Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5D7C936A02A87484DC75839C6718D62DF72983BF.cer
File:                     5D7C936A02A87484DC75839C6718D62DF72983BF.cer (raw, json)
Hash identifier:          HboDPaSkzHKFMTkUE0r8u4vuVRC63W3zR1cnxKB3/9o=
Subject key identifier:   5D:7C:93:6A:02:A8:74:84:DC:75:83:9C:67:18:D6:2D:F7:29:83:BF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       466F3B457DC3FD539C0780CC502431066E3F8472
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/5D7C936A02A87484DC75839C6718D62DF72983BF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 26 Aug 2023 02:52:47 +0000
Certificate not after:    Sat 24 Aug 2024 02:57:47 +0000
Subordinate resources:    AS: 265495
                          IP: 170.78.52.0/22
                          IP: 2804:3504::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:6f:3b:45:7d:c3:fd:53:9c:07:80:cc:50:24:31:06:6e:3f:84:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 26 02:52:47 2023 GMT
            Not After : Aug 24 02:57:47 2024 GMT
        Subject: CN=5D7C936A02A87484DC75839C6718D62DF72983BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:44:6c:32:9a:a8:08:ab:2c:97:a1:f4:44:ef:
                    18:66:a0:ca:6b:b6:ea:fc:63:f0:c6:56:85:94:a7:
                    d3:2c:de:76:bf:c1:6c:35:94:66:43:a4:89:5f:e9:
                    42:6d:64:62:35:49:6a:1a:ea:69:e6:10:07:46:69:
                    cd:b9:61:d8:4c:3a:a5:5d:c1:5a:ff:c2:db:ef:eb:
                    5e:e2:23:d0:4a:08:a5:5c:56:18:1e:4f:02:ec:4f:
                    8b:f8:44:2c:b9:bb:0a:72:82:77:a5:88:ac:1b:8a:
                    e4:c3:a7:a0:3d:b4:6c:06:22:fd:48:23:d6:e4:ee:
                    09:90:21:c7:fd:b2:e2:0a:32:3f:35:ed:d2:01:96:
                    25:11:2b:0c:ad:56:86:13:fd:80:60:53:04:c6:3d:
                    23:e4:15:87:2c:cf:c7:f9:ad:f2:2f:2b:11:5c:5e:
                    0c:4e:2b:63:cc:89:fd:7f:66:d8:c4:97:a9:c5:0e:
                    6d:59:74:ec:1b:c5:b2:8c:e4:35:07:56:f2:a1:54:
                    a9:05:6e:fb:27:ce:83:36:57:2a:30:38:ea:eb:2b:
                    d6:4e:d7:92:31:8d:d2:18:9b:fc:df:48:c0:fe:3b:
                    54:aa:6b:c1:ed:27:b4:4b:de:02:1a:47:b9:f1:a2:
                    0f:e3:9e:d4:dd:88:50:a0:ba:98:87:d8:80:fa:b1:
                    c7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:7C:93:6A:02:A8:74:84:DC:75:83:9C:67:18:D6:2D:F7:29:83:BF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/0/5D7C936A02A87484DC75839C6718D62DF72983BF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.52.0/22
                IPv6:
                  2804:3504::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265495

    Signature Algorithm: sha256WithRSAEncryption
         27:7f:f7:ac:24:cf:d0:e0:45:c5:9a:92:9b:79:11:7b:d9:43:
         f2:a5:50:32:fb:dc:e1:4f:07:f6:e1:03:6b:6b:5e:da:0d:ae:
         50:39:43:81:12:5d:75:c5:2b:8d:ad:fb:24:4a:2f:86:f8:ff:
         b4:31:e9:52:57:54:f2:a9:45:bd:c7:12:01:a9:e5:0a:65:75:
         82:4e:2b:b0:10:c8:66:06:c8:6d:60:ff:f1:38:58:c9:75:1b:
         7a:4b:de:5c:00:bf:f4:78:da:a8:78:70:44:12:28:af:eb:19:
         7f:09:5e:7b:c2:88:79:5f:30:8d:84:9c:bf:f2:83:e1:ac:c2:
         38:3f:79:f7:2e:b4:ad:10:e2:10:3a:6e:75:84:02:1d:d5:e4:
         e7:4d:a3:75:3f:0c:a5:5f:94:ed:d6:47:a1:9a:a5:8d:22:90:
         4b:7b:97:d5:a3:34:f8:32:bf:53:39:08:e2:07:c4:aa:35:75:
         11:29:5d:1d:17:fe:94:cb:d8:1d:46:c1:ed:f2:dd:b0:83:c4:
         a1:6d:0e:bc:5e:3b:45:39:e7:61:72:b3:64:80:af:fe:4c:e4:
         8e:b4:cc:dc:fa:d5:0a:7b:15:9f:b0:75:1b:8b:b1:8b:bd:b3:
         8d:c6:d5:73:f4:c1:86:10:1d:f8:1f:a1:cb:05:0c:34:d1:13:
         d1:e7:5b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org