Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.cer
File:                     5B0E34B275C876C4B43F01DC71D28BE4396AE47A.cer (raw, json)
Hash identifier:          l50jKJKfAfQN/M+wcCQ1dXCZ2/BCX2nKlWHFOmUek5Q=
Subject key identifier:   5B:0E:34:B2:75:C8:76:C4:B4:3F:01:DC:71:D2:8B:E4:39:6A:E4:7A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       766A89470A55FC8A5765B0A950EE153FEDFF5FBA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Jan 2024 20:05:14 +0000
Certificate not after:    Fri 03 Jan 2025 20:10:14 +0000
Subordinate resources:    AS: 268786
                          IP: 45.172.168.0/22
                          IP: 2804:5aa4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6a:89:47:0a:55:fc:8a:57:65:b0:a9:50:ee:15:3f:ed:ff:5f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  5 20:05:14 2024 GMT
            Not After : Jan  3 20:10:14 2025 GMT
        Subject: CN=5B0E34B275C876C4B43F01DC71D28BE4396AE47A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:d8:1a:ee:49:6c:02:10:13:5a:9f:26:54:
                    a6:3b:d4:1e:6e:16:0a:e1:98:0e:6d:94:50:08:8b:
                    3d:d7:b3:5c:6f:4d:55:86:3f:62:2b:22:c1:b0:8d:
                    43:54:3f:93:29:f6:fd:14:01:b2:ab:6b:1f:50:85:
                    18:96:c9:61:af:b6:40:a8:00:ad:6a:1f:be:f1:77:
                    62:d2:ea:64:9a:37:5c:a9:d2:2d:cf:4e:8b:e6:4a:
                    13:36:ad:69:df:ff:fd:83:8a:39:2b:2a:1a:6a:59:
                    02:c8:f7:cc:e8:ed:fd:f3:2e:41:10:a3:01:2b:be:
                    ca:6e:51:51:99:e5:ce:28:b2:8b:37:f0:b0:00:06:
                    e4:a8:f9:1e:a6:f5:ca:60:cb:50:3b:86:f2:be:b8:
                    83:e3:4d:1d:d0:d8:7d:6d:b0:3d:e9:09:d0:84:c6:
                    03:6b:2c:31:53:dd:27:b1:71:41:cf:56:38:c8:c0:
                    99:22:c3:4b:8a:1c:47:ae:17:48:8b:49:9e:41:65:
                    3c:c7:dc:be:49:0c:90:e9:ec:59:55:f6:40:e5:64:
                    b9:9f:7b:c4:0c:82:8c:ed:3a:13:42:e6:3a:04:39:
                    ba:ca:0a:27:81:58:62:d0:a1:ad:8f:16:a1:1a:76:
                    25:87:31:08:74:85:b8:f0:f8:91:d4:d6:a5:ff:83:
                    cc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:0E:34:B2:75:C8:76:C4:B4:3F:01:DC:71:D2:8B:E4:39:6A:E4:7A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.168.0/22
                IPv6:
                  2804:5aa4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268786

    Signature Algorithm: sha256WithRSAEncryption
         20:47:47:3c:dd:dc:25:f2:5e:b7:08:22:21:e2:18:52:50:d0:
         a2:47:fb:0e:f9:c5:f5:d6:ee:be:ec:87:a2:b2:94:64:1a:c4:
         cb:16:42:3d:60:88:56:95:65:5d:98:94:c1:63:cf:ee:97:42:
         7e:bb:d6:dc:b3:ec:89:11:86:fa:15:d0:35:45:c9:86:31:c1:
         45:70:f8:ff:7d:e2:7a:dc:77:0c:82:55:4f:34:31:29:08:68:
         46:3b:c8:6a:04:31:99:bd:4b:c8:c3:b6:7f:82:43:dd:44:d1:
         eb:cf:8c:ea:58:7e:15:1d:9b:94:0d:68:1d:ba:b9:8b:c8:dc:
         78:af:59:05:f7:f0:74:ec:54:7c:f2:83:08:fa:9f:1e:bc:77:
         8e:dc:b4:f1:8d:68:30:fc:91:e0:8d:8d:e6:57:9e:e6:bf:27:
         97:d3:df:c7:25:45:04:f0:9f:4b:9f:d3:e5:67:8a:ea:be:c0:
         0a:f4:d6:39:76:6a:0a:83:92:90:8b:19:9e:e5:4f:92:fd:0a:
         d8:0b:52:28:40:d9:a7:a3:d7:4c:92:c2:d1:ad:bc:44:f1:d2:
         38:a0:cc:78:87:f9:97:0c:95:61:36:60:b6:4f:50:b9:54:54:
         c1:d5:1a:b1:63:29:c0:9c:b7:bc:cb:60:e5:7b:1b:2e:6a:a8:
         c3:b0:11:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org