Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.cer
File:                     5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.cer (raw, json)
Hash identifier:          NDlDGRlwqduiMynQNt2lZf8J9Wry32jcEvo89TnfH6E=
Subject key identifier:   5B:5B:5C:B9:EE:F2:39:47:37:0D:A0:3E:71:D6:B0:51:CB:5C:76:41
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4D1520689667AB892027484D3D1CF2188A4CCCC8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 04 Jul 2023 19:45:20 +0000
Certificate not after:    Tue 02 Jul 2024 19:50:20 +0000
Subordinate resources:    AS: 52708
                          IP: 138.118.100.0/22
                          IP: 177.84.40.0/22
                          IP: 2804:2504::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:15:20:68:96:67:ab:89:20:27:48:4d:3d:1c:f2:18:8a:4c:cc:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  4 19:45:20 2023 GMT
            Not After : Jul  2 19:50:20 2024 GMT
        Subject: CN=5B5B5CB9EEF23947370DA03E71D6B051CB5C7641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3e:1e:35:ca:0c:34:b0:21:b2:b3:c9:45:cf:
                    57:d1:5d:dc:6e:24:43:1d:ea:85:04:8d:de:ec:ed:
                    48:59:9f:d0:c5:4d:72:53:75:4a:51:b2:a4:92:ba:
                    54:ca:77:eb:4e:12:8b:36:f2:75:79:38:dc:ed:d0:
                    b6:ea:d7:07:9b:bb:12:aa:2b:5b:cd:e8:45:7a:c6:
                    00:90:8c:c2:5e:41:e4:69:57:ce:b3:fc:b9:8a:9a:
                    16:b4:b1:3a:f8:bb:7c:37:6e:c7:e5:f0:0e:cb:7c:
                    ac:2f:f3:fe:4e:83:5e:d6:59:a3:2a:e9:10:27:31:
                    24:ea:74:16:8d:17:3d:ef:6c:24:55:81:ab:51:25:
                    99:7e:c5:f6:2a:45:b3:86:aa:11:b3:15:d1:5b:18:
                    60:29:71:44:80:4b:2d:03:04:50:92:19:23:c0:6f:
                    e9:a2:2a:fe:b8:9a:a6:81:40:80:29:e9:4f:ac:6e:
                    bc:53:69:ec:24:2f:7f:31:96:3b:00:a8:9d:0a:ec:
                    c0:3c:1d:b2:a3:d8:8f:c6:6d:11:d0:ab:e7:4b:a7:
                    6f:82:7a:45:5d:7c:56:c8:d5:73:ec:d1:17:9f:30:
                    75:ff:8d:8d:f1:3b:1d:f7:0f:17:45:44:ce:55:c6:
                    2e:b7:b3:31:b0:7e:80:4d:ef:51:96:b0:01:7c:c9:
                    aa:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:5B:5C:B9:EE:F2:39:47:37:0D:A0:3E:71:D6:B0:51:CB:5C:76:41
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.100.0/22
                  177.84.40.0/22
                IPv6:
                  2804:2504::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52708

    Signature Algorithm: sha256WithRSAEncryption
         21:10:f0:63:0f:59:bb:d0:52:4c:e2:4e:1c:ef:cb:d9:ed:b1:
         71:8e:bc:a6:ee:c2:be:76:d5:c3:8a:85:6a:69:19:82:96:0a:
         46:e1:a4:15:61:8c:34:a8:2b:43:45:46:2b:fc:81:2a:7f:c2:
         5f:9e:22:42:35:ae:3c:87:c1:97:f1:93:95:8f:d8:bf:5d:64:
         5a:64:8c:85:fd:b1:a3:3f:8f:f1:b5:a8:ba:50:2a:04:8a:20:
         e6:63:2b:cd:e3:b5:05:f6:b1:7c:46:ed:2e:c6:cc:13:ad:64:
         dd:fe:d3:4c:01:1f:22:6a:15:7e:2d:a2:0a:b0:af:0c:36:9a:
         28:ca:41:1b:f0:3c:d0:ee:54:97:2d:7e:8a:06:6c:24:5d:cf:
         34:d0:c3:a5:41:48:d3:dc:77:28:01:16:e5:0e:76:f8:20:6d:
         12:7d:00:8e:9a:15:89:06:57:84:c9:91:37:c6:02:d6:a1:b6:
         18:c6:72:e7:83:fb:65:a0:1e:60:e2:b5:b7:75:9e:82:02:9e:
         5c:1c:40:0c:03:54:e5:c0:76:6e:79:0e:19:2b:9b:4e:4c:b1:
         f4:f0:c8:da:d1:73:78:28:ed:fc:c7:83:e6:df:6e:4c:eb:8d:
         1c:93:d1:9b:2a:d7:c9:6c:34:b8:ef:50:73:9c:8b:62:41:82:
         de:89:12:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org