Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5ED9A326682E54E1175C1381F6ECB9EDD2844040.cer
File:                     5ED9A326682E54E1175C1381F6ECB9EDD2844040.cer (raw, json)
Hash identifier:          a1Gw5HIYwtiPlqyopDjhfBzaRRX6QqvtDqePyMjVQg4=
Subject key identifier:   5E:D9:A3:26:68:2E:54:E1:17:5C:13:81:F6:EC:B9:ED:D2:84:40:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       49A268EB1CD8CDCEA2D64CC725ABB9455FC5A77D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/0/5ED9A326682E54E1175C1381F6ECB9EDD2844040.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jul 2023 13:32:59 +0000
Certificate not after:    Tue 23 Jul 2024 13:37:59 +0000
Subordinate resources:    AS: 262906
                          IP: 177.23.248.0/22
                          IP: 2804:8acc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a2:68:eb:1c:d8:cd:ce:a2:d6:4c:c7:25:ab:b9:45:5f:c5:a7:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 13:32:59 2023 GMT
            Not After : Jul 23 13:37:59 2024 GMT
        Subject: CN=5ED9A326682E54E1175C1381F6ECB9EDD2844040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:29:c5:5d:1b:6f:06:d3:1c:fe:a9:f4:bc:fc:
                    22:23:e3:d7:b0:14:5d:5d:72:13:27:5f:53:7f:1c:
                    7a:40:30:0a:42:48:b7:bc:89:8c:3d:08:c6:97:bc:
                    e4:23:b8:85:f2:4e:9f:27:24:07:88:51:c2:e4:ca:
                    8c:58:3f:6e:36:9e:c8:d2:7b:45:6d:15:9f:31:dc:
                    be:b2:5e:24:24:68:bf:5d:a0:11:e7:5c:46:c9:12:
                    fa:c3:87:a4:1b:14:9a:27:91:34:98:46:75:ae:60:
                    44:ed:fe:8a:ec:28:a5:44:5e:c2:df:e8:ce:1b:14:
                    ed:e6:4d:0f:29:8f:5b:11:61:3d:13:89:c3:70:eb:
                    15:3e:b1:d1:9f:c7:c7:54:12:d4:b1:18:ba:42:c3:
                    07:57:df:95:bf:99:6f:b1:e2:54:8f:d9:d5:64:c5:
                    ac:1b:11:2f:a7:2f:58:5e:ef:0d:34:73:fd:7c:ac:
                    ae:35:97:ac:9d:3a:32:7f:6a:95:84:f4:65:5a:5d:
                    4c:43:88:a2:41:d4:e5:d2:58:06:a9:db:c4:06:1f:
                    af:b2:a4:73:62:f3:a2:e3:18:0c:e8:e1:19:62:bb:
                    95:03:d4:5d:3f:0a:e9:d9:7f:ef:7b:8e:ad:99:cb:
                    e4:c6:36:28:32:f4:9d:da:d2:81:1f:5f:f5:5f:2b:
                    13:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:D9:A3:26:68:2E:54:E1:17:5C:13:81:F6:EC:B9:ED:D2:84:40:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5fhfyQuYGKoaC4AuquuLLrGXcSESsHurje5ca5DwoHBF/0/5ED9A326682E54E1175C1381F6ECB9EDD2844040.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.248.0/22
                IPv6:
                  2804:8acc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262906

    Signature Algorithm: sha256WithRSAEncryption
         a2:61:07:08:cd:ad:39:c3:47:d9:f3:89:9a:9e:34:c5:4d:b1:
         b4:4d:b3:2c:b5:03:d1:fb:d9:b5:18:47:78:01:f8:c4:5a:d3:
         d8:57:d2:ce:bc:cc:8c:28:6e:83:28:2c:1c:09:4a:e4:05:a7:
         c5:29:2f:a9:ea:d3:99:75:15:a3:82:67:00:03:db:56:97:95:
         fd:e5:03:1c:9b:f5:38:db:5a:86:7d:09:2a:c0:1e:33:1a:35:
         4a:98:6a:4a:af:40:09:35:05:30:9b:8e:c9:3a:c1:88:99:c9:
         65:74:97:e8:75:39:80:93:86:66:21:99:84:df:d3:3b:d2:e4:
         30:c3:7f:56:5b:26:aa:cb:3b:ae:a2:ad:4e:ee:ba:e0:66:3d:
         f0:f4:ce:03:02:5b:b7:bb:29:f1:9a:c0:1d:6d:ba:9c:c1:4b:
         06:62:61:98:04:0e:c3:36:21:f2:37:c4:85:e2:68:16:b6:a5:
         72:29:00:c5:9f:82:96:fa:f9:bf:7b:82:83:06:a8:cd:27:a2:
         77:8b:8d:69:97:60:7b:b4:82:56:5a:23:2e:f2:df:e3:48:82:
         2c:74:72:4f:84:0f:28:d8:c7:9c:6a:9d:d3:81:99:fd:41:55:
         f5:7d:56:a7:d9:92:e8:ca:4a:a2:b8:a3:08:ac:df:ea:65:06:
         d8:62:13:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org