Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5E836E5EC52C22563B2BB8EBC9932BF385D352A8.cer
File:                     5E836E5EC52C22563B2BB8EBC9932BF385D352A8.cer (raw, json)
Hash identifier:          W+n+AGBZ1OEhT76qrua7+sUPwDHLdG63e6oyxgMy3Bs=
Subject key identifier:   5E:83:6E:5E:C5:2C:22:56:3B:2B:B8:EB:C9:93:2B:F3:85:D3:52:A8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5443BFC9DD383F63273DA9B15D647146A7495DCF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/5E836E5EC52C22563B2BB8EBC9932BF385D352A8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Oct 2023 13:32:56 +0000
Certificate not after:    Thu 17 Oct 2024 13:37:56 +0000
Subordinate resources:    AS: 28300
                          IP: 177.223.160.0/19
                          IP: 179.97.224.0/19
                          IP: 179.107.160.0/19
                          IP: 189.28.160.0/20
                          IP: 2804:2ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:43:bf:c9:dd:38:3f:63:27:3d:a9:b1:5d:64:71:46:a7:49:5d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 19 13:32:56 2023 GMT
            Not After : Oct 17 13:37:56 2024 GMT
        Subject: CN=5E836E5EC52C22563B2BB8EBC9932BF385D352A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:6e:3d:9b:53:7f:05:8c:71:37:0b:59:30:
                    58:07:96:df:06:67:d3:f3:55:bd:e0:4e:3a:46:19:
                    a4:01:5e:af:9b:a9:6d:9f:0d:83:60:36:9e:3e:83:
                    e2:95:36:c6:16:64:82:6b:4f:3a:54:8a:9b:2f:eb:
                    b5:e1:f9:45:f8:50:ff:b4:13:e1:ea:ef:70:01:c2:
                    1b:5f:43:b4:f0:62:4c:e1:ae:89:42:2b:ec:5f:d3:
                    a4:98:8b:92:35:e8:41:08:69:98:ed:b1:d3:d8:76:
                    97:c7:37:13:9d:0f:6c:7f:ce:7c:84:85:18:37:d4:
                    de:05:af:4f:46:c5:fd:43:32:48:b8:12:9b:b8:21:
                    73:75:eb:3f:23:4f:a0:1a:f6:a5:f8:78:10:5e:6b:
                    91:f8:b1:68:1a:5b:e8:23:d3:3f:c2:78:ec:35:7a:
                    93:f3:a1:60:42:b2:f6:b5:63:ac:9b:a7:c5:72:c7:
                    ae:49:15:6f:7e:b1:fd:b0:34:46:cc:71:5c:e1:95:
                    33:01:c4:f5:53:fb:e0:94:98:9d:00:c3:aa:16:40:
                    45:8a:dd:d5:f9:d2:2a:86:f0:bc:f8:6c:0b:e4:8b:
                    05:8a:bd:68:59:cb:9c:8a:52:b4:fd:ee:11:85:5e:
                    9f:2c:27:78:13:a0:1b:e8:cd:07:cb:73:08:b5:37:
                    ec:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:83:6E:5E:C5:2C:22:56:3B:2B:B8:EB:C9:93:2B:F3:85:D3:52:A8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/5E836E5EC52C22563B2BB8EBC9932BF385D352A8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.160.0/19
                  179.97.224.0/19
                  179.107.160.0/19
                  189.28.160.0/20
                IPv6:
                  2804:2ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28300

    Signature Algorithm: sha256WithRSAEncryption
         27:27:ec:98:ef:89:d4:85:d7:f6:74:ad:50:e1:05:02:a0:d9:
         a3:b5:05:f4:de:02:09:55:0e:51:b2:dd:c2:91:6d:25:13:a5:
         af:28:b1:61:75:6c:eb:7e:35:4b:bf:e4:29:09:10:91:28:3d:
         81:da:b5:dd:3b:5c:24:34:6d:38:9e:6e:3e:de:17:fe:4b:2e:
         5a:32:f3:13:84:16:d6:47:e1:a8:bf:1e:d8:79:2a:11:e9:d9:
         5a:5b:ff:e8:73:83:91:b0:8a:3a:cd:9b:eb:36:ce:b3:18:0e:
         a2:82:66:3a:a0:c0:0b:b0:68:9f:ea:91:28:41:16:f7:f3:a2:
         cb:2f:cb:ee:53:45:8b:de:f5:88:d6:d8:d5:a4:73:39:27:a5:
         fb:f6:b8:e3:b0:f9:13:9e:78:f9:38:94:81:82:07:30:98:19:
         75:62:b3:67:b2:f9:69:40:93:72:da:f8:ec:ee:4e:3d:f1:d9:
         f8:26:05:fa:eb:86:fa:3a:5a:08:69:c2:15:93:fd:fd:d1:fe:
         a3:65:71:05:ee:05:40:70:18:12:ba:83:19:03:95:79:88:a5:
         ed:31:09:b8:78:52:53:17:7b:55:cf:d1:37:32:7a:98:5a:15:
         95:30:8c:ff:f2:87:f3:07:28:fc:1c:5b:b1:8e:d5:a8:71:8f:
         40:cf:f9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org