Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5E5173B0E1228A29F5FC14D19B31ACC3E65FCE29.cer
File:                     5E5173B0E1228A29F5FC14D19B31ACC3E65FCE29.cer (raw, json)
Hash identifier:          DOWqM8A3GB03IHyCV++nRdw7NzEH+8XPNO1ofFVoNxE=
Subject key identifier:   5E:51:73:B0:E1:22:8A:29:F5:FC:14:D1:9B:31:AC:C3:E6:5F:CE:29
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       53FEBDDECF4B06AA1D0E24659FA94AC6B3513518
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/0/5E5173B0E1228A29F5FC14D19B31ACC3E65FCE29.mft
caRepository:             rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 25 Nov 2022 01:14:07 +0000
Certificate not after:    Fri 24 Nov 2023 01:19:07 +0000
Subordinate resources:    AS: 266142
                          IP: 186.65.104.0/22
                          IP: 2804:3b54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fe:bd:de:cf:4b:06:aa:1d:0e:24:65:9f:a9:4a:c6:b3:51:35:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 25 01:14:07 2022 GMT
            Not After : Nov 24 01:19:07 2023 GMT
        Subject: CN=5E5173B0E1228A29F5FC14D19B31ACC3E65FCE29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6a:04:04:c3:ca:c8:94:44:75:57:14:bf:d9:
                    ff:c1:f0:fa:ad:e4:72:00:73:50:d5:1e:21:95:bb:
                    3d:cd:80:25:8d:f6:28:e3:ec:ea:c5:18:83:76:87:
                    a8:f9:6a:b9:bb:1d:6a:13:be:4f:f9:06:d3:4b:85:
                    a2:65:a6:73:5c:17:d7:e5:40:77:51:9e:e6:23:c4:
                    f2:9e:9d:67:8f:a0:c8:ef:de:0f:aa:bf:2e:52:62:
                    56:1d:6f:a0:79:4e:03:b9:52:9a:0d:4f:75:2c:62:
                    05:46:b0:f5:7a:af:92:94:58:40:ca:a9:43:aa:f7:
                    9b:ab:97:b8:7e:91:29:7f:6d:5c:57:c0:63:77:47:
                    1e:a7:3f:be:56:29:49:09:58:fd:f4:33:bc:fa:37:
                    08:85:98:9b:48:e5:82:7b:b7:cf:76:b9:63:3a:3a:
                    82:59:2b:13:53:8c:f8:b3:ec:21:72:96:c7:89:2f:
                    cd:8e:d1:75:4c:2e:37:b9:b1:e5:13:4c:19:b2:41:
                    5c:8c:db:7e:51:3e:81:67:32:6b:8b:d7:65:27:a4:
                    83:5f:68:f7:a8:de:10:0f:70:9e:7b:2b:31:43:e4:
                    e9:0b:36:72:92:57:ca:6e:a2:3e:a2:e7:45:0f:16:
                    c6:5c:c4:80:3a:1d:68:d2:50:8a:8c:83:c5:7e:9f:
                    fd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:51:73:B0:E1:22:8A:29:F5:FC:14:D1:9B:31:AC:C3:E6:5F:CE:29
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/0/5E5173B0E1228A29F5FC14D19B31ACC3E65FCE29.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.104.0/22
                IPv6:
                  2804:3b54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266142

    Signature Algorithm: sha256WithRSAEncryption
         85:70:e9:d3:4a:e8:89:8b:9f:2e:b9:a3:70:c6:ea:d9:98:2e:
         6c:de:26:46:8a:e0:34:03:c7:83:19:6c:3e:c0:f9:45:10:68:
         44:76:2a:61:54:31:98:d3:34:d3:68:3c:ab:72:95:f8:7d:fc:
         fc:0e:d8:ba:59:0a:72:08:a5:b7:08:76:3b:5f:17:c8:4e:f6:
         06:1c:1b:b1:cf:09:e0:1e:36:ce:f3:73:3f:6d:09:1b:27:ae:
         6f:f7:da:b0:33:71:78:b6:76:1c:75:80:09:f8:49:a9:d9:83:
         30:17:58:a3:d0:f9:27:e6:16:0b:cb:c7:dc:2c:d7:e3:e8:73:
         3e:d9:9f:88:73:77:44:09:c4:ad:fa:67:67:08:88:de:fb:b9:
         05:e6:de:15:17:73:a9:ae:f0:83:90:9b:b9:60:c1:27:40:a1:
         5c:7a:72:e8:ca:c8:89:a8:f3:77:be:38:52:76:b0:1f:63:9c:
         e8:0d:c3:97:af:6b:85:2b:94:34:ca:5e:de:21:c9:39:62:f7:
         3e:c2:a6:22:08:23:e4:19:ec:ca:38:fa:a3:f7:07:a9:c0:5b:
         ef:27:1c:7c:c0:ce:63:78:b7:3e:ac:c6:46:08:7b:1b:0b:74:
         7a:b2:78:dd:52:c7:00:d0:34:49:a5:28:44:4c:21:95:68:86:
         9c:b1:a1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org