Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5B263F0F259C154495BFEADDE220CF73F0E6D7D0.cer
File:                     5B263F0F259C154495BFEADDE220CF73F0E6D7D0.cer (raw, json)
Hash identifier:          5QWsx9LqsmKxk+Xl2MmJLlN/rDag8EET4E58lyKBoH4=
Subject key identifier:   5B:26:3F:0F:25:9C:15:44:95:BF:EA:DD:E2:20:CF:73:F0:E6:D7:D0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       208A660DDB34C433F9CE47E6E67EE2C0CEF3B252
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/5B263F0F259C154495BFEADDE220CF73F0E6D7D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 21:11:23 +0000
Certificate not after:    Tue 03 Dec 2024 21:16:23 +0000
Subordinate resources:    AS: 52858
                          IP: 138.59.248.0/22
                          IP: 170.247.232.0/22
                          IP: 177.87.64.0/22
                          IP: 177.125.248.0/22
                          IP: 2804:774::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8a:66:0d:db:34:c4:33:f9:ce:47:e6:e6:7e:e2:c0:ce:f3:b2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 21:11:23 2023 GMT
            Not After : Dec  3 21:16:23 2024 GMT
        Subject: CN=5B263F0F259C154495BFEADDE220CF73F0E6D7D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:67:e8:a7:cb:d6:a0:3c:13:9b:ed:c5:53:7b:
                    a2:d2:37:45:69:48:f5:ea:8c:95:6f:61:41:94:70:
                    77:33:dc:23:e1:2e:97:cb:56:9e:42:ac:30:72:9f:
                    0e:60:83:1d:a1:45:6e:1d:fd:4f:e1:f4:68:7e:53:
                    20:c8:0a:92:78:0d:dc:a4:23:4a:e6:41:05:f5:f2:
                    4f:a5:bd:ad:b4:f3:b6:8d:8a:34:28:66:bc:5c:e4:
                    cd:c4:db:ed:b3:b7:52:f8:95:78:e4:f2:7b:d8:09:
                    55:00:b4:6b:b1:cb:76:65:67:71:ed:7c:c8:35:09:
                    01:94:21:45:81:e6:bd:2f:65:b0:98:41:4b:5a:a6:
                    4c:a2:af:d1:0b:a2:3c:0c:3a:2f:d6:7b:3d:33:81:
                    b4:67:10:53:6f:b3:48:95:ca:e3:14:2a:9b:02:12:
                    fb:49:22:ab:4b:13:13:ee:9b:89:bb:d1:c4:c8:80:
                    ce:d4:79:10:96:1c:f0:3e:ec:fb:1d:2d:0a:36:08:
                    84:ec:1d:ee:0b:57:b9:b5:b2:d0:ab:0a:49:89:0d:
                    a3:8a:2b:d4:fb:c1:58:f7:ea:af:eb:58:6b:ab:22:
                    93:60:28:a4:23:4f:dc:50:80:6d:49:50:5e:72:12:
                    85:ff:3b:65:35:a8:2f:4a:d5:6b:c9:13:60:0f:ea:
                    23:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:26:3F:0F:25:9C:15:44:95:BF:EA:DD:E2:20:CF:73:F0:E6:D7:D0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/5B263F0F259C154495BFEADDE220CF73F0E6D7D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.248.0/22
                  170.247.232.0/22
                  177.87.64.0/22
                  177.125.248.0/22
                IPv6:
                  2804:774::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52858

    Signature Algorithm: sha256WithRSAEncryption
         7c:3f:e1:ce:fc:a1:e9:3c:b3:0d:c8:fe:32:82:af:46:49:e4:
         3a:65:bb:6c:d5:9d:a2:e2:28:a8:c3:a3:f8:69:ba:46:31:f4:
         52:28:70:b8:4c:71:ba:ff:8e:f9:c4:91:d8:2b:fa:26:61:9f:
         54:de:fd:81:ca:f0:05:7d:d5:0f:0b:f3:ea:54:46:25:37:ce:
         bb:c2:56:87:31:b6:67:96:b1:ba:2f:79:b9:3d:be:2c:07:86:
         1d:63:9a:7a:6c:fb:71:68:00:c5:49:29:b7:a1:66:bc:f9:ca:
         58:56:21:1f:4b:9f:55:50:00:45:8f:e3:70:e9:29:85:b3:a4:
         11:ad:da:fe:2c:4d:8d:2d:3e:57:c9:d7:46:b5:66:50:7c:cd:
         c7:db:be:0e:bb:52:7c:4f:69:e9:0f:62:74:a9:0f:f3:ac:45:
         cc:ff:32:cb:1b:3b:3e:f0:25:2e:d3:2a:3b:f6:e6:35:58:f7:
         6e:87:57:37:7b:8e:93:69:89:be:ab:9d:63:30:38:54:de:d3:
         19:a5:62:ef:19:9a:39:ad:48:e2:b7:ec:c7:e7:11:e7:e8:de:
         be:19:5f:41:a0:d7:ee:01:33:3d:3b:65:56:fa:02:98:16:09:
         91:d6:1d:f0:2a:46:e9:0f:7d:a7:00:17:56:e8:f7:78:86:9e:
         7f:1f:9d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org