Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5EBF6B302E6461438C4FA9446A9352773CC79187.cer
File:                     5EBF6B302E6461438C4FA9446A9352773CC79187.cer (raw, json)
Hash identifier:          aXxUlxQGS7LYIEbnqDDZU0NkUrngpAUVT4dPGkaBgZg=
Subject key identifier:   5E:BF:6B:30:2E:64:61:43:8C:4F:A9:44:6A:93:52:77:3C:C7:91:87
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1CDE41EB444540F002B5AE952161A561DD047CA5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/5EBF6B302E6461438C4FA9446A9352773CC79187.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Feb 2024 20:05:15 +0000
Certificate not after:    Tue 04 Feb 2025 20:10:15 +0000
Subordinate resources:    AS: 269355
                          IP: 45.185.4.0/22
                          IP: 2804:6358::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:de:41:eb:44:45:40:f0:02:b5:ae:95:21:61:a5:61:dd:04:7c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  6 20:05:15 2024 GMT
            Not After : Feb  4 20:10:15 2025 GMT
        Subject: CN=5EBF6B302E6461438C4FA9446A9352773CC79187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:25:91:77:dd:c3:ae:fd:fa:d4:66:ac:b7:
                    80:f2:96:5a:c2:25:52:41:22:58:5c:33:8f:c9:1a:
                    ac:a0:3a:21:e8:26:f1:9b:08:4b:74:87:e9:d2:31:
                    b4:4b:48:8a:c8:da:6f:e2:b6:9a:84:27:0b:87:98:
                    07:16:7d:f4:7c:54:d6:88:82:d6:5d:0f:8b:34:fb:
                    65:c9:40:c1:ed:26:6d:cf:91:0d:3f:e9:19:69:a5:
                    ee:89:f4:3d:6a:f8:4e:cb:c7:01:5c:5d:d5:5d:5e:
                    39:10:15:9b:6c:33:cc:87:9d:48:ee:ef:bd:bf:e8:
                    07:75:86:73:90:6f:10:87:b3:7d:72:79:df:6f:3a:
                    b1:ca:e3:8a:34:5c:7f:f6:45:cb:02:01:bc:ff:c2:
                    40:7f:db:d3:c1:a7:5d:02:25:d5:fc:88:60:33:72:
                    14:49:d8:9d:f3:5b:99:cf:3d:a1:5b:c7:f7:2d:19:
                    76:30:73:11:af:be:ad:58:c1:60:2e:4d:fd:a8:6d:
                    bc:f0:66:d1:c5:8e:3f:06:6e:b3:9b:fa:47:3e:ed:
                    f4:9e:2f:ce:54:20:4c:3a:31:32:f7:0f:c3:9f:a8:
                    6c:f5:30:f1:23:01:26:5a:a9:5c:46:d6:89:d5:5d:
                    58:3e:b4:25:75:11:bd:3a:28:cb:2e:9d:2d:b9:83:
                    ec:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:BF:6B:30:2E:64:61:43:8C:4F:A9:44:6A:93:52:77:3C:C7:91:87
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/0/5EBF6B302E6461438C4FA9446A9352773CC79187.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.4.0/22
                IPv6:
                  2804:6358::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269355

    Signature Algorithm: sha256WithRSAEncryption
         ac:13:bf:ef:9b:0f:1b:ad:d4:7b:01:6c:8b:af:e7:ee:ff:3c:
         c5:24:15:52:bc:75:3d:fe:57:10:12:95:99:5a:02:38:59:f7:
         5b:74:25:52:d9:ac:c8:7b:68:1f:9c:f0:71:e8:58:a0:16:d4:
         21:f5:77:a4:8c:13:8e:6c:57:3a:36:ad:63:47:bb:74:d1:e9:
         13:02:dd:04:9f:d6:12:da:69:bc:90:89:3c:d8:5d:86:84:ee:
         4b:e1:1f:55:3b:bb:9c:85:5a:60:2f:fe:ab:ab:fd:73:48:dd:
         9e:3f:ba:09:4d:27:cc:98:6d:10:01:34:5b:13:45:35:71:28:
         cf:16:74:7e:c3:66:ac:2a:cb:33:11:b3:92:0a:5c:6e:57:2e:
         b1:23:5c:e9:48:23:05:0f:83:0d:6b:f9:54:02:01:5b:ef:17:
         0a:76:a7:d8:42:18:91:c6:8a:49:d2:81:c3:0e:2a:eb:36:bf:
         8f:d0:25:16:60:a8:f9:ce:96:08:03:46:57:73:98:88:a7:31:
         87:87:52:0a:09:3e:bc:2a:40:4a:93:b4:ee:6a:14:55:96:99:
         02:1e:ee:4e:84:dc:0a:c8:7c:04:ea:74:52:de:26:8d:4e:1a:
         03:64:2c:f1:34:15:63:c4:7f:61:b5:a1:1a:12:5a:84:0f:c7:
         c5:0a:24:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org