Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5AE95251912A145E4AEB5B04A717C015340C0594.cer
File:                     5AE95251912A145E4AEB5B04A717C015340C0594.cer (raw, json)
Hash identifier:          lp1BECIvQqUqPBzrD812z9ZQLs0I6jIPLBSyjAxmhwM=
Subject key identifier:   5A:E9:52:51:91:2A:14:5E:4A:EB:5B:04:A7:17:C0:15:34:0C:05:94
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       564F24FBFFAD99B47369EC3AFC951D0950FA7627
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/5AE95251912A145E4AEB5B04A717C015340C0594.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 19 Aug 2023 01:40:27 +0000
Certificate not after:    Sat 17 Aug 2024 01:45:27 +0000
Subordinate resources:    AS: 52679
                          IP: 177.67.216.0/21
                          IP: 2804:c1c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4f:24:fb:ff:ad:99:b4:73:69:ec:3a:fc:95:1d:09:50:fa:76:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 19 01:40:27 2023 GMT
            Not After : Aug 17 01:45:27 2024 GMT
        Subject: CN=5AE95251912A145E4AEB5B04A717C015340C0594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:eb:2f:87:fc:db:4a:38:5f:b2:1f:96:ed:64:
                    e6:e4:c7:aa:38:41:d3:6b:20:0e:7b:7c:9e:72:a2:
                    51:a4:f8:9d:80:d0:85:70:51:f4:b0:23:2d:4d:5b:
                    96:1c:ee:3d:b0:4a:1a:21:a0:9b:d6:02:67:1a:e8:
                    cd:2a:24:b4:59:7e:86:ca:a0:54:30:27:59:d8:5c:
                    56:40:5f:b8:9c:d9:d0:57:2e:34:46:4b:5d:73:97:
                    d1:b8:90:04:5e:02:5f:57:f9:e1:39:f3:91:58:02:
                    35:76:52:48:26:05:9b:91:ce:a0:48:ee:c8:7a:e9:
                    e3:9e:b7:1f:c0:ba:56:a5:8c:15:b6:3b:37:1f:51:
                    a5:7f:b2:76:7f:82:42:fd:7c:bb:28:be:91:cd:82:
                    8f:61:da:f9:67:04:b3:f3:20:ed:2a:03:08:eb:4e:
                    4e:5c:23:83:c9:03:5d:c3:11:08:2c:56:74:1a:2b:
                    65:04:b1:31:63:f7:ec:e3:fa:17:86:4e:0c:03:9f:
                    97:8b:6f:a4:7b:02:08:af:7d:56:8e:58:e9:d3:af:
                    16:6a:f1:c8:5d:19:08:a3:be:5e:29:c8:15:31:01:
                    01:38:8e:4e:60:7a:6b:57:eb:91:a7:ec:4e:0d:5a:
                    c2:9f:b9:5e:7d:a1:62:b5:8c:67:22:42:ba:5c:83:
                    39:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:E9:52:51:91:2A:14:5E:4A:EB:5B:04:A7:17:C0:15:34:0C:05:94
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hmi7PRGu5nBm5y4tSzdwsJnfsc6NkxrcGu6LtxeSXxo5/0/5AE95251912A145E4AEB5B04A717C015340C0594.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.216.0/21
                IPv6:
                  2804:c1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52679

    Signature Algorithm: sha256WithRSAEncryption
         2c:a2:0b:81:98:8f:49:c8:92:16:db:9d:88:d7:04:f9:8b:76:
         2f:6a:c2:40:fb:9d:6b:6a:50:62:1e:f0:6c:47:41:6c:9e:29:
         75:15:a6:42:60:12:7f:a0:c2:e4:3f:8d:5d:c4:c2:44:c6:88:
         0d:81:04:53:80:e3:4f:38:c6:eb:88:f8:88:77:81:9d:68:97:
         83:b9:f5:f4:12:15:fd:ed:6c:05:4a:13:8b:9e:f4:d9:1e:7e:
         41:00:75:aa:79:4e:03:2d:d6:fd:5d:d8:ac:cf:93:3b:43:d5:
         a4:08:d2:88:02:e3:59:aa:35:8e:6d:bf:04:76:f9:94:7b:43:
         5a:e3:24:da:03:2a:1d:e9:5c:77:df:04:4a:12:2f:70:b9:c7:
         84:c7:39:d7:b3:09:bb:a7:94:c1:0f:74:4d:d2:97:63:08:34:
         d6:70:9b:cf:29:80:3f:16:bd:8a:04:06:1b:a5:39:e3:ce:5a:
         aa:b4:33:3f:40:a8:52:ce:15:a9:83:3b:ff:8f:32:9e:8e:b5:
         dc:2e:e3:2e:17:61:cc:99:96:b4:8d:b2:6f:87:df:f6:a5:bc:
         9d:45:08:c0:5e:8c:b8:da:43:38:0c:fc:a6:b5:17:b7:e4:c9:
         4c:8f:78:7c:8d:ad:8e:f1:aa:42:a7:f5:da:de:80:38:58:de:
         5a:3c:d0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:52:18 2025 by rpki-client