Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.cer
File:                     5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.cer (raw, json)
Hash identifier:          NugRcHLVTglWMG4vmkkPL+CagdKPLF8N98g4dtaiXLI=
Subject key identifier:   5D:18:FA:4A:88:E7:A1:9A:02:E0:6C:D3:48:D6:BD:F2:63:B8:8E:3B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D22FDB33EF8E343A4298C398AAB3106ECF11335
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 18 Aug 2023 13:19:44 +0000
Certificate not after:    Fri 16 Aug 2024 13:24:44 +0000
Subordinate resources:    AS: 263900
                          IP: 138.204.148.0/22
                          IP: 2804:276c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:22:fd:b3:3e:f8:e3:43:a4:29:8c:39:8a:ab:31:06:ec:f1:13:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 18 13:19:44 2023 GMT
            Not After : Aug 16 13:24:44 2024 GMT
        Subject: CN=5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:51:16:c4:7b:65:06:b7:f3:61:9c:c7:2e:00:
                    f7:1a:5a:78:e6:81:59:fd:ab:47:a8:f8:fa:f8:30:
                    3e:a6:3c:84:80:4d:a5:68:f9:6b:12:e7:22:9e:e1:
                    ad:ea:90:e9:a5:69:0e:f1:2a:0f:57:48:bc:d7:d2:
                    0b:7e:b7:68:31:8a:bf:da:8a:5c:cc:ce:a3:f8:25:
                    ad:7b:52:ef:29:68:c6:57:d9:14:8e:34:04:7f:fd:
                    bf:c4:69:35:7e:2c:75:da:77:fa:69:79:f3:bb:5e:
                    f1:89:46:e6:30:75:35:61:b9:dc:0c:03:50:2d:7e:
                    46:46:8e:cd:fc:86:d1:6f:59:5a:d4:1c:00:dc:9b:
                    86:2f:63:df:00:2c:45:81:20:b7:2a:27:5f:ea:86:
                    e8:cb:15:b7:56:58:6f:81:79:5a:b0:c7:25:3e:6f:
                    a5:e3:7e:11:23:ce:a9:46:a2:22:5e:44:69:0a:12:
                    9f:64:c2:de:29:82:c5:30:17:4e:cd:e5:f3:99:93:
                    df:6b:a6:a4:03:23:d2:c9:11:e1:61:a2:29:cf:d2:
                    06:62:fd:bb:d8:96:b7:25:72:e8:a9:d9:09:aa:b5:
                    59:9c:63:66:21:b6:f8:b7:9d:62:f9:6a:ae:9c:79:
                    c7:ed:00:bc:41:ae:70:30:b4:79:db:4c:5d:67:88:
                    6f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:18:FA:4A:88:E7:A1:9A:02:E0:6C:D3:48:D6:BD:F2:63:B8:8E:3B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.148.0/22
                IPv6:
                  2804:276c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263900

    Signature Algorithm: sha256WithRSAEncryption
         09:4d:7c:e0:b5:43:bc:25:1d:2f:b5:63:c6:cc:df:ed:a0:07:
         01:23:ba:1c:a7:94:d3:51:60:d6:64:22:49:e9:21:b1:65:9f:
         e0:c5:94:2a:fe:4c:c7:17:a9:55:38:31:9e:83:69:c7:b6:8e:
         d5:26:1c:9c:5c:34:db:d0:67:48:17:f2:ce:7a:be:87:db:4b:
         40:1a:76:c2:d3:ab:de:a3:7c:ba:9b:3e:b7:78:c3:d9:ff:c5:
         ae:d8:25:b3:c9:81:f0:76:d9:aa:8e:d2:ee:d2:f9:79:21:83:
         b0:03:d3:6e:d9:3f:ae:5d:60:bd:de:d8:fd:e9:0e:dd:ed:ea:
         99:5b:bd:78:b9:60:19:8d:bf:ad:7b:0f:90:4f:e0:cc:2f:dc:
         17:ae:7b:1f:ea:13:e8:59:c8:9f:29:ab:1d:91:70:5c:0f:99:
         be:a8:23:e8:f8:11:d2:c3:ec:f0:ae:14:da:73:6e:02:87:65:
         67:33:be:07:e7:ad:17:bf:f6:be:c5:fb:e8:64:d4:67:93:47:
         e2:e9:ea:f9:52:51:4f:03:fb:b0:19:af:ef:c7:06:cb:ed:79:
         78:33:5f:f3:d3:63:02:d8:15:95:b2:41:3f:d6:3f:36:18:ea:
         8d:80:07:d3:a7:71:93:c5:91:7d:14:bc:09:a2:06:7c:c0:33:
         0d:25:0f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org