Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5B6F8459FDB562D87F84F89C686EF8B86F5FD1C4.cer
File:                     5B6F8459FDB562D87F84F89C686EF8B86F5FD1C4.cer (raw, json)
Hash identifier:          GgRMH3kxgtAZwCJ4zwGOepSfMGt8oRtgr1aj4k9pnA0=
Subject key identifier:   5B:6F:84:59:FD:B5:62:D8:7F:84:F8:9C:68:6E:F8:B8:6F:5F:D1:C4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       481E4FBCD8BE260E78F2A8F157B5F5970999206E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/5B6F8459FDB562D87F84F89C686EF8B86F5FD1C4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Jun 2023 18:41:29 +0000
Certificate not after:    Wed 12 Jun 2024 18:46:29 +0000
Subordinate resources:    AS: 263541
                          IP: 191.5.164.0/22
                          IP: 191.241.20.0/22
                          IP: 2804:1398::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1e:4f:bc:d8:be:26:0e:78:f2:a8:f1:57:b5:f5:97:09:99:20:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 14 18:41:29 2023 GMT
            Not After : Jun 12 18:46:29 2024 GMT
        Subject: CN=5B6F8459FDB562D87F84F89C686EF8B86F5FD1C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c6:d2:1f:33:aa:60:a9:53:45:d4:34:51:36:
                    c7:67:75:df:e7:22:d0:8d:09:d0:70:32:d1:54:96:
                    ff:b8:cb:c3:b5:64:3c:c9:33:f3:70:d4:d3:a2:7c:
                    9d:63:61:16:96:01:a0:8e:c8:1b:ab:e9:16:71:3f:
                    0e:33:ec:c6:cd:5e:d8:52:da:e0:81:30:12:80:8b:
                    33:de:63:8a:65:7c:ee:6c:ee:92:6e:2b:ea:a9:fc:
                    73:80:85:4b:b9:10:42:80:09:4e:7e:85:9d:fe:71:
                    6b:2b:32:cb:d0:4e:80:44:2a:e3:03:60:47:f9:ba:
                    0c:0d:f5:37:8f:4f:19:4c:ed:7f:50:8f:06:43:47:
                    0c:87:58:3d:69:e1:62:36:93:a8:f7:a9:1d:f2:f4:
                    e3:5f:54:99:42:4b:44:98:b1:79:6f:49:e0:6d:07:
                    68:f6:ef:62:a8:f1:c3:77:58:c7:97:89:1e:c4:d0:
                    ea:b5:eb:7d:d3:83:57:8d:0d:2b:e4:79:0c:ec:21:
                    4a:aa:3e:d3:a7:7f:e0:86:c5:f3:80:46:e7:46:35:
                    ea:1f:09:8e:a0:da:c7:c1:9a:78:9c:34:c7:3e:78:
                    13:89:d9:41:b9:1f:77:0a:a2:d6:93:fd:75:9c:0e:
                    5e:d1:5e:6c:d9:eb:e6:fe:1f:52:29:39:c0:54:6f:
                    93:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:6F:84:59:FD:B5:62:D8:7F:84:F8:9C:68:6E:F8:B8:6F:5F:D1:C4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/5B6F8459FDB562D87F84F89C686EF8B86F5FD1C4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.164.0/22
                  191.241.20.0/22
                IPv6:
                  2804:1398::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263541

    Signature Algorithm: sha256WithRSAEncryption
         82:a5:a6:b8:c3:b1:0f:b5:0b:08:19:b2:c5:b9:35:10:30:cc:
         24:2a:e0:90:3a:3a:00:4c:b9:54:aa:a6:00:38:be:e6:88:4f:
         e8:fa:d9:c9:4f:75:68:c0:08:b8:c4:4f:0d:87:f0:6f:11:b9:
         81:f7:6f:f5:6c:b1:7c:c4:48:31:04:fa:6e:df:22:a2:51:c2:
         b3:1a:3d:eb:65:fb:28:2e:2a:ef:91:4c:7a:51:9f:ac:99:30:
         b6:b5:bf:b9:25:58:45:ce:a2:e1:af:6d:3c:d8:d2:41:f4:1c:
         e4:bd:0d:7d:66:35:37:b9:84:fd:68:83:7e:22:71:e9:82:7d:
         94:36:31:5e:8a:67:14:40:a8:70:5f:ab:2c:e4:95:4b:ae:0e:
         16:38:61:1c:be:83:d7:50:e3:e5:2e:e8:6b:06:cd:80:ba:a8:
         49:88:18:6f:64:82:57:45:5e:24:9d:e2:ac:32:be:50:72:72:
         7e:a4:5a:7a:c5:60:00:1b:c0:23:d5:b0:f5:ed:2f:a6:7a:f5:
         95:44:4d:3e:53:04:54:b7:1a:6e:07:c3:6b:aa:74:77:89:73:
         4e:0b:f9:13:e4:58:ae:5e:a6:31:7e:ae:c6:60:93:0e:a1:c9:
         98:bd:87:91:aa:3f:eb:2a:98:7e:15:09:73:94:07:ee:41:d2:
         32:12:f1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org