Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9.cer
File:                     5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9.cer (raw, json)
Hash identifier:          EBIJiR/5tb5bAGT2VlOlqxGq5ANlx/dauJ9NwXU8gEo=
Subject key identifier:   5E:CF:CC:A7:2C:07:7D:A2:71:78:AF:AC:08:44:B3:A0:6F:72:C7:F9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0DD01D3A33E54688DE82E621039EC1E971EDA6B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Apr 2023 06:59:17 +0000
Certificate not after:    Thu 04 Apr 2024 07:04:17 +0000
Subordinate resources:    AS: 269391
                          IP: 45.185.172.0/22
                          IP: 2804:63e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d0:1d:3a:33:e5:46:88:de:82:e6:21:03:9e:c1:e9:71:ed:a6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  6 06:59:17 2023 GMT
            Not After : Apr  4 07:04:17 2024 GMT
        Subject: CN=5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fc:29:40:f2:80:03:21:c2:d2:25:a6:e8:6d:
                    33:d7:21:eb:fd:d9:c0:94:44:7e:d1:f4:9a:be:43:
                    be:84:81:13:94:0c:75:f8:3c:55:72:a3:76:e2:b6:
                    a0:d5:24:94:70:05:0e:7b:ba:2e:cb:69:10:f1:9b:
                    47:ba:0a:31:01:16:f7:ef:c2:70:04:5a:c1:07:4b:
                    f8:14:8d:5a:2f:87:63:04:ba:86:52:b1:d1:62:49:
                    be:7a:ed:3b:87:6e:bf:c6:9b:33:e2:75:62:eb:cc:
                    f2:15:c4:4e:c4:fd:6e:b0:44:d8:72:ba:03:22:eb:
                    89:5e:12:1e:04:08:79:4a:de:f8:af:22:ed:de:f0:
                    8d:ca:b9:c9:01:51:88:81:a8:f8:bc:4a:3d:31:ee:
                    ea:90:4a:5e:42:d8:6f:69:ca:a6:da:03:b9:ac:f1:
                    ef:5b:3a:64:c5:43:d5:cd:80:03:5f:06:33:c3:3d:
                    6a:cf:be:bb:0b:42:f0:09:0f:72:32:32:0b:98:c1:
                    ee:3b:27:8b:68:49:4a:e1:c4:91:f4:be:59:de:0e:
                    14:df:49:20:69:76:06:ed:75:50:a8:d9:86:72:8b:
                    2a:bc:63:93:17:6c:9c:31:29:4f:5b:23:ad:d6:80:
                    18:7b:73:54:ac:d9:3c:e1:3b:68:53:bf:56:3e:e2:
                    86:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:CF:CC:A7:2C:07:7D:A2:71:78:AF:AC:08:44:B3:A0:6F:72:C7:F9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.172.0/22
                IPv6:
                  2804:63e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269391

    Signature Algorithm: sha256WithRSAEncryption
         30:b9:ef:09:bb:0e:79:e0:14:b7:78:e3:11:06:0b:93:42:d0:
         d3:27:68:4c:30:9b:9d:4f:23:f7:7e:2c:d9:46:78:9c:4b:9b:
         c0:62:4d:27:14:9e:7b:52:b0:c1:6c:05:98:84:b0:18:71:8e:
         49:16:47:d0:75:14:f6:c4:aa:99:ad:5c:96:fc:8c:ca:52:e2:
         3d:22:a0:9c:15:ff:7b:c6:8b:c6:a3:e4:44:a3:24:c7:16:02:
         38:ac:60:56:44:95:e9:6c:f6:c6:b6:30:09:56:da:a8:33:8d:
         44:3b:cd:38:ac:d3:4b:05:6c:28:f2:22:82:62:2d:ed:42:9c:
         49:e1:4b:5d:a1:1a:12:b4:78:c1:b8:a8:64:e8:75:05:df:e2:
         8f:08:bb:3a:39:82:c8:d6:15:1f:42:94:cb:53:fa:e9:3e:b2:
         85:d2:f0:d2:5d:cc:ad:09:ab:66:e8:09:c1:d6:e4:5b:79:f7:
         91:bb:68:5c:3c:cd:22:75:e3:e3:3f:98:74:ba:ef:fc:fd:83:
         e7:f7:6e:58:dc:16:88:0e:af:16:ce:c8:70:ab:aa:a3:d6:55:
         e0:f3:7a:84:78:66:35:8d:a7:0a:c1:4e:11:d5:66:b6:ab:a4:
         7b:91:52:98:60:a2:cb:01:1d:59:64:2e:03:a6:53:6d:0b:d6:
         d0:fd:dc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org