Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5EB537A15FD53CD0621615B69D55DB7153896898.cer
File:                     5EB537A15FD53CD0621615B69D55DB7153896898.cer (raw, json)
Hash identifier:          d2Nk/aDk8Vv9meZdzt2mp/meVmxe/XzQBRd4+anxM/c=
Subject key identifier:   5E:B5:37:A1:5F:D5:3C:D0:62:16:15:B6:9D:55:DB:71:53:89:68:98
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       196E9A78648B6E8117FB586D165B8BE7293E0121
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/0/5EB537A15FD53CD0621615B69D55DB7153896898.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Dec 2023 20:45:18 +0000
Certificate not after:    Fri 13 Dec 2024 20:50:18 +0000
Subordinate resources:    AS: 262772
                          IP: 186.232.176.0/22
                          IP: 186.233.236.0/22
                          IP: 2804:30e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6e:9a:78:64:8b:6e:81:17:fb:58:6d:16:5b:8b:e7:29:3e:01:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 15 20:45:18 2023 GMT
            Not After : Dec 13 20:50:18 2024 GMT
        Subject: CN=5EB537A15FD53CD0621615B69D55DB7153896898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:0a:2d:4e:54:85:12:6f:b8:1b:f6:09:0e:
                    10:a5:d2:77:06:77:44:d1:b9:9b:0f:03:19:90:ed:
                    d7:65:50:6a:18:e3:62:a4:5b:a4:07:97:ea:11:69:
                    0f:f1:69:6d:64:10:c7:cc:40:40:62:d3:2e:00:cb:
                    0b:b4:b0:09:fd:56:84:de:c5:98:fe:f6:b5:4b:f9:
                    c3:83:84:2d:8e:21:f2:49:4b:64:31:19:66:30:18:
                    15:30:d0:c1:40:57:e6:7a:fd:10:51:ab:93:c7:97:
                    51:5f:5b:91:87:58:e3:96:f3:de:fc:b8:b7:0d:6e:
                    e2:79:6f:70:7c:8f:43:e4:d9:e6:86:20:c8:0d:91:
                    56:13:2b:a6:72:83:5e:d2:3a:b4:0a:69:1c:a0:54:
                    38:76:5f:6c:ec:28:f0:38:40:79:d1:4f:a1:cd:6e:
                    1e:15:8b:6b:92:36:2f:1c:e0:2c:0e:39:da:e7:24:
                    7e:67:bc:b2:e2:a0:fa:f9:12:38:b0:b4:0e:52:73:
                    22:21:e8:10:87:f7:ce:98:93:c3:5a:02:9a:c7:b0:
                    4e:6a:80:57:49:07:e5:48:b3:28:18:1a:b2:19:9e:
                    a8:cd:93:c5:0c:aa:89:b4:93:dd:07:63:16:04:c3:
                    86:47:9f:9f:60:5b:e2:69:25:1f:b4:ad:bc:db:63:
                    38:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:B5:37:A1:5F:D5:3C:D0:62:16:15:B6:9D:55:DB:71:53:89:68:98
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/0/5EB537A15FD53CD0621615B69D55DB7153896898.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.176.0/22
                  186.233.236.0/22
                IPv6:
                  2804:30e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262772

    Signature Algorithm: sha256WithRSAEncryption
         55:2d:00:85:29:54:83:9b:26:0f:8a:06:ee:2d:b6:03:69:89:
         ac:ed:06:da:d3:fc:63:9b:27:50:38:84:4c:34:97:8e:cf:72:
         95:26:3d:2f:e4:e1:05:be:b0:cd:75:22:56:1c:e8:39:19:bc:
         d3:cf:fe:e9:a5:dd:4e:5a:b6:6f:cb:46:8e:eb:11:c9:a6:59:
         c8:ac:fd:bd:b8:ce:0b:58:e7:06:c9:50:29:10:44:fc:bd:56:
         65:8d:be:5d:4d:94:d7:19:ec:6a:24:0b:6f:f3:2a:31:73:5c:
         16:e3:ad:39:3b:01:ad:0a:1f:a3:30:f9:c9:f2:30:2f:b7:53:
         97:ab:c5:5f:44:a1:be:6f:d0:5b:1f:ff:9b:7a:34:8d:e1:44:
         74:ab:f8:5c:f2:69:62:c1:d1:a3:c8:61:4a:b1:82:d2:19:ce:
         98:61:71:11:ba:d7:bb:28:0e:8c:cd:b0:85:af:9e:a2:73:4f:
         d3:18:8d:46:d0:67:2e:a6:b8:64:f8:89:66:07:7d:c7:45:76:
         e0:78:b7:dd:a6:c8:38:51:a5:90:e6:b7:9d:37:10:93:bc:91:
         5c:90:a9:0b:e5:d5:3b:c3:3c:46:ae:d4:46:8c:9c:6d:b2:30:
         7f:f6:75:a0:44:09:b5:25:66:8c:1d:11:11:94:ff:b8:6a:57:
         33:8d:1e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org