Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5B61BC1B9267AAB02D85A1C5E4636FF29E1F182B.cer
File:                     5B61BC1B9267AAB02D85A1C5E4636FF29E1F182B.cer (raw, json)
Hash identifier:          PYpOKClbNWuBarRTV63SFK461DWHzm+eZiaI+zgXffA=
Subject key identifier:   5B:61:BC:1B:92:67:AA:B0:2D:85:A1:C5:E4:63:6F:F2:9E:1F:18:2B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4427B40ABB980F58A3DCD31D4177E4C393463A48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/0/5B61BC1B9267AAB02D85A1C5E4636FF29E1F182B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Feb 2024 17:48:34 +0000
Certificate not after:    Wed 19 Feb 2025 17:53:34 +0000
Subordinate resources:    AS: 273658
                          IP: 2804:8a44::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:27:b4:0a:bb:98:0f:58:a3:dc:d3:1d:41:77:e4:c3:93:46:3a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 21 17:48:34 2024 GMT
            Not After : Feb 19 17:53:34 2025 GMT
        Subject: CN=5B61BC1B9267AAB02D85A1C5E4636FF29E1F182B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:26:d8:1d:8f:d5:f7:62:e7:d0:eb:9c:5d:
                    d0:cf:c6:ff:28:8b:10:7c:15:7c:ff:77:91:3d:00:
                    93:0c:f9:06:30:93:79:b9:6d:eb:54:ee:e1:81:15:
                    cf:35:8b:60:72:29:47:c3:f7:2a:03:82:78:10:f5:
                    14:63:e8:30:d4:d0:d0:7a:2d:56:14:89:64:3f:6f:
                    28:85:1e:f2:e9:bb:96:21:4f:01:69:ff:c3:dd:05:
                    c2:84:d5:1c:9d:3a:fa:2b:0f:77:0f:ed:13:9a:2f:
                    98:b3:d7:a5:fc:15:3a:6d:7e:fb:95:31:04:f2:b2:
                    b5:71:3b:40:b0:5e:31:bb:53:96:ee:af:58:a7:fb:
                    9c:96:d4:29:18:73:be:8f:8a:d3:f0:28:51:04:74:
                    2c:54:83:85:5b:2f:d5:9a:8a:53:9b:20:36:33:58:
                    98:00:01:f5:00:d3:5b:dd:75:17:c8:73:9c:e8:d2:
                    18:79:f5:9e:7d:8e:fe:25:cf:12:31:8e:35:48:6e:
                    12:9d:c9:c0:7f:9f:6a:48:4e:22:a9:d4:d1:c2:60:
                    6c:ff:54:bb:d4:d5:78:d4:a5:fe:46:2d:f7:ec:d5:
                    4b:f6:6b:e2:46:eb:b5:ad:ef:c6:f5:71:e2:1b:d7:
                    5d:5c:00:c6:cf:19:60:e2:af:c0:40:d3:31:09:f7:
                    68:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:61:BC:1B:92:67:AA:B0:2D:85:A1:C5:E4:63:6F:F2:9E:1F:18:2B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/38Hcd1im6iS6g7in2C3eh9zsRtt1t9D2caLegg9Ttu4K/0/5B61BC1B9267AAB02D85A1C5E4636FF29E1F182B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273658

    Signature Algorithm: sha256WithRSAEncryption
         6d:ba:78:ec:4d:f5:e8:22:08:93:56:c4:49:19:d5:44:46:54:
         23:40:3f:e1:81:8a:48:23:9a:25:e0:ea:45:cc:08:df:b7:f0:
         08:14:9f:07:77:d0:32:2c:89:46:1d:f7:f7:3e:4e:8b:8d:95:
         70:25:eb:83:c5:00:98:83:15:0d:d9:9b:14:a6:5f:d4:4b:02:
         57:a6:1b:4d:c4:8e:97:ab:c5:b3:a4:26:4e:05:d0:ee:97:cc:
         48:88:96:09:e6:2e:58:ac:8b:66:4a:41:7c:86:95:04:1e:4e:
         80:61:4f:62:03:08:64:d7:81:01:1f:44:31:d1:b0:f0:2b:d9:
         ea:06:1c:c2:34:3f:a1:e5:bd:1a:5c:41:93:6c:45:03:d0:5b:
         56:17:7b:a8:d3:54:26:60:1b:31:3b:aa:0b:14:30:87:a4:67:
         e4:a4:4e:4a:d4:bd:e5:5f:45:a9:90:51:a5:e8:09:09:b1:8a:
         aa:fb:af:0d:b7:ed:18:da:30:a3:24:65:d8:01:7f:00:8a:b0:
         15:b4:2f:e2:5d:df:a9:b2:c4:9d:72:33:0e:ed:d5:4b:21:69:
         13:8b:6f:19:19:b9:dd:93:51:c8:e7:8c:94:37:56:11:f0:8c:
         29:60:cf:65:e6:e9:49:ef:88:02:54:35:86:9b:a5:7c:39:c5:
         a3:e6:04:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----