Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5D5C6E4C3EC02C344E2F9E2BC4C0B6D7879896B9.cer
File:                     5D5C6E4C3EC02C344E2F9E2BC4C0B6D7879896B9.cer (raw, json)
Hash identifier:          pE0idt4W8CP627ndBxPcHt9HRdII165jdrcnYjebIFA=
Subject key identifier:   5D:5C:6E:4C:3E:C0:2C:34:4E:2F:9E:2B:C4:C0:B6:D7:87:98:96:B9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2CD8ACFED8E8429A5957352D9E4619E4D8ACB217
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/5D5C6E4C3EC02C344E2F9E2BC4C0B6D7879896B9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Jan 2022 20:28:51 +0000
Certificate not after:    Tue 17 Jan 2023 20:33:51 +0000
Subordinate resources:    AS: 267367
                          IP: 45.234.148.0/22
                          IP: 2804:4c60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d8:ac:fe:d8:e8:42:9a:59:57:35:2d:9e:46:19:e4:d8:ac:b2:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 20:28:51 2022 GMT
            Not After : Jan 17 20:33:51 2023 GMT
        Subject: CN=5D5C6E4C3EC02C344E2F9E2BC4C0B6D7879896B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ba:b2:5e:02:35:bb:01:f2:ad:d8:92:2a:96:
                    01:e2:dc:bd:96:47:89:b7:20:e6:f2:d9:7d:31:7d:
                    60:aa:d8:dc:f0:15:d4:58:d0:75:d3:b8:0b:de:3a:
                    49:9d:21:25:60:43:93:e7:8e:90:3c:f5:de:24:4e:
                    03:d8:1d:92:b2:ee:d2:48:ff:eb:f7:d0:98:6d:e9:
                    73:bb:cc:a3:41:40:44:f4:94:b6:f4:d3:d4:3d:3d:
                    a6:54:3e:47:07:12:2c:48:80:1a:2d:3e:8f:31:1f:
                    1c:a6:27:42:0e:9a:07:d0:34:e6:70:a2:bd:20:9e:
                    9a:fa:75:78:8e:cb:af:c8:32:e3:88:9b:c8:66:63:
                    87:49:42:c9:66:c4:bc:e8:56:e9:b6:86:1c:a9:85:
                    b2:4d:da:9f:d0:88:67:0c:f3:f2:c2:d8:5d:f9:5f:
                    6d:63:47:4e:d9:88:9b:81:3f:51:6e:1c:9a:91:bb:
                    1a:df:6a:54:a4:08:f5:f7:fd:82:71:98:db:3b:17:
                    fb:37:bd:0b:54:79:49:ff:58:a7:00:59:bf:8a:01:
                    9f:a3:86:66:b9:3d:f5:44:ed:2a:e5:6e:20:9e:02:
                    60:77:ff:c5:32:8d:84:dd:a5:74:41:e5:16:49:31:
                    a3:ee:af:46:f9:8c:f9:f5:fa:ac:f6:ab:4e:2c:b5:
                    59:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:5C:6E:4C:3E:C0:2C:34:4E:2F:9E:2B:C4:C0:B6:D7:87:98:96:B9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/5D5C6E4C3EC02C344E2F9E2BC4C0B6D7879896B9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.148.0/22
                IPv6:
                  2804:4c60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267367

    Signature Algorithm: sha256WithRSAEncryption
         12:0d:70:2f:5e:8e:86:97:57:1a:d4:e8:f8:ce:3b:c4:51:84:
         ad:52:ae:6d:25:23:10:e9:02:49:48:d1:3e:ef:97:f1:3c:6c:
         41:0c:d2:ef:c9:f6:4f:4e:7d:23:98:dd:4c:36:4d:ff:41:0c:
         4b:c6:26:a7:10:7f:7d:2c:82:14:e3:cb:eb:6c:f6:92:03:44:
         bc:95:b2:00:ab:94:c0:4f:45:bf:4a:5d:55:bb:66:6d:9a:94:
         78:ce:e9:28:f9:ed:c3:04:18:fd:c2:96:87:c0:69:10:a5:8f:
         3e:2d:d7:57:23:c4:a9:49:2e:8d:e9:81:44:1b:68:e9:fd:dc:
         c1:88:30:6f:e1:c9:db:c1:90:78:06:65:2b:77:da:f8:46:5d:
         e0:30:be:ea:88:2d:72:22:e2:19:99:dc:c9:3b:58:07:74:30:
         5f:17:0c:42:df:82:e6:45:8d:4e:34:85:3c:c6:36:90:4e:42:
         0b:97:fd:76:21:e9:f1:3b:b9:86:7d:d0:ef:a3:97:87:51:3b:
         33:b0:ae:17:cb:35:f8:b2:72:6b:2f:3e:de:33:c7:42:92:b2:
         b1:95:fd:17:c4:00:07:3b:35:ca:53:07:73:1e:f9:dc:fc:75:
         0b:3a:d1:70:40:92:91:c3:47:9e:17:03:32:34:2f:61:58:bf:
         c5:41:1d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org