Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5CFE4D51D04B1EF3E546D622F53BC445A57D838A.cer
File:                     5CFE4D51D04B1EF3E546D622F53BC445A57D838A.cer (raw, json)
Hash identifier:          PCirKiUqUojriRzZHorZu/pxHClyyV4fcodv6XKgurE=
Subject key identifier:   5C:FE:4D:51:D0:4B:1E:F3:E5:46:D6:22:F5:3B:C4:45:A5:7D:83:8A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7B5478D2068A3F5BA65D61CC9AA6CE1B242B38F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/0/5CFE4D51D04B1EF3E546D622F53BC445A57D838A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 17:40:06 +0000
Certificate not after:    Thu 20 Feb 2025 17:45:06 +0000
Subordinate resources:    AS: 263985
                          IP: 143.0.20.0/22
                          IP: 168.227.152.0/22
                          IP: 2804:28dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:54:78:d2:06:8a:3f:5b:a6:5d:61:cc:9a:a6:ce:1b:24:2b:38:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 17:40:06 2024 GMT
            Not After : Feb 20 17:45:06 2025 GMT
        Subject: CN=5CFE4D51D04B1EF3E546D622F53BC445A57D838A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:b2:7c:16:cb:4f:74:e6:0d:92:f5:f3:1b:
                    1c:3d:70:ea:b3:ad:6c:92:3c:80:19:42:03:99:71:
                    79:22:ec:29:86:a2:f9:73:ec:3f:6c:e6:b8:5b:fa:
                    58:bd:9d:75:20:2a:3c:51:30:e6:dd:5e:2f:46:e9:
                    ce:51:d6:f9:f6:96:97:6b:45:dc:d1:1b:03:c1:1d:
                    97:8b:48:42:37:4e:fd:e4:29:25:5f:2e:10:58:5a:
                    b6:92:c0:81:1e:c1:ca:38:15:de:43:78:44:47:97:
                    e8:42:26:fd:62:3c:e5:eb:68:a7:df:41:64:3d:a5:
                    97:4a:5b:7b:99:eb:55:2c:16:1a:83:23:95:0a:44:
                    e0:b0:10:d5:16:8d:97:c1:76:38:85:c8:0a:7c:e6:
                    6c:00:53:dc:e2:13:f3:33:19:c2:90:38:8e:c7:d6:
                    9f:98:58:cb:0d:86:f4:38:ea:fc:06:55:f8:cc:05:
                    d0:bd:4a:3f:e2:75:8e:e8:61:12:d6:16:2c:ce:d8:
                    1c:e7:db:8f:f6:70:63:5d:8e:01:ad:ed:3c:99:20:
                    da:f1:0f:3d:22:c9:2c:c2:11:8e:ae:62:06:d4:2b:
                    80:33:f5:2c:30:64:19:7b:f3:ee:e7:d1:fc:d4:ea:
                    2e:48:be:98:29:f0:64:a2:2e:76:2d:c4:5c:4b:c6:
                    bc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5C:FE:4D:51:D0:4B:1E:F3:E5:46:D6:22:F5:3B:C4:45:A5:7D:83:8A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/0/5CFE4D51D04B1EF3E546D622F53BC445A57D838A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.20.0/22
                  168.227.152.0/22
                IPv6:
                  2804:28dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263985

    Signature Algorithm: sha256WithRSAEncryption
         3b:ad:3f:00:08:93:09:be:78:94:6e:44:15:89:d6:55:88:ce:
         c4:4c:51:71:35:64:3d:da:c2:85:b9:19:cc:79:e4:8f:80:c2:
         88:c5:a9:58:fe:e8:78:21:39:f4:8d:0c:a1:db:e9:99:a4:2c:
         4c:a0:9f:2f:19:f6:b6:51:72:13:73:06:e4:6f:35:02:db:6d:
         a8:96:8f:c2:bd:2c:99:74:39:49:98:2a:b2:5d:3e:b8:0e:1d:
         72:dc:83:af:ce:e8:eb:36:34:36:17:96:ef:b7:ee:13:27:d9:
         cb:b5:90:33:67:2f:90:7d:52:26:46:3f:9c:ad:d3:ef:c7:0b:
         72:d9:4f:ad:35:c1:50:b4:ed:e7:21:9c:d6:82:5d:59:63:f7:
         75:8e:df:81:b4:fc:47:cc:6a:13:ab:b9:da:3b:1e:ad:a9:f3:
         a6:09:88:4b:8e:83:89:8d:8f:5f:47:19:bf:ae:88:66:97:a6:
         55:0f:ca:c9:aa:cc:e1:ba:60:37:bd:fb:98:52:11:e1:95:54:
         84:6d:35:ab:0a:71:ff:a4:34:b7:60:d5:b8:33:49:27:74:49:
         dc:78:1d:b7:e8:9d:29:15:ee:19:f1:02:72:ee:73:c5:7a:dd:
         ed:c3:65:d9:14:cd:1e:32:07:52:32:98:0f:b5:5f:2e:42:2e:
         a5:64:04:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org