Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5DF6C9E1FF204B9B901D13DB0EA019AB4C0D0BF8.cer
File:                     5DF6C9E1FF204B9B901D13DB0EA019AB4C0D0BF8.cer (raw, json)
Hash identifier:          1EZKBvhxkQ+MiAbIzHYZxBhFHxuBUvgqGX+zxgs0MEw=
Subject key identifier:   5D:F6:C9:E1:FF:20:4B:9B:90:1D:13:DB:0E:A0:19:AB:4C:0D:0B:F8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       25A9B0B7AFFF756AA99683198530C0563722747F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/5DF6C9E1FF204B9B901D13DB0EA019AB4C0D0BF8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Mar 2024 19:33:28 +0000
Certificate not after:    Mon 24 Mar 2025 19:38:28 +0000
Subordinate resources:    AS: 262474
                          IP: 177.53.168.0/21
                          IP: 177.154.20.0/22
                          IP: 2804:4dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a9:b0:b7:af:ff:75:6a:a9:96:83:19:85:30:c0:56:37:22:74:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 25 19:33:28 2024 GMT
            Not After : Mar 24 19:38:28 2025 GMT
        Subject: CN=5DF6C9E1FF204B9B901D13DB0EA019AB4C0D0BF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:4a:d8:8b:79:3b:18:c3:41:a4:56:36:7a:
                    c0:8c:89:76:3e:50:e5:62:56:f8:b1:3e:59:5a:09:
                    c9:90:15:14:cb:26:4f:70:a5:01:10:d4:14:84:6a:
                    37:cb:25:fc:e2:8a:9f:9c:e4:fd:7d:b7:e2:01:d4:
                    97:3a:ec:b0:a2:9a:9b:1d:e9:68:ae:4b:f3:83:e4:
                    fd:13:eb:de:7e:35:75:34:fe:d1:f7:5e:4d:82:1d:
                    49:92:81:44:07:fb:2e:b5:b6:46:25:80:0f:be:20:
                    62:93:ff:be:9b:d1:2a:66:db:bc:4a:b3:22:63:08:
                    28:49:41:06:14:96:16:f6:bb:1d:9b:8f:50:eb:11:
                    a6:16:1e:72:70:9f:a2:3e:55:5b:3a:f6:d3:e3:36:
                    41:92:ad:35:e7:93:b0:71:35:6b:14:d8:0e:52:02:
                    07:49:82:aa:de:8b:79:40:29:02:0f:48:d9:5a:5c:
                    c6:d9:5f:fc:39:f1:7e:cd:42:91:ce:d6:7d:3b:a6:
                    28:cc:63:e4:d2:7e:a8:cb:25:e5:e1:80:f6:b9:91:
                    e8:82:53:b1:95:f7:7c:54:82:21:39:e8:8c:0b:1c:
                    c3:10:8c:22:c9:26:5b:44:4e:bd:27:22:8b:b4:f6:
                    a8:91:c8:77:e3:82:39:a0:86:4c:23:1a:1c:de:28:
                    03:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:F6:C9:E1:FF:20:4B:9B:90:1D:13:DB:0E:A0:19:AB:4C:0D:0B:F8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/0/5DF6C9E1FF204B9B901D13DB0EA019AB4C0D0BF8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.168.0/21
                  177.154.20.0/22
                IPv6:
                  2804:4dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262474

    Signature Algorithm: sha256WithRSAEncryption
         1d:83:97:eb:f1:d3:13:ff:fb:7a:e3:6a:b9:61:78:cf:d9:00:
         40:37:c8:50:89:b7:65:b4:5c:64:24:5c:c3:34:af:a3:bf:11:
         b6:22:6a:99:c4:6e:31:a8:10:e5:d6:ef:10:5a:60:2e:1d:dd:
         b3:58:ff:0e:f7:eb:0a:42:f0:db:bf:18:1d:10:1f:d3:07:d0:
         64:b3:9f:58:6a:b3:7a:a0:ec:fe:36:d6:d7:8a:a4:81:6d:1f:
         4b:24:a9:28:9e:ff:65:3f:eb:e0:a4:a5:35:fc:7b:a0:26:a4:
         aa:d5:cd:3b:28:cb:8d:22:11:cf:0b:95:3e:1c:71:f2:be:48:
         db:27:ed:97:0e:0f:5a:40:98:a1:8f:f4:6d:84:02:12:23:b7:
         6a:77:60:e4:3f:02:0d:da:91:bf:eb:77:bd:61:0a:98:a1:5a:
         a4:5b:8f:4b:66:3c:a5:e8:80:b9:68:de:fc:cf:05:e6:f9:56:
         c4:c4:5e:a7:4f:0c:ed:90:3d:c9:24:07:db:38:4b:df:dd:00:
         48:c4:0e:fa:9b:e3:78:84:88:fe:81:f1:5a:2d:3a:7b:9b:51:
         5f:e1:d6:51:e2:30:29:c8:68:e5:23:48:b5:fc:4b:cf:ce:7a:
         01:d8:d8:13:ae:21:e7:06:b8:92:44:35:03:3c:a2:65:c5:81:
         0c:80:f7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org