Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5DD67EDB0CBA6C222F193D244301CEDA035DB765.cer
File:                     5DD67EDB0CBA6C222F193D244301CEDA035DB765.cer (raw, json)
Hash identifier:          7F/qVm5ibcNAvnE7lAhqd3AJ54Fu1VJg7DIG0DL7GUI=
Subject key identifier:   5D:D6:7E:DB:0C:BA:6C:22:2F:19:3D:24:43:01:CE:DA:03:5D:B7:65
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2289B48A1497E4F741692C3D19BA68ADD39AEC8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/5DD67EDB0CBA6C222F193D244301CEDA035DB765.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Dec 2022 15:33:09 +0000
Certificate not after:    Mon 25 Dec 2023 15:38:09 +0000
Subordinate resources:    AS: 269015
                          IP: 45.178.20.0/22
                          IP: 2804:5e28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:89:b4:8a:14:97:e4:f7:41:69:2c:3d:19:ba:68:ad:d3:9a:ec:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 26 15:33:09 2022 GMT
            Not After : Dec 25 15:38:09 2023 GMT
        Subject: CN=5DD67EDB0CBA6C222F193D244301CEDA035DB765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:33:a0:03:d8:3d:e5:dd:9a:7e:b8:41:5d:
                    b5:5c:91:b9:8e:2b:ec:28:6d:5f:bd:25:f5:9b:a8:
                    2c:3d:ad:02:3a:96:46:27:92:68:a0:de:1e:fc:07:
                    6e:16:c6:1b:60:f8:f1:3f:ed:9b:e4:6f:fd:a7:27:
                    1d:f9:30:fa:d5:a0:93:b2:3d:31:1d:db:f3:c8:50:
                    c2:a9:c2:44:b5:c4:4a:4d:e0:b1:af:38:d6:ef:e4:
                    16:be:61:6c:55:f4:cc:47:15:97:1b:a3:72:9a:18:
                    a5:5d:61:36:4e:ce:15:80:ab:a0:92:63:44:30:d4:
                    c7:8e:84:ae:ad:8f:6a:2d:c3:8c:13:8f:09:ad:26:
                    20:00:7f:89:60:43:05:23:3f:c3:62:20:30:88:08:
                    c1:54:a6:67:82:b4:da:77:3a:bf:f6:f9:67:ec:77:
                    ee:86:5c:97:cc:5b:ff:d7:de:51:51:e2:65:1b:c7:
                    30:0c:8a:94:fb:02:44:69:53:2d:ae:c6:41:81:2f:
                    83:6f:56:b6:b7:2d:b8:48:91:46:1c:0e:2c:c2:ff:
                    6d:a7:d7:9a:25:83:e9:94:fd:2a:cc:d1:d4:11:45:
                    69:a7:f2:41:86:8e:11:52:98:36:be:71:3f:74:8d:
                    3b:c4:3b:89:41:b4:aa:51:bc:be:be:1e:b3:56:08:
                    36:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:D6:7E:DB:0C:BA:6C:22:2F:19:3D:24:43:01:CE:DA:03:5D:B7:65
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/5DD67EDB0CBA6C222F193D244301CEDA035DB765.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.20.0/22
                IPv6:
                  2804:5e28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269015

    Signature Algorithm: sha256WithRSAEncryption
         b1:35:bc:2e:b6:2f:b5:80:b5:98:51:99:9d:bc:0b:f3:08:5d:
         ae:d7:73:79:25:05:29:e2:83:c6:05:c6:40:30:9d:ac:e2:47:
         d6:a0:bd:21:fb:61:f2:79:76:fb:cb:6f:4f:c8:1f:b0:1e:ae:
         c7:7a:21:2a:4c:a1:2f:d7:7e:47:18:50:91:8d:af:f1:c7:da:
         36:61:9f:94:aa:09:76:3c:b3:c3:af:a4:8b:2e:d5:95:45:77:
         26:77:33:17:38:5d:8d:7f:01:df:dc:f3:b7:a3:a4:ad:b1:9d:
         58:08:6e:c2:d5:67:5d:4b:98:5c:ed:7b:7f:d3:ee:92:d6:91:
         0b:ad:92:21:0f:47:40:13:d6:00:7f:2d:7f:8f:b1:b3:d9:e7:
         81:e7:24:15:11:56:4e:34:72:eb:ac:98:31:09:d2:45:bd:2f:
         07:de:33:84:5b:94:42:54:f8:f7:86:24:f9:4d:52:69:46:83:
         60:0e:1d:59:65:2f:90:9e:bc:f6:fd:71:06:2a:38:8c:c2:a3:
         fc:84:42:51:79:64:58:b3:49:14:27:c4:97:31:bf:ed:78:ae:
         b5:29:45:3c:2e:30:52:be:40:d1:3c:8e:27:9a:87:99:21:f6:
         ec:c0:d5:be:74:51:61:ba:3b:b4:1f:e5:6b:4b:07:de:05:da:
         6b:b9:97:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org