Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5D26B9FA34BA01EF69DE3BB018BC8060CF3E8E86.cer
File:                     5D26B9FA34BA01EF69DE3BB018BC8060CF3E8E86.cer (raw, json)
Hash identifier:          v5r5NaLiZXDmU+GalqJayFl+jLG86XK7sja3p0G9IDA=
Subject key identifier:   5D:26:B9:FA:34:BA:01:EF:69:DE:3B:B0:18:BC:80:60:CF:3E:8E:86
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       251F2C17F0B9806B3D60057F6A603468E6C8EA44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/0/5D26B9FA34BA01EF69DE3BB018BC8060CF3E8E86.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Jan 2024 17:24:00 +0000
Certificate not after:    Tue 07 Jan 2025 17:29:00 +0000
Subordinate resources:    AS: 270689
                          IP: 181.225.152.0/22
                          IP: 2804:6fdc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1f:2c:17:f0:b9:80:6b:3d:60:05:7f:6a:60:34:68:e6:c8:ea:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  9 17:24:00 2024 GMT
            Not After : Jan  7 17:29:00 2025 GMT
        Subject: CN=5D26B9FA34BA01EF69DE3BB018BC8060CF3E8E86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:39:19:b3:dc:e6:50:5a:32:24:d5:06:ed:c3:
                    f9:ed:4c:84:85:79:f5:8a:41:da:9e:41:c6:db:e2:
                    f3:70:da:a0:a5:1f:0b:52:31:24:be:e7:02:9e:07:
                    a8:ad:57:42:19:2d:4f:b3:85:93:d1:87:75:c6:5b:
                    d7:b7:79:d9:73:6d:2a:d6:84:b2:33:19:f3:9d:3c:
                    3f:9c:a6:ec:cf:ef:9e:20:35:ce:1e:5a:be:17:de:
                    df:ed:89:eb:a9:d6:9f:a7:52:2e:7c:03:5c:8f:48:
                    41:e8:00:d6:a6:8d:ef:a3:01:d5:68:0f:07:8f:93:
                    10:b7:57:a0:51:11:a6:ef:fb:cb:ea:8f:b7:1f:29:
                    f5:b4:0b:8c:fe:91:bd:b9:f3:0a:48:a9:b2:23:08:
                    12:a6:7b:b8:4b:18:54:44:a7:3b:35:6a:68:d8:b2:
                    b5:24:7b:53:f0:ed:86:19:d0:26:55:da:86:b8:91:
                    2d:08:d4:fc:21:be:45:bd:41:42:9d:ff:aa:64:d1:
                    4b:4f:65:1c:b7:5f:3b:3a:cd:15:95:4b:26:d1:56:
                    11:20:c6:66:a9:b6:de:a5:e6:82:55:83:42:4a:52:
                    4d:5a:0d:73:ff:fe:a3:29:c1:f2:7a:d3:58:8a:f9:
                    66:6c:1c:76:9b:b5:4e:e5:22:77:99:db:cf:28:c6:
                    35:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:26:B9:FA:34:BA:01:EF:69:DE:3B:B0:18:BC:80:60:CF:3E:8E:86
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/0/5D26B9FA34BA01EF69DE3BB018BC8060CF3E8E86.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.152.0/22
                IPv6:
                  2804:6fdc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270689

    Signature Algorithm: sha256WithRSAEncryption
         83:3f:21:45:6e:33:cf:91:b5:d9:8b:9a:ba:75:fd:51:31:46:
         81:ea:a8:97:41:93:f5:4c:16:1e:4a:17:58:4a:55:91:18:03:
         8c:7a:f7:62:5e:2d:06:15:48:d6:b0:d4:fe:f2:16:c7:a8:b7:
         18:9f:ed:e2:69:8c:7b:ad:5d:8f:35:5e:ac:a5:ad:29:d6:70:
         9b:0f:8a:be:4d:78:0f:1f:25:90:c9:e8:13:32:c6:eb:9f:da:
         b8:7e:f1:b8:75:36:b8:6f:04:6b:b0:83:3b:66:bd:68:af:c4:
         9f:04:fe:d4:e3:c2:05:33:f8:8a:ee:3d:d7:2d:08:d6:54:40:
         1b:55:86:aa:a8:d0:e4:7b:88:a6:ec:af:bf:5d:c4:d1:24:d4:
         07:5e:71:82:29:89:5f:62:55:84:4a:89:77:41:7e:b3:80:be:
         e6:79:3e:d4:71:91:ac:88:c0:61:2c:19:cf:0b:3f:9c:4c:64:
         2c:d5:f4:cd:cb:56:4b:6f:60:7d:9a:63:03:7c:10:56:55:91:
         7b:48:07:97:57:b5:f8:2a:fa:71:45:82:73:9f:9c:b8:0d:40:
         15:6e:a9:8b:6b:68:fa:21:8e:7c:f4:c6:e5:d3:20:eb:4d:f0:
         1c:4f:1f:16:84:23:f7:36:32:22:9a:55:d0:d7:3f:f0:cc:4f:
         cb:06:57:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org