Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5C1B218A74E747DB3E0B98D77A5336B1E11F5C44.cer
File:                     5C1B218A74E747DB3E0B98D77A5336B1E11F5C44.cer (raw, json)
Hash identifier:          hgXh7C9E2+y4U/wkBR5ozzj2s6/sSg2Gjvy+mBY/gss=
Subject key identifier:   5C:1B:21:8A:74:E7:47:DB:3E:0B:98:D7:7A:53:36:B1:E1:1F:5C:44
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E47BF1DBCECF189FC550043D8A404C0BFB44D12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/0/5C1B218A74E747DB3E0B98D77A5336B1E11F5C44.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Sep 2023 15:14:15 +0000
Certificate not after:    Tue 24 Sep 2024 15:19:15 +0000
Subordinate resources:    AS: 266971
                          IP: 45.225.8.0/22
                          IP: 2804:4624::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:47:bf:1d:bc:ec:f1:89:fc:55:00:43:d8:a4:04:c0:bf:b4:4d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 26 15:14:15 2023 GMT
            Not After : Sep 24 15:19:15 2024 GMT
        Subject: CN=5C1B218A74E747DB3E0B98D77A5336B1E11F5C44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cc:cd:32:13:5a:b7:96:ed:75:71:ef:9d:9f:
                    3f:b3:79:2a:05:ae:76:1e:67:af:42:05:6d:bf:85:
                    69:bc:82:cc:8b:0d:2d:60:95:f8:d5:be:6f:be:37:
                    6b:7a:c4:aa:78:48:2d:a7:03:df:d4:74:75:48:f6:
                    9a:73:e7:68:4d:dc:aa:b7:b2:73:a6:62:99:6a:be:
                    89:c7:07:2a:99:50:58:b8:be:95:3c:06:ab:c3:82:
                    29:31:75:56:6a:71:88:53:23:d3:b8:fe:42:a8:2d:
                    91:86:ed:d5:1b:db:cd:38:d6:44:1d:24:a2:18:96:
                    04:bf:c1:54:fd:f0:45:f4:24:db:2f:39:48:89:9c:
                    91:31:8f:24:ce:fd:45:00:56:02:fa:77:a1:49:71:
                    c1:64:1a:b6:40:2a:8e:c4:cd:e6:b1:6b:fc:9a:9c:
                    b2:3b:0c:3a:42:2d:70:57:04:af:61:64:70:a4:54:
                    85:96:03:55:f2:f0:c7:07:1e:ea:39:e6:02:25:19:
                    2b:0e:2a:b5:6b:55:dc:d6:0a:30:68:49:ea:75:9f:
                    68:57:b9:18:3a:00:18:eb:66:8c:0c:c3:96:4e:79:
                    5d:77:57:a6:68:aa:3b:05:d4:3d:e0:1a:4d:66:c2:
                    3e:f5:a6:4c:e7:5e:26:a3:4e:38:b7:fe:56:af:43:
                    25:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5C:1B:21:8A:74:E7:47:DB:3E:0B:98:D7:7A:53:36:B1:E1:1F:5C:44
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/0/5C1B218A74E747DB3E0B98D77A5336B1E11F5C44.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.8.0/22
                IPv6:
                  2804:4624::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266971

    Signature Algorithm: sha256WithRSAEncryption
         87:f9:9b:94:1f:62:ad:55:1b:14:3e:51:77:53:96:53:03:4b:
         61:c2:1e:52:90:bf:81:c5:82:cc:ad:bf:d6:8e:d2:5d:6d:3f:
         2d:cd:14:c4:9a:6d:41:22:cb:e1:a3:6e:f5:1c:5d:5f:57:8d:
         18:cd:d8:8a:9d:89:d7:41:af:06:73:20:f5:dc:21:c5:d6:86:
         b0:40:13:f7:be:63:50:c0:55:58:a0:6d:2c:e8:23:f6:80:76:
         60:38:92:1c:51:e5:ff:2d:6f:5d:ba:67:2e:58:73:e2:c1:c3:
         61:75:33:6f:0f:2d:00:04:67:97:b9:7e:94:f9:2d:6c:3b:c2:
         96:66:d1:74:4b:ba:c8:25:81:36:7b:1e:6a:f9:42:fc:d5:2d:
         32:27:55:55:14:28:2a:1d:4b:dc:33:56:d5:4c:d4:04:6b:8e:
         68:ae:2d:01:54:f5:56:cb:50:43:a7:c9:06:9e:e2:c5:44:fa:
         fa:b3:9c:ce:f3:0a:d5:a1:85:3f:c8:d5:76:4d:f4:e0:2d:32:
         97:4c:7c:fc:3f:fb:c0:e4:dd:6d:61:a2:1c:50:8e:3e:e7:62:
         55:61:91:3e:64:5b:43:36:47:4b:d0:8f:99:eb:b8:74:b6:46:
         6d:3d:28:84:5f:27:7c:b5:f2:6e:97:a0:d2:db:92:8e:1e:6c:
         5a:b1:a3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org