Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5D769FC7E464206BDC49F515B2AF36E50925868C.cer
File:                     5D769FC7E464206BDC49F515B2AF36E50925868C.cer (raw, json)
Hash identifier:          UckACuXRqKr3LjHpxD3PPSTY90xhrBdWaX8Z8F2ICBk=
Subject key identifier:   5D:76:9F:C7:E4:64:20:6B:DC:49:F5:15:B2:AF:36:E5:09:25:86:8C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6DBB064CDB3FC889032B5F88194DF1025B822DD6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/5D769FC7E464206BDC49F515B2AF36E50925868C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 11:24:21 +0000
Certificate not after:    Wed 10 Apr 2024 11:29:21 +0000
Subordinate resources:    AS: 268737
                          IP: 45.171.252.0/22
                          IP: 2804:59f8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:bb:06:4c:db:3f:c8:89:03:2b:5f:88:19:4d:f1:02:5b:82:2d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 12 11:24:21 2023 GMT
            Not After : Apr 10 11:29:21 2024 GMT
        Subject: CN=5D769FC7E464206BDC49F515B2AF36E50925868C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b7:3e:d0:62:bf:d4:f5:13:64:95:21:84:ae:
                    2a:ff:9f:9d:0c:2f:62:fd:64:12:78:12:82:e5:f8:
                    3c:63:f7:6c:65:8c:a2:f6:46:6e:6e:a4:bf:97:e7:
                    ee:33:39:ba:8b:36:dc:d2:c8:6d:a7:b2:4e:53:02:
                    32:37:43:0b:12:81:3a:96:50:00:70:16:6b:d9:ad:
                    79:e5:f1:a7:ef:31:4b:7f:cf:10:69:e8:f9:d5:a2:
                    3f:fc:85:46:ce:da:be:e1:d9:62:dd:96:39:1a:68:
                    d8:ff:da:2b:15:db:04:87:57:e1:9d:45:0f:4d:b6:
                    23:38:68:32:af:d9:69:8b:73:9a:57:76:22:56:6b:
                    1d:f6:18:11:74:8d:6a:3c:f6:2b:48:e7:96:b2:62:
                    44:53:e6:a0:e7:ae:60:36:95:5f:7e:e8:3d:97:35:
                    94:4e:b6:9b:08:75:5e:b5:a5:8c:46:42:8b:5e:fc:
                    6b:dd:39:fe:91:74:e1:a1:0f:8c:4c:74:24:bc:4d:
                    bf:d8:8a:35:a6:3f:5a:18:0c:2c:57:3d:c7:dc:ed:
                    ca:df:57:8a:39:41:d3:75:a8:b7:5f:9a:3f:33:12:
                    b7:2c:78:d0:c6:63:84:d9:21:95:d1:11:90:0b:f1:
                    7b:a9:f5:f1:a8:f4:1e:e1:ef:d7:f7:6a:24:aa:73:
                    5e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:76:9F:C7:E4:64:20:6B:DC:49:F5:15:B2:AF:36:E5:09:25:86:8C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/5D769FC7E464206BDC49F515B2AF36E50925868C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.252.0/22
                IPv6:
                  2804:59f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268737

    Signature Algorithm: sha256WithRSAEncryption
         b0:b1:30:8d:1a:a9:d2:3d:47:20:af:84:76:e3:71:c5:6f:07:
         da:38:c6:c1:cd:da:8e:28:fc:95:56:3a:36:5c:7d:2b:ac:a0:
         4c:9a:65:3d:f1:0e:1a:f4:dc:df:3f:6a:ce:a1:2b:4d:c4:5e:
         d6:24:e8:7b:fd:78:93:33:60:78:06:42:f5:40:ec:72:64:cb:
         82:bb:30:5c:02:3a:03:39:c3:47:8e:c3:58:cc:30:cc:0e:70:
         42:7e:e2:5d:20:59:a6:48:22:48:2d:34:41:23:cb:a4:4c:a5:
         dc:8b:93:90:75:fe:38:13:e7:ea:5a:a6:78:5c:85:18:c0:15:
         38:65:d8:e2:86:37:6a:aa:a9:5c:2c:6c:d7:c9:c7:19:6e:09:
         1a:c4:f3:26:66:08:28:82:16:ef:33:50:ab:ee:86:c4:a5:f2:
         e9:ed:73:b3:9f:89:ae:35:bc:a9:3d:a0:2a:0a:0e:41:0b:10:
         15:e6:42:f9:24:b9:08:41:13:2f:b0:31:92:9b:3c:88:99:5f:
         be:56:8c:57:61:eb:84:aa:84:5c:be:7f:ff:a9:87:20:2a:61:
         23:ae:d8:0c:b0:74:42:e0:d5:dd:3a:a8:3e:eb:84:86:b8:59:
         0d:12:43:8b:6f:49:de:85:5a:f8:99:a2:3b:6d:47:b3:37:c7:
         e0:e4:87:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org