Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5D5A74355485EEB1AB04971B4B7DE3A19BC1334F.cer
File:                     5D5A74355485EEB1AB04971B4B7DE3A19BC1334F.cer (raw, json)
Hash identifier:          hhlP1Dz4BXO5lfd6Fh8IP3LRaYnUyMbp3ONNekp2z68=
Subject key identifier:   5D:5A:74:35:54:85:EE:B1:AB:04:97:1B:4B:7D:E3:A1:9B:C1:33:4F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5369D34BCC2107BEE8730E1929CC0E453762ACAC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/1/5D5A74355485EEB1AB04971B4B7DE3A19BC1334F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Dec 2023 10:55:16 +0000
Certificate not after:    Tue 10 Dec 2024 11:00:16 +0000
Subordinate resources:    AS: 267257
                          IP: 45.232.80.0/22
                          IP: 2804:4ab0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:69:d3:4b:cc:21:07:be:e8:73:0e:19:29:cc:0e:45:37:62:ac:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 12 10:55:16 2023 GMT
            Not After : Dec 10 11:00:16 2024 GMT
        Subject: CN=5D5A74355485EEB1AB04971B4B7DE3A19BC1334F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:97:6d:4b:55:7f:e6:ee:fd:16:1b:f4:70:73:
                    10:ff:45:19:08:42:3b:b3:ca:32:ee:63:71:74:6d:
                    c0:24:9f:5e:31:e4:46:67:69:8a:91:83:57:02:3d:
                    27:89:c1:2d:77:72:4c:87:3b:77:ac:98:1f:8c:ff:
                    c7:38:5a:59:02:a8:08:7f:f6:eb:1a:19:0f:6a:2e:
                    2b:1f:11:39:18:41:6e:01:c1:2d:12:aa:23:9d:48:
                    bf:63:82:84:05:5c:45:29:21:ac:60:01:33:4b:5e:
                    23:79:9d:af:5d:f1:93:0c:9c:f1:ee:76:3e:af:f5:
                    a4:d3:34:98:12:16:1c:72:a8:59:1d:27:b7:b0:8e:
                    e4:b8:7e:dc:41:5e:91:47:69:ef:ba:b2:dd:cc:6d:
                    e2:62:2a:04:c9:94:fd:95:d3:e0:de:dc:67:d1:c5:
                    c4:0d:df:e4:38:51:54:54:1e:29:17:6c:40:a8:76:
                    8c:93:db:64:e3:76:b7:d1:ab:fa:84:f0:f2:13:92:
                    36:21:bb:91:cf:2f:52:ac:f6:ed:12:b6:db:2b:75:
                    0e:2b:63:6e:62:0d:08:be:c7:98:e6:88:4c:04:5c:
                    9c:15:fe:a3:40:a6:a6:60:40:56:20:c3:86:0a:15:
                    a7:c6:b2:c4:ec:7e:43:26:02:03:56:29:e5:7f:f0:
                    29:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:5A:74:35:54:85:EE:B1:AB:04:97:1B:4B:7D:E3:A1:9B:C1:33:4F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/1/5D5A74355485EEB1AB04971B4B7DE3A19BC1334F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.80.0/22
                IPv6:
                  2804:4ab0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267257

    Signature Algorithm: sha256WithRSAEncryption
         52:c8:6c:34:36:c0:bc:93:b9:80:5b:db:11:1e:e1:7f:84:5a:
         db:23:ea:21:18:7e:3b:31:7d:58:1b:5d:44:ba:01:5a:de:30:
         b5:e6:5c:96:6e:b8:07:3c:47:6f:ed:fa:c4:3c:44:8a:c3:51:
         f9:7e:2c:c7:66:62:4c:3b:74:cb:85:43:55:d9:a6:67:10:91:
         d9:98:63:62:5a:1c:ac:ce:da:25:b9:0b:7e:60:cb:6f:a2:04:
         1c:11:69:3a:b7:38:59:c1:2d:18:f8:bf:89:21:a6:63:35:19:
         96:2c:0c:f7:46:79:fa:ca:d4:f2:0b:03:f7:8d:d6:dc:70:6c:
         b4:d1:fa:67:b9:5d:c0:ff:ed:49:35:32:b1:51:aa:47:aa:fe:
         ce:ce:a4:57:7c:bf:f2:f1:d5:46:bc:f4:36:77:8a:28:5f:25:
         72:b3:14:e7:5a:4d:36:ef:fd:18:04:18:90:5e:3a:c3:86:23:
         7c:1a:14:67:59:28:24:cd:7e:d3:bd:49:77:1a:1e:7d:7d:3b:
         ea:f9:c9:ea:e3:ab:e6:bb:8c:5a:46:fd:2e:19:50:6c:da:f5:
         50:65:e2:6c:a1:d4:68:91:69:38:0f:88:92:be:34:b9:98:c5:
         23:1e:32:9f:1a:ec:e9:fe:34:21:ba:e9:ac:7b:29:02:ae:f0:
         8d:c7:37:72
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUU2nTS8whB77ocw4ZKcwORTdirKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMTIxMDU1MTZaFw0yNDEyMTAxMTAwMTZaMDMxMTAvBgNV
BAMTKDVENUE3NDM1NTQ4NUVFQjFBQjA0OTcxQjRCN0RFM0ExOUJDMTMzNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcl21LVX/m7v0WG/RwcxD/RRkI
QjuzyjLuY3F0bcAkn14x5EZnaYqRg1cCPSeJwS13ckyHO3esmB+M/8c4WlkCqAh/
9usaGQ9qLisfETkYQW4BwS0SqiOdSL9jgoQFXEUpIaxgATNLXiN5na9d8ZMMnPHu
dj6v9aTTNJgSFhxyqFkdJ7ewjuS4ftxBXpFHae+6st3MbeJiKgTJlP2V0+De3GfR
xcQN3+Q4UVRUHikXbECodoyT22TjdrfRq/qE8PITkjYhu5HPL1Ks9u0SttsrdQ4r
Y25iDQi+x5jmiEwEXJwV/qNApqZgQFYgw4YKFafGssTsfkMmAgNWKeV/8CklAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRdWnQ1VIXusasE
lxtLfeOhm8EzTzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84WGlzdjQxelRXWGZiU2lmQkV2RVVRUjFHMmQ0ZFk2VHNM
WVFxenVRSnZFcy8xMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84WGlzdjQxelRXWGZiU2lmQkV2RVVRUjFHMmQ0ZFk2VHNM
WVFxenVRSnZFcy8xLzVENUE3NDM1NTQ4NUVFQjFBQjA0OTcxQjRCN0RFM0ExOUJD
MTMzNEYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3oUDANBAIAAjAHAwUA
KARKsDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEE/kwDQYJKoZIhvcNAQELBQAD
ggEBAFLIbDQ2wLyTuYBb2xEe4X+EWtsj6iEYfjsxfVgbXUS6AVreMLXmXJZuuAc8
R2/t+sQ8RIrDUfl+LMdmYkw7dMuFQ1XZpmcQkdmYY2JaHKzO2iW5C35gy2+iBBwR
aTq3OFnBLRj4v4khpmM1GZYsDPdGefrK1PILA/eN1txwbLTR+me5XcD/7Uk1MrFR
qkeq/s7OpFd8v/Lx1Ua89DZ3iihfJXKzFOdaTTbv/RgEGJBeOsOGI3waFGdZKCTN
ftO9SXcaHn19O+r5yerjq+a7jFpG/S4ZUGza9VBl4myh1GiRaTgPiJK+NLmYxSMe
Mp8a7On+NCG66ax7KQKu8I3HN3I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org