Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5E7560B6DA198E6A2362FB8B5517DF33734AC379.cer
File:                     5E7560B6DA198E6A2362FB8B5517DF33734AC379.cer (raw, json)
Hash identifier:          cnkMG/lQ5FJPZGRTMuQcIn/VaSxRWOik1InirbzHswQ=
Subject key identifier:   5E:75:60:B6:DA:19:8E:6A:23:62:FB:8B:55:17:DF:33:73:4A:C3:79
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5A295433084B9271E49115A69EAEA63585E57CAC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/5E7560B6DA198E6A2362FB8B5517DF33734AC379.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Jun 2023 19:34:31 +0000
Certificate not after:    Wed 12 Jun 2024 19:39:31 +0000
Subordinate resources:    AS: 267142
                          IP: 45.229.240.0/22
                          IP: 2804:48c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:29:54:33:08:4b:92:71:e4:91:15:a6:9e:ae:a6:35:85:e5:7c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 14 19:34:31 2023 GMT
            Not After : Jun 12 19:39:31 2024 GMT
        Subject: CN=5E7560B6DA198E6A2362FB8B5517DF33734AC379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b7:47:1f:1f:b3:15:7a:5b:39:4d:62:3b:d9:
                    79:bd:3c:5c:41:38:e9:e2:27:cc:ec:59:78:ba:d5:
                    3b:44:68:c2:9a:d2:11:68:5a:26:14:83:dd:9a:06:
                    b2:9e:9c:ee:3a:b4:dd:85:84:93:b5:ec:fd:db:a5:
                    26:d4:ec:4b:53:46:80:12:b9:b8:a1:16:60:22:0f:
                    bc:97:ae:1c:7b:6d:8a:5c:b5:cb:c1:8b:ae:d6:5b:
                    30:20:72:2d:ea:54:2c:49:ae:92:71:f1:e1:ca:ad:
                    74:c1:8f:ca:9e:e7:c4:b8:d3:2c:ae:72:4c:f1:2f:
                    56:c2:a1:67:77:2e:00:27:28:87:05:34:4c:3c:1e:
                    53:5c:3e:ec:57:2f:c4:2c:3d:66:26:43:32:c5:2f:
                    e8:24:5c:a6:01:3d:c2:e2:f9:64:c0:cb:9a:76:e1:
                    ca:28:0b:52:dd:84:bc:11:ac:aa:c4:2e:39:85:1c:
                    2f:ae:e3:de:f4:95:e2:7d:84:13:71:dd:54:db:c6:
                    ac:b8:be:c6:99:3d:43:f7:c5:14:20:d5:13:f8:d6:
                    5d:54:89:e2:1a:22:ca:29:fe:88:0f:51:97:26:46:
                    4a:94:a8:ce:0b:8b:b5:33:2e:85:6f:8c:6a:1d:a4:
                    e3:da:02:51:25:93:a8:2b:86:6c:20:1c:fb:9d:e8:
                    5c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:75:60:B6:DA:19:8E:6A:23:62:FB:8B:55:17:DF:33:73:4A:C3:79
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/5E7560B6DA198E6A2362FB8B5517DF33734AC379.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.240.0/22
                IPv6:
                  2804:48c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267142

    Signature Algorithm: sha256WithRSAEncryption
         58:3e:52:a8:7b:57:f0:d5:7a:ea:90:8b:2c:30:6f:19:05:d8:
         47:37:ef:12:70:70:29:cf:8e:a6:af:df:dd:0b:c0:27:2e:f1:
         b5:a4:b0:75:c6:0e:ac:2d:0a:0f:62:d9:b6:9c:14:d6:ae:c6:
         89:a8:60:0c:0e:a3:28:4b:c6:cd:03:d6:f5:90:76:81:69:c2:
         0a:fe:fb:8d:ee:28:dd:33:a8:8a:84:17:e4:d8:c8:ff:71:d6:
         29:a6:67:2c:fb:7a:ff:00:07:3e:8e:2c:0d:f0:2e:19:95:bf:
         b2:2a:af:e3:88:66:7c:45:49:99:70:d5:66:79:17:8b:13:c4:
         ec:3c:d2:90:f4:d8:71:e7:22:cd:d7:39:67:78:c0:a4:68:be:
         ff:5a:97:b3:be:48:13:35:07:04:a5:f9:a1:87:9a:eb:81:c6:
         1d:4f:1c:83:17:12:ce:e1:f6:6b:f8:59:53:6e:f7:75:d5:d8:
         7b:a9:d1:8b:2f:5f:15:76:4f:28:52:ff:ab:a4:f6:9c:d1:e1:
         cb:9b:65:a8:4e:1f:97:7a:2e:86:c4:98:f7:d3:a2:8d:96:c1:
         6b:11:e9:4c:aa:66:f2:50:a3:8d:34:48:51:6d:ee:52:13:98:
         af:81:e7:3e:72:3d:bb:ac:4a:7c:77:e8:7e:d5:e6:95:2b:be:
         fa:a9:d2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org