Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5F42409813FA1D0419859E9639385F6E362A4A06.cer
File:                     5F42409813FA1D0419859E9639385F6E362A4A06.cer (raw, json)
Hash identifier:          kFgaCRt+XlZZhTazBnnYvnvSRXwIZnbQ/J2wORdAuQM=
Subject key identifier:   5F:42:40:98:13:FA:1D:04:19:85:9E:96:39:38:5F:6E:36:2A:4A:06
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       67E2B63F5ECC9AE6494E34C62D0851F8F5461C86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/warijSjJEV8nVc5KcLabSwroPbYEZpAV6xvDUXcYqBb/0/5F42409813FA1D0419859E9639385F6E362A4A06.mft
caRepository:             rsync://rpki-repo.registro.br/repo/warijSjJEV8nVc5KcLabSwroPbYEZpAV6xvDUXcYqBb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Feb 2024 17:39:18 +0000
Certificate not after:    Thu 30 Jan 2025 17:44:18 +0000
Subordinate resources:    AS: 272633
                          IP: 2804:8648::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e2:b6:3f:5e:cc:9a:e6:49:4e:34:c6:2d:08:51:f8:f5:46:1c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  1 17:39:18 2024 GMT
            Not After : Jan 30 17:44:18 2025 GMT
        Subject: CN=5F42409813FA1D0419859E9639385F6E362A4A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8d:d4:40:7e:2e:19:e6:97:86:5b:02:ff:1f:
                    d7:3c:37:51:88:06:ef:4a:00:51:4b:08:47:6a:57:
                    5d:36:1f:2d:f1:70:88:23:36:66:ee:e5:63:90:a5:
                    2e:d8:3e:50:2a:b4:9d:f2:7b:75:bc:33:75:58:1f:
                    66:26:e8:4c:fc:40:f0:ac:94:27:ef:90:6e:62:e6:
                    c3:f2:58:f6:13:20:07:d0:1d:b2:cd:70:fd:ff:34:
                    e0:0c:d8:37:b7:d3:4d:a8:45:26:0f:88:97:2d:36:
                    d5:e2:9a:bf:ec:30:6e:ac:5a:74:bf:68:26:aa:8f:
                    c3:45:a3:ff:89:f2:ea:0f:ab:19:ff:af:cd:47:7c:
                    d7:e2:09:f0:43:89:20:bf:95:53:72:d9:09:6d:ad:
                    56:1c:3c:42:06:9b:dc:e9:0e:a6:73:f2:0d:f5:64:
                    e5:2a:27:ce:27:16:7e:25:54:96:0c:7b:79:e0:a4:
                    81:4b:12:b5:dc:ca:92:07:9c:b0:f5:5c:9f:78:a1:
                    55:2d:c4:2b:dc:2e:0c:16:ba:b0:c1:72:e1:39:bc:
                    60:e7:f7:d1:88:b0:1b:9e:73:f6:5a:98:77:ad:d3:
                    36:85:95:ea:bd:d1:6c:68:c3:d9:90:9f:e9:dd:ed:
                    1f:8f:8c:01:0b:7c:26:27:1d:69:d4:3a:f4:68:34:
                    be:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:42:40:98:13:FA:1D:04:19:85:9E:96:39:38:5F:6E:36:2A:4A:06
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/warijSjJEV8nVc5KcLabSwroPbYEZpAV6xvDUXcYqBb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/warijSjJEV8nVc5KcLabSwroPbYEZpAV6xvDUXcYqBb/0/5F42409813FA1D0419859E9639385F6E362A4A06.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8648::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272633

    Signature Algorithm: sha256WithRSAEncryption
         9e:5f:06:6a:c7:37:a7:70:be:98:68:ae:51:19:69:2c:5e:63:
         ca:58:8e:89:20:23:58:77:7c:9e:c4:1a:01:fa:db:8d:a2:80:
         0e:b7:d9:fb:f6:bb:46:63:c5:6c:69:e1:fa:47:2f:b3:ec:63:
         9e:85:9e:36:72:04:93:3f:96:3e:ae:b0:f3:a2:21:27:14:28:
         30:8b:d7:58:6f:46:4f:12:1e:cc:c2:f7:d9:43:7b:69:e9:62:
         0a:6c:9a:28:3b:ac:76:7c:26:7b:63:8d:ce:42:39:78:0b:15:
         d8:7d:f2:b7:ad:de:03:d8:ec:e1:3b:13:05:ae:c8:00:11:48:
         28:b6:7b:f8:5b:43:14:31:2b:ae:b4:cc:c7:69:29:19:ff:36:
         76:c4:85:a5:db:dc:b4:45:1f:9e:9c:83:06:d1:3f:6c:ec:66:
         f1:1a:47:49:a5:6e:66:97:e2:03:b0:94:d5:b5:c9:f6:3c:20:
         8e:42:bf:48:89:45:55:fe:78:0c:38:3e:cd:8d:3e:be:0a:ef:
         c2:cc:5f:d1:5b:cb:da:e4:b4:db:38:8c:d4:14:8f:2e:22:70:
         d4:75:10:92:c2:84:5a:30:95:e0:5a:5c:3e:c0:a1:80:60:66:
         57:e1:9f:6f:04:3c:30:52:97:14:ad:f0:51:97:4b:45:8e:7a:
         8e:c4:f7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org