Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5AF95CE8A4BD4C2BB361F4A7ADA108EFEEB6C90D.cer
File:                     5AF95CE8A4BD4C2BB361F4A7ADA108EFEEB6C90D.cer (raw, json)
Hash identifier:          /ykYNKy3LL+4itXBkLAj8AH3xqun+D4zDRz8yPvb3DE=
Subject key identifier:   5A:F9:5C:E8:A4:BD:4C:2B:B3:61:F4:A7:AD:A1:08:EF:EE:B6:C9:0D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E6730C0A067A85C6001A8E293A9E0CAEF5F29D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/At1KXBKEi9BohNVkNHX9a1CoX5DXjPD6M3jsSBYN8ps9/0/5AF95CE8A4BD4C2BB361F4A7ADA108EFEEB6C90D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/At1KXBKEi9BohNVkNHX9a1CoX5DXjPD6M3jsSBYN8ps9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jul 2021 21:31:17 +0000
Certificate not after:    Thu 28 Jul 2022 21:36:17 +0000
Subordinate resources:    AS: 263523
                          IP: 191.253.16.0/22
                          IP: 2804:133c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:67:30:c0:a0:67:a8:5c:60:01:a8:e2:93:a9:e0:ca:ef:5f:29:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 29 21:31:17 2021 GMT
            Not After : Jul 28 21:36:17 2022 GMT
        Subject: CN=5AF95CE8A4BD4C2BB361F4A7ADA108EFEEB6C90D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2f:50:17:04:c8:7f:f6:27:7b:4e:53:d9:68:
                    24:8a:5d:cd:4d:4d:31:59:ef:71:10:08:3c:70:94:
                    a3:21:26:55:b6:c2:08:8a:f6:b1:dd:45:d8:b8:f1:
                    40:52:89:65:66:33:f1:b3:00:f0:a5:7f:b0:b1:82:
                    dc:c7:09:4d:1d:a7:dc:9e:db:7d:91:f6:83:a1:c2:
                    4e:d9:0b:77:87:b3:8c:35:41:bc:24:d8:9f:90:b2:
                    65:2b:ad:bd:12:c1:91:99:f5:ab:f9:39:cd:19:80:
                    f5:95:e4:1f:02:f3:b3:08:c8:93:04:7c:4c:28:87:
                    c8:a8:6c:76:1c:4d:db:57:d4:25:f1:5b:10:e6:47:
                    a6:31:3a:78:6f:a9:f8:14:d3:3b:e5:6d:20:fa:cb:
                    a9:11:40:b7:5a:ac:c9:27:41:ed:f1:81:14:a8:95:
                    e9:27:1b:3c:b8:27:6d:82:64:ae:6c:be:fa:dc:09:
                    4b:c5:b1:b6:d5:91:dc:38:71:40:f6:70:66:7e:81:
                    17:ac:25:b7:f4:21:d8:2b:8c:43:6c:2e:56:1d:58:
                    ac:54:61:cd:31:59:36:8d:b8:3d:8a:19:6f:52:15:
                    03:25:74:39:0e:1d:92:fd:bb:b9:aa:23:54:d4:0b:
                    14:d3:e7:bd:8e:9b:48:46:ba:30:bf:61:7f:c7:27:
                    0f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:F9:5C:E8:A4:BD:4C:2B:B3:61:F4:A7:AD:A1:08:EF:EE:B6:C9:0D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/At1KXBKEi9BohNVkNHX9a1CoX5DXjPD6M3jsSBYN8ps9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/At1KXBKEi9BohNVkNHX9a1CoX5DXjPD6M3jsSBYN8ps9/0/5AF95CE8A4BD4C2BB361F4A7ADA108EFEEB6C90D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.16.0/22
                IPv6:
                  2804:133c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263523

    Signature Algorithm: sha256WithRSAEncryption
         4f:6b:74:8e:2c:5a:06:ce:6d:f8:d0:04:e8:03:92:2e:fb:bb:
         1a:be:a0:29:e2:20:16:09:cd:5c:4e:a1:53:ac:38:71:5e:00:
         1e:7c:cb:a0:16:e0:f8:a5:1d:f0:0e:14:96:04:cd:ea:2e:60:
         01:20:81:01:3d:f5:08:d6:65:9b:e1:d6:fa:5f:c8:8b:46:a4:
         00:a7:d5:9b:9b:f1:fc:53:c7:3f:7d:b4:f2:41:df:75:a6:22:
         f7:a1:38:08:31:bf:59:55:58:d6:cb:ac:50:08:99:b9:48:f0:
         6a:ef:50:a7:b4:91:6a:1b:e2:2c:24:2c:50:b3:1b:eb:62:3c:
         4d:1c:03:99:b4:30:ae:18:fc:6f:ee:ea:18:c9:c2:9a:9e:c0:
         c7:fd:45:15:1a:10:74:11:20:d3:c2:52:2b:7e:26:d8:ab:ac:
         a1:58:ce:b4:39:c5:5d:d2:d7:5f:f4:60:a1:67:e6:46:ba:a5:
         8b:7c:76:b8:6a:81:54:77:31:a5:18:f3:d8:bf:10:c8:1d:a7:
         27:fb:ef:b2:2f:11:d5:36:e7:75:47:e7:07:ef:77:4f:9a:60:
         3a:1c:16:c4:30:2d:a8:1a:d6:11:b3:bb:87:a6:2b:1c:f4:53:
         8f:f4:47:3d:b3:44:ab:c6:88:07:1c:20:8d:dd:68:41:08:bb:
         64:68:75:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org