Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5DEF1069E775D55236467B1751C7F6CE5EF180F2.cer
File:                     5DEF1069E775D55236467B1751C7F6CE5EF180F2.cer (raw, json)
Hash identifier:          Q8s1F6amLiIrsA6KvN7dMYVCjcdV0RvlJMYGzSAmdTA=
Subject key identifier:   5D:EF:10:69:E7:75:D5:52:36:46:7B:17:51:C7:F6:CE:5E:F1:80:F2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6C58B33373F7D39F3C41E0273C2ED45241964B0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/0/5DEF1069E775D55236467B1751C7F6CE5EF180F2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 01:29:41 +0000
Certificate not after:    Thu 13 Feb 2025 01:34:41 +0000
Subordinate resources:    AS: 269238
                          IP: 45.182.208.0/22
                          IP: 2804:6180::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:58:b3:33:73:f7:d3:9f:3c:41:e0:27:3c:2e:d4:52:41:96:4b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 01:29:41 2024 GMT
            Not After : Feb 13 01:34:41 2025 GMT
        Subject: CN=5DEF1069E775D55236467B1751C7F6CE5EF180F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:33:a2:32:c0:11:db:e3:bb:ab:58:ea:1c:a1:
                    ab:b5:d6:8c:ea:8e:d3:98:19:95:71:c1:49:25:e1:
                    cc:63:87:45:80:00:7a:11:f0:82:64:53:3f:0f:8b:
                    4e:77:b1:6d:62:37:7d:f4:e7:2a:ca:2f:46:ec:5e:
                    20:0f:f0:63:01:ae:9c:0e:de:84:0b:4f:f0:d6:9b:
                    04:84:1a:29:b8:10:cc:2b:9a:0b:95:62:7b:4e:67:
                    40:0a:ee:08:9d:b1:25:91:b6:da:72:55:c8:81:c4:
                    4e:cf:38:e6:03:c0:4e:bd:82:81:92:ec:4d:6b:03:
                    03:39:7f:22:77:4e:c4:b1:1a:7f:7c:f8:ce:70:5e:
                    dc:dd:38:5a:a3:25:88:74:fb:b0:27:99:55:00:c0:
                    d6:b8:85:dd:1b:b2:96:a8:e5:25:70:3c:d2:d5:18:
                    ca:84:a2:3e:86:6d:f0:b5:57:df:dd:f0:96:e8:31:
                    41:84:4d:67:2d:31:ba:9f:6a:7f:97:1a:f1:91:59:
                    3c:9f:52:bf:73:3a:61:58:7e:91:68:a6:8b:05:44:
                    33:ce:b7:d0:3f:1f:e6:13:64:c7:60:d2:2b:89:f1:
                    85:46:f4:b3:ad:27:b2:33:c7:2d:0c:7a:fe:04:27:
                    48:1d:55:24:49:17:25:48:63:9f:98:f8:22:21:1d:
                    8d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:EF:10:69:E7:75:D5:52:36:46:7B:17:51:C7:F6:CE:5E:F1:80:F2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/0/5DEF1069E775D55236467B1751C7F6CE5EF180F2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.208.0/22
                IPv6:
                  2804:6180::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269238

    Signature Algorithm: sha256WithRSAEncryption
         41:30:0b:b8:f9:d6:bc:05:62:4f:2d:ae:d7:f8:92:4a:74:e6:
         40:f2:e0:b9:74:41:f3:bf:36:5a:2d:3a:48:bf:50:d6:38:92:
         50:3a:3b:54:2b:3c:bb:8e:c7:bb:4d:f1:25:fa:3c:40:ea:b6:
         cc:11:52:bb:94:0e:df:54:7b:94:35:ee:fc:59:f2:30:51:ff:
         23:bb:b5:c5:83:4c:df:f1:09:8b:7b:f4:05:6b:41:52:b8:28:
         ef:ef:ff:9d:5b:35:cf:74:2f:ec:61:aa:e7:25:61:95:f7:21:
         0f:ab:c0:77:e1:7f:f3:5d:8f:c7:33:c0:01:ac:41:6a:70:44:
         b8:e9:ba:db:a0:5c:1a:12:29:5b:95:c5:c0:13:b9:7d:e9:b4:
         d9:b7:75:8b:4f:ac:95:99:5a:c2:fc:2d:a5:ec:ee:ca:bd:36:
         eb:a2:be:1c:73:1e:02:82:86:13:da:d3:1f:ea:8c:ca:6f:93:
         96:fc:b9:72:ea:af:a2:6b:3c:b8:77:d3:95:0e:25:cd:1a:b1:
         ee:0e:55:fc:9a:c2:79:de:47:ed:d3:af:b7:5b:d3:5f:08:e4:
         88:d6:4d:fd:ee:a9:97:12:f1:7e:42:cb:5a:d3:8e:fe:a2:c6:
         61:0f:f9:e7:73:44:85:ee:dd:1c:52:ed:38:5f:59:f8:6b:9c:
         19:d3:e1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org