Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5BEC08BCCA16445D3C059DF599902FB638236A3F.cer
File:                     5BEC08BCCA16445D3C059DF599902FB638236A3F.cer (raw, json)
Hash identifier:          m2RKjFqaSwIU7RBtdF0wCZaTD8nzTB0Lc3DV+9HJTqM=
Subject key identifier:   5B:EC:08:BC:CA:16:44:5D:3C:05:9D:F5:99:90:2F:B6:38:23:6A:3F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       25B92928A35598B58965929C543F730A60D81AD7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/5BEC08BCCA16445D3C059DF599902FB638236A3F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 12:52:35 +0000
Certificate not after:    Thu 13 Feb 2025 12:57:35 +0000
Subordinate resources:    AS: 266143
                          IP: 160.20.20.0/22
                          IP: 2804:3b58::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b9:29:28:a3:55:98:b5:89:65:92:9c:54:3f:73:0a:60:d8:1a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 12:52:35 2024 GMT
            Not After : Feb 13 12:57:35 2025 GMT
        Subject: CN=5BEC08BCCA16445D3C059DF599902FB638236A3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:18:87:3c:b2:9e:36:48:9f:c7:8b:35:bb:d2:
                    04:9f:72:60:fc:de:d1:96:8b:c1:87:be:f3:b1:45:
                    f4:a2:93:96:7a:21:b5:3f:1e:42:59:b9:9b:d7:09:
                    1d:39:35:53:7c:31:eb:62:74:de:a2:94:a3:09:36:
                    b9:8a:61:f3:64:70:38:2b:2c:c5:2b:9a:8e:42:79:
                    64:bb:91:dd:fb:d5:75:c9:59:62:3a:50:f6:df:38:
                    05:a8:8d:b5:2e:0e:15:a1:2a:2e:9d:24:e9:71:34:
                    f5:bb:fc:93:a6:4c:8e:d5:0f:27:04:89:cd:39:55:
                    c8:70:f0:bb:4e:e7:19:b5:45:f5:13:fc:e0:1f:98:
                    6c:2b:06:4a:63:80:96:73:5d:bb:44:5e:01:a9:b2:
                    a0:ad:5b:2a:42:64:93:09:f1:8b:b5:86:98:fd:16:
                    d7:da:dd:cd:28:e0:2b:75:25:96:a2:8d:4a:45:7e:
                    ab:da:f6:f9:91:1e:b7:09:3d:4a:67:81:10:17:8a:
                    bb:45:03:7e:d5:7f:8d:42:28:90:53:b8:ec:10:01:
                    5b:09:af:83:62:0f:d1:d4:08:0c:fa:b2:7d:a1:93:
                    c1:e9:71:5e:c4:68:13:62:6d:90:47:b6:c0:00:fb:
                    73:db:2a:52:e1:6e:35:8b:ee:1b:5c:80:81:5f:14:
                    c7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:EC:08:BC:CA:16:44:5D:3C:05:9D:F5:99:90:2F:B6:38:23:6A:3F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/5BEC08BCCA16445D3C059DF599902FB638236A3F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.20.0/22
                IPv6:
                  2804:3b58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266143

    Signature Algorithm: sha256WithRSAEncryption
         89:c3:b7:cb:8f:d5:c3:00:48:fc:87:be:42:ca:96:06:66:72:
         7c:36:96:97:ab:da:dd:c6:c7:db:1c:14:d5:f2:1a:63:c5:27:
         cc:41:0f:b5:9a:ed:cf:3c:d5:08:db:d8:75:ae:e6:0f:6b:9f:
         9c:b9:53:7e:3d:6b:74:32:f0:19:ce:df:50:cb:3d:9e:a1:f5:
         33:f7:d4:e1:e0:d3:cf:70:e0:c9:d0:64:98:9c:8d:fa:9f:52:
         10:90:97:14:02:79:57:cb:18:9c:8c:f8:18:c8:43:15:30:e8:
         e8:35:16:ba:20:e9:19:4c:da:3e:97:f3:09:56:90:93:45:8f:
         ea:77:44:32:ae:eb:4f:db:4f:07:17:4e:70:f9:ad:e6:9b:ba:
         b1:04:6d:53:4b:46:59:87:fe:4b:0a:28:ae:fd:34:6f:36:11:
         ef:aa:d8:6d:86:43:b0:f0:8d:f2:e6:7e:80:25:77:6e:a7:72:
         57:97:fa:fd:93:4c:54:ee:66:ad:41:98:24:ae:48:c1:7c:a2:
         a7:a7:34:39:e0:32:cf:f1:ef:db:0b:6c:e5:6a:20:9d:81:ef:
         54:ae:fb:3f:6a:0f:81:aa:8c:cd:1c:a4:5c:e6:c2:2c:46:2e:
         5d:75:27:e0:92:3a:95:41:2a:d2:44:3b:2e:2e:75:71:a9:1d:
         30:3d:20:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org