Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.cer
File:                     5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.cer (raw, json)
Hash identifier:          Z6pugV1yZsdPxGp34hoHxwNMcYmt7A/YP3nmVrFH/VI=
Subject key identifier:   5C:81:13:C0:9C:85:60:C4:BA:AF:63:46:00:80:DC:CB:C5:FC:9A:0A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       568C8CEB034C9E539ED99829253ADCA1689E36AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Feb 2024 01:36:29 +0000
Certificate not after:    Thu 30 Jan 2025 01:41:29 +0000
Subordinate resources:    AS: 264450
                          IP: 131.255.36.0/22
                          IP: 2804:1edc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:8c:8c:eb:03:4c:9e:53:9e:d9:98:29:25:3a:dc:a1:68:9e:36:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  1 01:36:29 2024 GMT
            Not After : Jan 30 01:41:29 2025 GMT
        Subject: CN=5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:c1:b7:3d:25:51:79:72:0e:89:1f:11:4b:
                    4b:09:3d:d7:44:83:59:2d:2a:98:ef:ee:1a:ae:cd:
                    e8:f1:d8:69:f4:e7:0b:51:7b:04:18:10:45:7a:1a:
                    e4:63:ff:65:55:bf:e2:34:a8:f2:82:c7:bf:24:29:
                    0d:13:6c:44:4c:c1:7e:97:80:78:b4:e4:9a:4c:ca:
                    18:b0:46:c9:86:af:46:88:2a:19:4c:63:46:56:92:
                    49:b8:37:e4:e2:7e:99:10:3b:6e:00:3c:71:a4:84:
                    b9:8c:17:d6:83:9b:50:d4:1d:70:f6:c4:bc:b2:bc:
                    ca:86:0b:46:8f:d5:51:9d:22:84:86:1b:78:46:6c:
                    50:3b:92:73:46:a9:47:93:af:f9:a1:12:d0:ec:c4:
                    05:c8:10:4d:bd:3f:4a:ca:8a:19:70:0d:7f:ac:67:
                    64:e7:33:d9:f6:49:23:08:8f:7d:1c:42:20:80:78:
                    cf:c2:2f:0d:89:9e:3f:d1:ab:38:13:c0:76:73:43:
                    5d:ca:25:3c:90:bf:5d:06:98:09:ff:c2:ee:a3:32:
                    82:42:f6:ad:a2:57:71:5e:cc:8f:89:ff:4d:3e:ca:
                    3e:51:11:bf:7e:fd:7c:3b:42:29:c8:8a:1d:e9:05:
                    2d:c6:c8:34:27:52:ad:99:81:b5:b7:a9:9f:92:7a:
                    0d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5C:81:13:C0:9C:85:60:C4:BA:AF:63:46:00:80:DC:CB:C5:FC:9A:0A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.36.0/22
                IPv6:
                  2804:1edc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264450

    Signature Algorithm: sha256WithRSAEncryption
         b2:d5:d8:05:b3:96:fe:38:63:27:26:a2:2e:4f:53:24:00:e0:
         44:16:9b:20:4c:8b:e3:6d:9b:1f:85:51:e5:5e:ae:93:2f:d9:
         ee:34:02:9e:60:44:9a:42:76:a3:8d:b1:79:89:38:8c:41:5d:
         38:73:01:11:47:cf:2e:82:8f:93:bd:72:3b:19:b2:a5:ca:4c:
         05:c3:66:be:e2:46:2a:09:4a:61:8c:44:f3:48:dc:d6:5d:a5:
         01:5d:9a:f5:10:61:4c:c0:47:f8:b5:77:0a:c6:a7:ff:85:e6:
         45:0e:02:c7:71:5e:46:64:5f:f0:38:cc:8f:af:cf:a8:a2:ff:
         9d:da:6b:fa:3a:bd:d9:7f:be:d4:06:66:4a:d2:e3:65:2a:4e:
         ce:55:5d:ad:a5:25:ed:6b:ca:d7:d7:34:d2:aa:2c:4e:2b:42:
         2f:c3:c7:f8:b8:b7:17:c5:70:24:a5:39:e6:03:a7:8b:8a:38:
         56:47:61:f1:8e:15:76:64:25:30:af:69:25:f3:18:e4:3e:17:
         3b:05:73:d8:78:6f:b1:49:31:0c:c9:4c:69:d5:9f:9c:c5:17:
         18:a0:f2:91:84:17:a4:d2:8d:71:c5:01:47:c3:18:fe:ea:b7:
         4c:9b:af:f2:7c:01:bb:9b:c3:69:58:b7:d7:6a:a4:b7:05:d9:
         ac:2c:26:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org