Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5EACBEBA8B5F342EFD576207C512E2615117236A.cer
File:                     5EACBEBA8B5F342EFD576207C512E2615117236A.cer (raw, json)
Hash identifier:          766YjPfM3UXV1xXEp6HZP6RrBTuzoqH5yTMJxsp4Toc=
Subject key identifier:   5E:AC:BE:BA:8B:5F:34:2E:FD:57:62:07:C5:12:E2:61:51:17:23:6A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E7CC001190466E779AD3DE12D139DA4733F0BE9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/5EACBEBA8B5F342EFD576207C512E2615117236A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jul 2023 18:03:17 +0000
Certificate not after:    Thu 25 Jul 2024 18:08:17 +0000
Subordinate resources:    AS: 263604
                          IP: 143.202.112.0/22
                          IP: 177.71.88.0/22
                          IP: 2804:fcc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7c:c0:01:19:04:66:e7:79:ad:3d:e1:2d:13:9d:a4:73:3f:0b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 27 18:03:17 2023 GMT
            Not After : Jul 25 18:08:17 2024 GMT
        Subject: CN=5EACBEBA8B5F342EFD576207C512E2615117236A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b7:05:33:33:f1:74:6c:3f:27:0e:a5:d2:3e:
                    61:eb:32:58:2e:74:0d:6c:65:2e:00:fd:de:c7:0a:
                    8e:a1:b8:28:1d:3d:1d:08:97:e5:0e:8d:4a:b9:90:
                    fd:35:08:19:10:89:a3:ca:b8:96:03:a3:03:0c:82:
                    4c:08:90:c1:41:87:8f:b7:0c:7e:58:c9:3a:46:4f:
                    39:a5:b5:49:b7:54:e4:71:59:4b:aa:94:32:cc:01:
                    6f:50:b2:e2:74:7e:ea:7b:6a:e0:6c:f7:ba:6b:8f:
                    23:9f:b1:ad:ea:3f:9f:6d:46:d2:34:52:59:86:85:
                    79:a1:45:8a:9d:3a:d1:4d:d9:5e:40:d7:82:d2:2f:
                    22:57:c9:81:f7:a5:c7:4d:3a:50:6e:d3:93:1d:15:
                    e5:f2:fc:96:84:a1:eb:c7:43:7a:32:28:ba:bd:7b:
                    95:41:00:85:a3:1e:b7:94:73:00:60:07:be:6b:9d:
                    4f:64:b8:8c:dc:92:3d:bc:00:3b:48:d8:4d:43:ca:
                    f2:b3:74:41:79:34:57:fb:ab:ca:4d:e6:d5:52:a5:
                    8c:49:ec:65:c1:92:45:ba:78:a2:c4:48:42:45:4c:
                    01:03:36:4b:e0:73:18:54:72:4d:7b:03:60:19:09:
                    fb:6e:64:41:5e:ce:f5:6f:f6:77:cd:b4:71:af:21:
                    26:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:AC:BE:BA:8B:5F:34:2E:FD:57:62:07:C5:12:E2:61:51:17:23:6A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/5EACBEBA8B5F342EFD576207C512E2615117236A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.112.0/22
                  177.71.88.0/22
                IPv6:
                  2804:fcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263604

    Signature Algorithm: sha256WithRSAEncryption
         a7:7e:dd:13:72:0f:3c:5e:ce:dc:34:26:02:16:14:f8:8e:f8:
         82:b1:1f:cc:83:12:6b:56:5f:eb:73:43:2a:d4:84:cf:20:ef:
         de:f1:f2:c4:2c:ed:e3:61:06:58:2d:52:a9:0b:9a:f5:ca:cc:
         bf:48:7b:cb:50:28:9c:bf:7c:cd:a7:2d:fe:0c:a7:03:f6:a3:
         11:9e:65:2f:16:0c:49:a5:bb:1e:42:b0:1b:48:0d:6e:e8:d3:
         98:16:a7:82:fa:cf:d8:c8:d5:b1:7e:77:4a:f4:4c:ad:91:21:
         05:ee:f6:36:71:1c:5c:37:4a:d0:76:93:60:4c:88:e0:80:16:
         ea:5f:fc:76:e2:ed:da:50:82:e0:4d:91:28:c4:77:2e:48:a4:
         0c:ef:7d:13:eb:12:fe:9f:cc:40:05:14:33:c6:6f:d0:16:f0:
         93:40:b0:23:31:ec:e2:a8:fa:4b:9d:da:13:38:2e:8c:6d:f5:
         90:19:49:f9:b3:54:36:83:59:4c:82:91:84:63:3e:39:c7:5b:
         ae:21:1d:31:69:52:81:d3:47:b3:10:b9:88:fa:e2:a0:f2:6d:
         6b:a4:d9:15:e3:3a:2e:a8:bf:71:01:84:76:35:cf:b2:58:d6:
         da:94:5c:e2:88:7f:d5:40:ac:5d:ce:0a:17:6f:fe:41:d2:ce:
         b4:e8:a2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org