Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5B245D4B2E1FD3A23E0997290911E64D18049A8D.cer
File:                     5B245D4B2E1FD3A23E0997290911E64D18049A8D.cer (raw, json)
Hash identifier:          ziIKEWzSx4/0wT1ux5WwaUzTG2mBAFytysI2MDaOHN0=
Subject key identifier:   5B:24:5D:4B:2E:1F:D3:A2:3E:09:97:29:09:11:E6:4D:18:04:9A:8D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       01A96F045E7139420BDF5994B235A4D233036622
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ed4zsYouLN1ahnLxA1mVkMNMKZPVHNT4M3jLjmN2K5GH/0/5B245D4B2E1FD3A23E0997290911E64D18049A8D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ed4zsYouLN1ahnLxA1mVkMNMKZPVHNT4M3jLjmN2K5GH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Jun 2022 18:11:49 +0000
Certificate not after:    Fri 16 Jun 2023 18:16:49 +0000
Subordinate resources:    AS: 268451
                          IP: 45.161.104.0/22
                          IP: 2804:516c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a9:6f:04:5e:71:39:42:0b:df:59:94:b2:35:a4:d2:33:03:66:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 17 18:11:49 2022 GMT
            Not After : Jun 16 18:16:49 2023 GMT
        Subject: CN=5B245D4B2E1FD3A23E0997290911E64D18049A8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:79:f4:db:33:7b:3e:b1:e0:6a:fd:de:d6:ed:
                    c5:fe:25:e2:71:4b:18:83:21:22:71:4c:e6:fa:77:
                    1e:53:91:18:ec:25:40:2a:62:aa:c7:bb:85:76:95:
                    b4:1d:a8:e9:5d:6a:30:c7:f3:3b:80:a1:67:fc:4d:
                    4f:e7:0e:72:db:7f:11:c6:74:b7:ce:32:30:53:b3:
                    e3:25:95:c9:63:63:03:e4:57:47:6b:79:b3:9d:39:
                    87:c6:ba:9e:ca:91:2b:5f:89:e7:70:50:40:4f:3b:
                    1d:88:a1:a5:03:b5:bf:5f:fe:5b:1a:05:5d:18:a1:
                    7d:a7:26:44:1b:d6:e2:ca:c7:1c:03:34:f0:20:4f:
                    44:10:f3:5f:c4:cf:67:76:4b:08:0a:56:fc:32:02:
                    cb:89:e4:59:b5:41:f4:44:f2:c3:f0:70:c9:16:e8:
                    06:02:d8:0b:c7:2c:e3:0e:39:a3:4c:96:90:b2:a8:
                    b5:5d:cc:a8:73:36:e9:9b:d2:75:e6:3f:6b:b0:e0:
                    93:79:62:a4:bf:13:55:a5:ee:51:fd:7f:c0:54:ff:
                    bc:29:dd:5a:f0:c0:6d:6a:58:a1:aa:88:ed:3c:d8:
                    29:6b:2f:a8:75:2d:3d:e9:77:83:01:a5:3d:e1:6c:
                    f8:7a:d2:44:dd:00:56:ab:83:a1:4b:d9:6a:b8:89:
                    46:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:24:5D:4B:2E:1F:D3:A2:3E:09:97:29:09:11:E6:4D:18:04:9A:8D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ed4zsYouLN1ahnLxA1mVkMNMKZPVHNT4M3jLjmN2K5GH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ed4zsYouLN1ahnLxA1mVkMNMKZPVHNT4M3jLjmN2K5GH/0/5B245D4B2E1FD3A23E0997290911E64D18049A8D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.104.0/22
                IPv6:
                  2804:516c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268451

    Signature Algorithm: sha256WithRSAEncryption
         0e:7d:2d:3a:53:44:4b:d8:87:6f:d8:d6:27:06:33:dc:a7:c7:
         64:d1:fc:a3:ce:6d:50:e5:3b:ce:72:24:ff:7d:30:41:f3:fb:
         c2:50:e0:8a:a7:5f:ce:59:db:2e:c2:99:78:f7:7d:d8:c6:6b:
         a1:fe:0e:3b:93:41:de:6f:f8:c2:0f:5e:6d:c6:51:e0:52:07:
         df:c1:00:c5:f5:f1:3d:00:b3:28:ed:e4:f9:7c:ef:80:9a:1b:
         03:a1:c5:0e:3d:1c:82:64:1b:93:42:65:4e:e3:d4:af:22:02:
         dc:c9:2a:cf:e0:6b:a2:c1:89:d6:3e:17:d4:0e:9d:06:50:e9:
         7a:23:b0:6f:85:1c:70:a8:b1:21:7e:36:77:9b:ba:c7:d1:4b:
         af:a7:1b:9d:d7:fa:24:f5:65:30:7d:4f:9b:ee:7c:d0:b3:03:
         4f:1b:2c:71:8a:0b:c7:9e:b4:ed:28:f9:18:6a:78:84:d9:ee:
         5e:4a:11:6f:35:ed:ba:78:d6:55:2b:36:f1:de:b9:4e:6d:23:
         24:42:d1:cc:ce:51:ea:f8:87:18:5a:60:e1:41:c5:36:0f:31:
         90:c2:10:7f:bf:05:c7:a1:4f:8e:f3:a6:3a:13:3b:ca:77:cc:
         d9:65:bb:34:81:33:a8:e2:8a:45:a5:16:42:d0:d4:73:aa:12:
         05:d1:76:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org