Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5E56ABB8EAE222F1403B38F41B31D10545ABAD6E.cer
File:                     5E56ABB8EAE222F1403B38F41B31D10545ABAD6E.cer (raw, json)
Hash identifier:          MHL2w7m4VfM2ZoEimuFjiPB4g/8rP3uUTpdyqQpdlgU=
Subject key identifier:   5E:56:AB:B8:EA:E2:22:F1:40:3B:38:F4:1B:31:D1:05:45:AB:AD:6E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5343B7BA939FEB4600B131F3145154ED2CB6BA36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/1/5E56ABB8EAE222F1403B38F41B31D10545ABAD6E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Sep 2023 17:48:09 +0000
Certificate not after:    Mon 16 Sep 2024 17:53:09 +0000
Subordinate resources:    AS: 268126
                          IP: 45.169.228.0/22
                          IP: 2804:5864::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:43:b7:ba:93:9f:eb:46:00:b1:31:f3:14:51:54:ed:2c:b6:ba:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 18 17:48:09 2023 GMT
            Not After : Sep 16 17:53:09 2024 GMT
        Subject: CN=5E56ABB8EAE222F1403B38F41B31D10545ABAD6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:56:77:cf:c1:e6:1a:b9:e3:27:46:cc:8e:ed:
                    6b:cb:40:eb:80:e8:93:c7:e3:03:c8:8f:77:d7:51:
                    64:53:07:fe:71:f1:15:69:e3:9b:54:b1:e6:45:4f:
                    d7:01:e1:8c:33:03:19:99:4a:b9:ef:d0:dc:93:12:
                    0c:7f:ee:4d:99:ba:a5:27:b7:61:ec:7b:cc:12:e6:
                    26:aa:04:c0:97:4f:bf:87:be:0c:ef:c7:22:c1:c1:
                    21:e6:26:d3:8a:da:2b:8a:65:9d:22:c1:ed:54:9c:
                    0d:4a:1d:64:cf:57:f3:ed:75:2b:54:3d:90:97:51:
                    e8:2b:97:2f:81:e2:ed:48:23:d9:f5:1b:5d:c2:ed:
                    6b:e5:65:84:ad:19:7e:d6:24:ee:d3:42:76:83:6f:
                    99:e2:1c:2e:fb:ae:d1:5a:f9:39:cd:87:66:f4:c5:
                    fe:20:fe:6a:5d:3d:86:cc:23:40:0d:35:75:3b:3a:
                    74:39:67:cc:ec:82:15:a0:fd:92:9e:62:00:30:78:
                    ab:9d:33:1e:b0:85:7a:64:ef:91:8d:06:82:3b:55:
                    89:5e:88:e6:56:2c:ca:40:ab:70:21:67:e5:9a:45:
                    3f:ec:3b:c8:a7:b2:48:f3:43:97:e7:41:99:72:de:
                    ca:e3:72:80:98:7b:ac:dd:c8:90:6a:00:59:86:b2:
                    78:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:56:AB:B8:EA:E2:22:F1:40:3B:38:F4:1B:31:D1:05:45:AB:AD:6E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/1/5E56ABB8EAE222F1403B38F41B31D10545ABAD6E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.228.0/22
                IPv6:
                  2804:5864::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268126

    Signature Algorithm: sha256WithRSAEncryption
         78:d0:f1:88:6a:fe:57:a8:a9:af:3d:10:1f:c4:b7:50:fb:6e:
         e4:db:a4:22:d6:77:92:b4:61:d1:f9:e2:eb:54:ea:62:38:dc:
         16:f1:1e:0d:d5:a7:78:4a:32:85:5d:dd:2e:94:f3:10:13:e9:
         ea:e2:29:d5:23:76:8c:cc:91:78:eb:17:ea:c6:7b:c9:62:84:
         71:14:9d:0a:c8:39:3a:f9:08:f3:19:d5:6c:ba:e7:25:56:28:
         f4:92:94:e5:f2:45:ef:56:73:46:5b:c1:82:07:b7:a7:53:56:
         5a:97:99:53:0b:f8:d2:38:b1:28:03:d4:89:0e:c1:0e:13:4f:
         0e:be:8c:e5:f1:14:72:60:88:28:86:43:d9:8a:85:40:dc:54:
         9d:3c:b4:89:20:61:60:5a:f5:33:f5:dc:b7:27:c8:0e:f6:8a:
         0d:40:b2:f9:e9:87:1d:b8:ec:f2:52:ec:3f:ec:9e:0d:52:82:
         2c:36:97:84:b6:e8:a2:8c:c0:92:e7:18:04:be:c0:c8:dc:56:
         75:de:ba:51:69:c5:73:c1:63:4c:8a:96:b2:cd:81:80:a6:ae:
         91:57:4d:13:42:93:b2:ca:7b:19:95:0f:57:11:3b:59:ab:f3:
         27:96:39:2e:76:cd:07:83:d6:88:57:b0:c0:f5:08:da:df:20:
         a0:25:14:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org