Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5CA565BD7A02508BEA8CBB6F61F3ADC6B885A38C.cer
File:                     5CA565BD7A02508BEA8CBB6F61F3ADC6B885A38C.cer (raw, json)
Hash identifier:          60sDhuHL6i86uG3rfqaFwm2nGv0M0edxhoqZox6HrjE=
Subject key identifier:   5C:A5:65:BD:7A:02:50:8B:EA:8C:BB:6F:61:F3:AD:C6:B8:85:A3:8C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1CA988869308B960718C978E73058F21966E7705
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/1/5CA565BD7A02508BEA8CBB6F61F3ADC6B885A38C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Mar 2023 20:17:25 +0000
Certificate not after:    Fri 15 Mar 2024 20:22:25 +0000
Subordinate resources:    AS: 270337
                          IP: 190.83.48.0/22
                          IP: 2804:6a74::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a9:88:86:93:08:b9:60:71:8c:97:8e:73:05:8f:21:96:6e:77:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 17 20:17:25 2023 GMT
            Not After : Mar 15 20:22:25 2024 GMT
        Subject: CN=5CA565BD7A02508BEA8CBB6F61F3ADC6B885A38C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3f:80:91:50:5e:b5:1b:5f:9c:cb:07:a6:66:
                    44:da:00:58:7b:40:dc:8e:21:f2:64:72:30:05:b9:
                    a6:c8:8a:e9:21:f1:2e:8e:a3:83:f1:3e:67:83:08:
                    f5:ed:4e:15:9c:51:b0:03:4a:6a:d9:d8:51:bf:8d:
                    00:7d:86:45:b3:8b:19:d5:66:eb:57:a4:c3:da:4a:
                    d9:f6:84:2e:8a:06:15:f9:f1:8c:e8:c5:31:e8:47:
                    63:fb:a7:ad:b0:b2:97:5c:f9:a7:fc:89:1f:4f:05:
                    10:03:07:94:97:a1:46:8f:0d:b1:7f:57:41:10:20:
                    48:3a:51:9a:1c:44:4b:59:80:12:04:80:a0:ce:35:
                    a4:84:cc:8d:37:59:c9:1c:f7:09:53:67:ec:81:c3:
                    50:1c:38:3f:c7:c7:1b:91:4b:93:78:d4:ba:51:57:
                    3f:3f:32:9b:ac:3a:61:2c:e7:3d:fa:f5:47:3c:15:
                    89:47:93:1c:b3:80:c9:66:98:e8:f7:2a:62:b1:b5:
                    06:54:71:42:9d:bc:b1:33:aa:79:90:4c:92:17:54:
                    1c:7c:ec:37:fb:13:f7:c4:e9:0b:c7:61:0a:6b:f7:
                    03:92:4f:79:c7:97:4d:ab:5a:63:9e:8f:8a:67:42:
                    08:28:b8:a9:2a:92:69:16:34:e5:5c:34:e7:8d:d2:
                    4e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5C:A5:65:BD:7A:02:50:8B:EA:8C:BB:6F:61:F3:AD:C6:B8:85:A3:8C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/1/5CA565BD7A02508BEA8CBB6F61F3ADC6B885A38C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.48.0/22
                IPv6:
                  2804:6a74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270337

    Signature Algorithm: sha256WithRSAEncryption
         48:a8:72:55:cd:14:83:d7:a8:c9:00:25:11:ee:76:79:eb:c0:
         1b:20:77:42:e1:b4:93:25:a5:45:cf:df:b6:f6:0c:ae:d7:06:
         15:21:57:d2:77:b1:e7:ea:3f:9e:85:97:58:85:3c:70:a2:5c:
         08:b9:bc:20:9b:66:58:23:12:bc:86:76:08:ad:dc:aa:c6:43:
         e9:d9:93:bb:07:3e:84:c3:18:1a:35:6d:39:29:cb:01:de:f8:
         f0:1b:42:08:22:5c:ff:43:85:d0:bb:a7:ea:d7:43:78:de:f4:
         54:50:e5:48:a4:81:16:da:0f:1f:25:3b:c4:f9:5e:fb:69:82:
         ea:88:d8:e5:8d:bc:42:ae:46:5a:08:c7:28:cb:3c:dc:45:ec:
         00:f5:d1:59:f7:91:d9:ef:77:bb:9d:e9:49:a0:d0:d8:e4:65:
         b7:b2:a5:6c:4b:0e:c6:49:c1:ee:95:13:95:4e:22:1e:33:9d:
         bf:6f:dd:d5:de:d1:35:87:f1:77:b2:4f:59:e7:b5:d5:7a:a6:
         e1:65:db:3e:d3:b1:1f:b5:f1:d7:fc:31:17:50:39:d2:4a:cb:
         60:70:d2:47:92:13:a5:2f:37:0a:de:83:5a:e5:a1:7f:26:be:
         df:af:af:62:65:c6:2b:20:3e:85:53:82:cc:fb:a7:77:b7:30:
         db:11:90:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org