Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5CBF3544CCCBCBD0ACACE13E02404799B3EF8FF6.cer
File:                     5CBF3544CCCBCBD0ACACE13E02404799B3EF8FF6.cer (raw, json)
Hash identifier:          M1xRkQGOwOI/yV5jQUte4S6CFPTkIHlPTIkNpvo03Ng=
Subject key identifier:   5C:BF:35:44:CC:CB:CB:D0:AC:AC:E1:3E:02:40:47:99:B3:EF:8F:F6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6F74DE92FF61C7DBA3DB937479A2832FF5C4E1AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EQhFYczXWdSGT6rw14cKyabwXPwDus8P72nMZrUhyABr/0/5CBF3544CCCBCBD0ACACE13E02404799B3EF8FF6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EQhFYczXWdSGT6rw14cKyabwXPwDus8P72nMZrUhyABr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 18 Oct 2023 17:10:49 +0000
Certificate not after:    Wed 16 Oct 2024 17:15:49 +0000
Subordinate resources:    AS: 267601
                          IP: 45.71.68.0/22
                          IP: 2804:43f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:74:de:92:ff:61:c7:db:a3:db:93:74:79:a2:83:2f:f5:c4:e1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 18 17:10:49 2023 GMT
            Not After : Oct 16 17:15:49 2024 GMT
        Subject: CN=5CBF3544CCCBCBD0ACACE13E02404799B3EF8FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0c:58:49:84:cb:ee:86:c2:2c:f3:62:d0:f0:
                    52:4d:9e:b3:7f:a0:2a:df:8f:09:df:7a:2f:2e:0e:
                    79:81:24:36:ba:c5:95:7c:91:21:bd:c9:24:0b:7a:
                    76:91:2c:ae:d6:d3:2e:29:50:7c:b8:33:98:d1:2e:
                    08:3f:dc:0b:a9:fd:22:e9:ef:21:06:33:d6:7b:ef:
                    70:3b:ff:9a:1d:ee:55:28:6b:e8:f8:56:d3:61:c5:
                    f8:c8:8f:ed:bc:3a:69:1a:1c:90:a7:0f:06:62:dd:
                    ce:56:77:cd:0f:54:44:36:b8:ba:38:45:3a:19:0c:
                    35:a7:a5:d1:c2:d4:6c:cc:62:69:45:02:9b:a6:2c:
                    1a:9c:2f:1b:a0:39:c7:d4:be:8c:f8:31:19:fc:1b:
                    57:59:52:00:0d:13:5e:72:4c:c2:68:99:80:67:85:
                    17:c1:d8:cb:6f:ee:db:3d:d2:f7:12:81:fb:b6:0b:
                    40:10:e9:c5:4c:bf:b0:01:b8:00:7d:41:d2:7e:3d:
                    34:d5:81:13:81:a7:41:d7:52:76:4f:08:7b:34:65:
                    7c:4c:47:c5:ce:cd:d7:51:60:1b:25:a7:d2:6c:f7:
                    36:d3:bc:f6:d0:cd:ae:5a:2b:35:fb:10:5b:64:ab:
                    f2:de:34:e3:5b:02:19:a6:58:38:48:59:1a:ba:77:
                    e1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5C:BF:35:44:CC:CB:CB:D0:AC:AC:E1:3E:02:40:47:99:B3:EF:8F:F6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EQhFYczXWdSGT6rw14cKyabwXPwDus8P72nMZrUhyABr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EQhFYczXWdSGT6rw14cKyabwXPwDus8P72nMZrUhyABr/0/5CBF3544CCCBCBD0ACACE13E02404799B3EF8FF6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.68.0/22
                IPv6:
                  2804:43f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267601

    Signature Algorithm: sha256WithRSAEncryption
         16:5d:87:d7:d8:8c:ff:3b:13:21:e6:d5:d6:b1:d0:59:a4:2d:
         71:b5:78:81:7a:d9:29:de:91:42:c7:53:13:3e:ad:23:34:60:
         d6:b0:3a:44:8b:b0:8b:bd:05:a2:6f:93:d2:6a:ae:1d:97:41:
         52:b2:1d:3f:31:c7:49:f3:6e:f0:ba:ee:ae:fa:df:61:5a:3d:
         ee:91:1f:0f:20:53:e4:9b:a9:d0:bc:70:ab:b7:0b:72:b1:1e:
         46:eb:f6:86:30:17:69:9e:5f:9d:5c:43:71:27:72:89:0e:ee:
         ff:3c:8d:94:b6:51:65:c2:99:49:ca:35:4b:f2:8f:5a:2d:a5:
         57:4c:a1:c9:1e:5c:ec:39:02:15:eb:fc:30:05:9e:ff:88:af:
         62:50:e3:33:7f:ca:70:0c:56:b3:e6:29:8e:eb:f5:c8:b3:fd:
         59:62:dc:8f:37:d7:49:40:bd:c2:5e:7e:08:74:1e:49:6b:5f:
         ee:0a:32:fb:1b:f3:1d:5a:6c:62:30:37:78:64:bf:85:8b:99:
         d0:bb:26:d9:ee:39:04:a4:be:b1:c2:4f:6f:c1:53:97:99:3e:
         67:55:1a:83:74:50:36:fc:cd:fe:eb:bd:d5:08:28:f1:c3:ea:
         50:d4:4b:aa:94:61:06:60:c1:70:ac:39:b3:ba:e0:a6:cb:41:
         62:2e:dd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org