Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.cer
File:                     5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.cer (raw, json)
Hash identifier:          Il/ohYtw0pBSbk+/FiyMCYUHlX1HEuyENJWhxGrjyy8=
Subject key identifier:   5C:31:15:C6:BF:BB:8C:C4:C3:F1:05:A5:CD:57:62:C3:C6:B9:06:21
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0B972D7FC553BBDD41670B77D62943ED12D9AD2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Feb 2023 13:54:45 +0000
Certificate not after:    Thu 01 Feb 2024 13:59:45 +0000
Subordinate resources:    AS: 268029
                          IP: 45.168.52.0/22
                          IP: 2804:56e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:97:2d:7f:c5:53:bb:dd:41:67:0b:77:d6:29:43:ed:12:d9:ad:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  2 13:54:45 2023 GMT
            Not After : Feb  1 13:59:45 2024 GMT
        Subject: CN=5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8f:3b:6b:4d:61:05:1a:2f:c6:53:9d:45:81:
                    21:73:0f:b4:2f:ff:83:9d:7b:81:43:ed:48:21:1a:
                    26:3c:18:dd:8c:32:39:e3:43:69:e3:a3:20:84:4c:
                    56:b7:0e:b5:fd:80:36:21:6a:28:15:1b:71:d3:40:
                    c4:5c:b1:3d:db:b9:21:f1:74:eb:e5:e1:65:fb:af:
                    f1:63:12:53:7f:bc:e0:73:64:69:47:23:3d:8f:ad:
                    d2:a7:6f:e8:27:88:c4:48:8b:45:58:fb:e1:74:94:
                    b4:83:c0:96:79:ce:9c:7f:c1:38:2e:33:fa:b9:46:
                    9a:1e:99:c1:2d:1d:ed:ab:4a:63:8a:59:cc:0a:05:
                    84:74:ea:40:c3:35:19:97:65:8c:4b:a6:51:70:6b:
                    0c:77:66:5f:aa:ec:37:91:c3:a7:6b:0f:8b:24:9f:
                    e5:6d:6e:3c:48:3e:7e:71:e8:9f:b8:54:92:1c:8e:
                    f6:d7:53:61:f9:02:8f:46:6c:e5:9e:dd:1e:75:67:
                    e4:f3:b3:1a:39:c0:fc:2f:1a:ec:04:a3:d2:32:71:
                    02:44:89:3a:f5:51:c4:a6:ba:23:0f:74:37:26:d8:
                    dd:09:6d:98:2e:b4:f8:cb:ec:4c:d1:28:16:a8:64:
                    a1:50:d5:64:b6:1c:20:84:47:7d:45:91:b3:05:d5:
                    11:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5C:31:15:C6:BF:BB:8C:C4:C3:F1:05:A5:CD:57:62:C3:C6:B9:06:21
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/5C3115C6BFBB8CC4C3F105A5CD5762C3C6B90621.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.52.0/22
                IPv6:
                  2804:56e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268029

    Signature Algorithm: sha256WithRSAEncryption
         3f:45:25:c2:5c:55:5c:7a:2c:a7:15:4d:f9:57:c1:a7:a2:25:
         9d:d5:a4:dd:60:9a:19:b2:00:91:0a:65:ec:ef:6c:60:0d:fd:
         6c:b9:12:9b:e8:0c:af:bf:9d:23:0f:06:d1:6c:d3:02:42:85:
         5b:4a:d0:c4:67:69:c1:7e:fd:92:b1:91:ba:ba:10:eb:a1:83:
         f7:67:2c:49:2c:6c:2b:10:3e:8a:70:9e:9b:45:37:d5:58:19:
         a9:6b:f2:7c:11:70:e8:8e:57:c8:1a:ca:d4:70:e6:7f:92:4c:
         3d:cb:78:28:3a:73:f0:97:49:d5:c5:ff:e7:5f:de:9b:68:0f:
         96:2a:5e:a1:02:3d:08:20:1a:e1:6f:98:a9:ef:3c:4b:49:8d:
         77:c5:64:e6:70:ae:7f:d9:6b:06:8d:f3:42:6c:bb:63:05:37:
         fc:bb:ac:a4:61:3f:f3:88:a4:dd:a8:02:15:5e:4f:bb:85:7b:
         2e:e6:1a:63:49:1c:68:03:72:05:6e:5d:19:e6:50:dc:6b:7b:
         80:89:57:07:4e:0e:44:c5:1f:eb:88:0d:22:de:97:a6:76:cd:
         8f:26:7d:62:7b:bd:94:72:4d:b1:2c:dd:a2:46:4d:88:97:a8:
         14:d1:1f:dc:dc:86:6b:d4:e3:2e:93:35:15:93:cf:2c:5a:b3:
         ca:64:83:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org