:4d:d0:86:78:dc:a4:b0:8a:87:8f:20:d8:f3:0d:
                    39:ef:ec:4d:91:48:5b:bd:fe:34:dc:6a:95:dc:89:
                    07:50:c4:58:7f:0f:dd:ed:4d:89:a7:d8:b0:1d:3d:
                    12:f3:fa:fe:6e:c3:5f:db:d9:b8:76:71:81:17:23:
                    68:8a:1f:e6:9e:bd:4d:e0:b3:6d:e3:bd:3a:ca:7f:
                    d8:26:8a:91:2b:f4:cf:13:05:0b:2a:66:cd:8e:4e:
                    25:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:CE:36:E6:01:FC:AE:4A:D4:E0:37:23:9F:A3:75:F6:6D:09:A6:1F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/0/5ACE36E601FCAE4AD4E037239FA375F66D09A61F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.236.0/22
                IPv6:
                  2804:4880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267125

    Signature Algorithm: sha256WithRSAEncryption
         7c:1f:90:0c:61:5f:cb:42:14:eb:3d:bf:8f:63:b6:18:b6:9b:
         be:f8:7e:f3:52:1d:2d:44:36:dc:39:2a:8f:b6:69:fb:c6:f5:
         a1:eb:c4:73:7f:cc:ea:42:ea:3c:2c:07:18:2c:f5:9c:75:f6:
         68:86:3c:8c:06:09:fb:10:77:d2:3c:a2:5b:03:9b:5d:09:4c:
         f0:ca:c9:df:70:ac:87:36:f4:ee:7c:f2:4a:f2:80:54:6b:28:
         cd:db:d7:aa:62:67:18:19:b2:7d:b7:c2:12:0b:10:35:e4:d3:
         e9:7e:c5:21:16:c2:f3:fd:17:46:a9:fc:44:ce:1e:48:dc:b0:
         c4:86:2c:fd:42:f3:41:29:cb:7b:93:ed:94:2f:ea:8e:46:ce:
         ec:5c:2b:4f:32:40:14:0b:c2:fb:53:93:6b:2c:19:25:1b:a7:
         26:dd:bc:73:06:ee:8b:9f:d5:75:37:a0:8c:10:e9:fb:12:b8:
         a7:fb:1e:56:b2:ce:e5:f6:01:af:32:6f:48:2e:34:90:e5:87:
         88:b6:24:aa:3f:35:e5:80:ff:c9:bd:3b:4c:40:38:24:90:c1:
         36:41:dd:d5:f6:f9:38:15:30:e1:ec:88:72:0e:90:ad:f5:29:
         eb:63:c4:96:d4:fa:93:4c:4c:a7:b2:18:08:fd:cc:a5:2d:eb:
         3b:1f:e6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:36 2025 by rpki-client