Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5DD1B92D3CA06CD9B9DCAB1D64BFCAC89D9466FF.cer
File:                     5DD1B92D3CA06CD9B9DCAB1D64BFCAC89D9466FF.cer (raw, json)
Hash identifier:          YrHpnJdDwUGZmi2VZD51FI2ygYgLvrqqZnjN+IKUvz0=
Subject key identifier:   5D:D1:B9:2D:3C:A0:6C:D9:B9:DC:AB:1D:64:BF:CA:C8:9D:94:66:FF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       51FA0FE15E9E47D0487F2220516E986A992B05B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/5DD1B92D3CA06CD9B9DCAB1D64BFCAC89D9466FF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 09 Oct 2021 13:44:44 +0000
Certificate not after:    Sat 08 Oct 2022 13:49:44 +0000
Subordinate resources:    AS: 270865
                          IP: 177.53.28.0/22
                          IP: 2804:72a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:fa:0f:e1:5e:9e:47:d0:48:7f:22:20:51:6e:98:6a:99:2b:05:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  9 13:44:44 2021 GMT
            Not After : Oct  8 13:49:44 2022 GMT
        Subject: CN=5DD1B92D3CA06CD9B9DCAB1D64BFCAC89D9466FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:e8:ed:f8:5a:27:05:c3:87:f7:43:71:67:
                    47:d2:55:2d:24:27:f6:a7:f5:c5:5d:eb:25:2e:2c:
                    9f:93:e7:d0:46:ab:a7:ab:24:52:e5:af:b3:30:96:
                    49:8c:3c:0e:48:ea:c5:9e:da:e4:ac:f7:9c:0e:3b:
                    19:0d:d7:3f:70:5d:95:83:b8:ee:62:fe:ea:4c:c9:
                    e2:93:91:83:f0:f6:b7:a8:71:b0:e6:53:ee:92:01:
                    76:27:33:f1:e3:1c:2e:68:a8:43:9b:99:60:6a:ad:
                    45:2a:09:47:52:45:3a:80:ca:03:89:65:b8:a0:aa:
                    36:c8:56:e8:de:09:e7:20:03:2a:f6:2f:41:ab:c1:
                    d0:a7:c9:50:0c:ad:3c:96:d9:b1:92:3d:14:c0:c6:
                    eb:52:3e:47:ec:7b:dd:74:dd:73:a9:4b:fd:6a:13:
                    26:2b:53:e0:a9:38:c7:61:4a:e5:02:4e:9a:5c:c4:
                    18:69:d3:bf:c5:ef:9d:94:02:bf:bd:45:ee:a4:8c:
                    71:a4:2c:bb:51:1b:e5:fd:eb:ee:c7:f1:e6:4a:2b:
                    db:6b:d7:79:a6:39:88:b5:e5:02:1b:7a:94:66:7a:
                    51:2f:a7:ed:2e:0d:80:03:b2:88:67:b8:76:85:48:
                    38:a4:84:f8:51:29:fd:02:bf:80:af:63:6b:a2:05:
                    a6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:D1:B9:2D:3C:A0:6C:D9:B9:DC:AB:1D:64:BF:CA:C8:9D:94:66:FF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/5DD1B92D3CA06CD9B9DCAB1D64BFCAC89D9466FF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.28.0/22
                IPv6:
                  2804:72a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270865

    Signature Algorithm: sha256WithRSAEncryption
         a5:ae:e1:bb:bb:be:7e:f0:28:7e:c4:34:fe:26:52:7a:e0:a3:
         30:f4:a1:59:b9:d1:23:06:d8:9d:0a:a6:c0:45:c9:26:10:dc:
         6d:df:7d:3b:3c:ac:64:d9:8b:03:bb:88:5b:fb:86:25:c6:07:
         7a:74:89:1f:05:49:a3:71:02:a4:f8:b5:d9:18:9e:cb:f8:8a:
         fa:10:78:f6:b9:6f:75:81:c4:2c:1c:27:c4:1c:1f:04:cb:f8:
         ce:fa:99:a8:03:27:15:b9:2b:26:45:ad:6c:c2:d0:1a:8d:b4:
         cc:96:45:e7:44:3f:fc:26:9d:5f:67:16:60:30:ab:74:64:93:
         c6:32:78:04:3d:f1:44:ed:ee:44:d5:37:75:20:3e:54:da:73:
         10:ba:ce:ae:d2:04:94:19:9c:06:b4:0b:4f:89:15:bf:f4:66:
         14:b5:c6:ef:f8:f1:5f:9e:3c:1b:5f:c9:22:54:5f:59:5e:51:
         f0:84:38:91:07:cc:cc:d0:48:ee:f6:3d:c0:7c:f8:55:3d:20:
         23:0a:97:96:15:15:96:b0:6e:96:dd:16:9a:7d:c4:cd:43:b5:
         15:2c:80:8a:4d:17:e8:13:74:60:f2:05:3c:9a:6e:b9:ca:09:
         06:f0:72:7f:35:48:5a:57:cd:4d:b7:ec:8d:1b:a4:10:a3:27:
         72:db:bf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org