Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5D982444187BFEEF87A48D0F5DA9FF9F28060E89.cer
File:                     5D982444187BFEEF87A48D0F5DA9FF9F28060E89.cer (raw, json)
Hash identifier:          KS5AN5p6g8Mkj3rRIK8Elwm0L7du7LNB1cOCA60sNB8=
Subject key identifier:   5D:98:24:44:18:7B:FE:EF:87:A4:8D:0F:5D:A9:FF:9F:28:06:0E:89
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       25E708EA94D30C0BBA7DD9454E7315E5F5E4BF40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/5D982444187BFEEF87A48D0F5DA9FF9F28060E89.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 14:22:54 +0000
Certificate not after:    Wed 10 Apr 2024 14:27:54 +0000
Subordinate resources:    AS: 263634
                          IP: 170.81.48.0/22
                          IP: 179.125.112.0/21
                          IP: 2804:1068::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e7:08:ea:94:d3:0c:0b:ba:7d:d9:45:4e:73:15:e5:f5:e4:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 12 14:22:54 2023 GMT
            Not After : Apr 10 14:27:54 2024 GMT
        Subject: CN=5D982444187BFEEF87A48D0F5DA9FF9F28060E89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:21:48:7f:f7:93:ca:b0:b2:50:0a:86:15:90:
                    af:a1:d8:72:dc:a0:c8:19:bc:01:5f:01:ff:ca:7d:
                    a8:de:60:c8:3b:3b:86:dc:9f:d9:39:ad:7c:72:f3:
                    cc:d2:1c:17:bf:d6:8f:6d:85:d7:9f:9e:b6:6e:c4:
                    eb:8d:7f:75:32:e9:34:7d:ab:ba:a0:97:2d:b5:80:
                    8a:58:a1:98:d0:ee:c4:64:08:ab:bd:d8:27:77:2a:
                    fe:78:85:15:ab:37:dd:e7:ba:6d:b8:4b:00:99:55:
                    3a:23:75:a4:e0:0e:51:84:b8:fe:0e:dd:43:c8:b4:
                    07:9e:0d:fd:59:3e:34:23:21:be:25:27:e1:15:82:
                    dd:24:2b:16:b9:45:35:d9:8a:c7:68:b3:e4:ee:86:
                    fc:e9:87:a6:f0:3d:a7:8d:17:e1:80:62:9d:11:e7:
                    50:05:68:74:c6:6b:55:e7:59:31:23:b7:85:29:a5:
                    c4:79:32:ef:f8:2d:49:9e:e0:81:f8:fc:93:9b:b0:
                    51:20:ad:3f:69:49:d5:d7:e2:d3:2d:86:3b:ee:fc:
                    82:73:8e:6c:8d:9e:1a:fc:fd:18:94:83:dc:63:7d:
                    2e:c2:73:81:ad:d9:d8:02:df:bb:64:5b:42:55:42:
                    49:32:9e:db:d8:56:df:b6:22:05:67:c9:25:2d:cc:
                    03:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:98:24:44:18:7B:FE:EF:87:A4:8D:0F:5D:A9:FF:9F:28:06:0E:89
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/5D982444187BFEEF87A48D0F5DA9FF9F28060E89.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.48.0/22
                  179.125.112.0/21
                IPv6:
                  2804:1068::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263634

    Signature Algorithm: sha256WithRSAEncryption
         8c:08:b3:40:f0:d7:0d:43:d0:6c:ce:28:4e:85:2e:71:e7:df:
         1a:cf:4c:c6:f5:a5:7b:1b:45:51:ab:e3:5b:fd:1a:8a:65:cd:
         a4:40:f7:2e:37:38:f9:3b:a1:a1:72:26:ec:45:39:dc:2a:08:
         e7:f5:aa:6f:61:21:17:ce:60:54:b4:c0:74:ba:48:be:e8:7c:
         84:29:39:e8:9b:24:8c:6f:1a:5a:eb:55:0a:6e:3a:9f:94:cc:
         9f:90:db:f1:a6:ed:95:2b:25:25:6e:c3:85:6e:a0:3c:eb:da:
         53:0e:4e:be:9b:e9:42:22:10:93:a5:0d:6d:bd:9d:f5:ba:47:
         43:08:f0:1d:32:89:52:80:ce:a7:80:e9:19:fc:ec:93:cb:c9:
         02:8f:31:ef:5f:a8:0c:2f:a9:9c:90:96:35:bd:bd:57:0c:e8:
         c8:0c:b3:a5:ec:ad:78:37:17:c0:9d:28:68:6a:18:93:79:84:
         5b:ea:76:98:9d:91:eb:ff:33:7c:4e:70:6d:a6:1b:23:fd:1d:
         2b:02:9e:28:c4:51:61:18:c6:38:fa:8d:08:fc:ea:0a:dc:a7:
         27:29:69:02:23:04:94:c6:d1:87:51:3f:02:d1:0d:e6:0c:86:
         68:c7:4a:4c:b2:b7:34:b8:37:64:e0:5a:a8:45:2f:80:83:bd:
         11:06:07:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org