Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5F7AB34C4F3BDBEC6B2D84F00641EB1CE1DE080D.cer
File:                     5F7AB34C4F3BDBEC6B2D84F00641EB1CE1DE080D.cer (raw, json)
Hash identifier:          1MLM6F+HJ7eESwp4brc1qW+8nglqY+5f3wW35FDL2n4=
Subject key identifier:   5F:7A:B3:4C:4F:3B:DB:EC:6B:2D:84:F0:06:41:EB:1C:E1:DE:08:0D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       17104C832625B9C58F5AB5B56C3D702C6D567D3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/0/5F7AB34C4F3BDBEC6B2D84F00641EB1CE1DE080D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Jul 2023 05:30:29 +0000
Certificate not after:    Fri 12 Jul 2024 05:35:29 +0000
Subordinate resources:    AS: 271455
                          IP: 187.63.148.0/22
                          IP: 2804:7bcc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:10:4c:83:26:25:b9:c5:8f:5a:b5:b5:6c:3d:70:2c:6d:56:7d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 14 05:30:29 2023 GMT
            Not After : Jul 12 05:35:29 2024 GMT
        Subject: CN=5F7AB34C4F3BDBEC6B2D84F00641EB1CE1DE080D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:24:bc:6b:24:6c:e5:c6:8b:02:7e:dc:39:de:
                    86:21:a5:5e:18:e4:dd:ee:54:cc:4f:d3:0a:c6:df:
                    f7:f2:9c:49:86:cf:93:2e:85:bb:8a:dd:35:27:02:
                    70:88:fa:07:9b:6c:6c:80:b9:23:ff:d0:ef:c9:7b:
                    82:10:f1:6d:63:02:f5:26:98:cc:77:63:1f:c5:c7:
                    3e:ab:eb:7d:8d:05:f1:39:12:08:24:02:d4:88:11:
                    a4:cc:1f:ac:91:ce:40:7c:f6:fe:87:2f:69:aa:9e:
                    de:0b:fc:4d:5d:8f:cf:5f:ac:81:0a:3c:f9:f1:f5:
                    21:a0:43:76:41:05:67:47:7b:37:27:4e:9c:a7:81:
                    2a:d6:3f:1a:87:aa:68:9e:ab:63:43:7b:7f:4d:6d:
                    95:35:a6:63:65:60:07:bb:61:d4:d8:a3:32:ac:34:
                    3a:49:0e:02:fa:9e:6b:02:94:0d:21:9f:f5:bc:a0:
                    13:81:83:8d:b8:2a:f3:09:cd:9f:cd:67:f6:d1:c3:
                    81:e2:23:08:f7:6f:c9:24:7a:16:5f:f8:60:c4:5a:
                    e2:37:76:f4:eb:d0:7c:ee:f2:5d:28:4b:eb:fe:b5:
                    9c:9b:19:f0:f5:ee:15:fa:9f:29:b6:52:c4:ae:79:
                    38:d9:64:f7:a2:8f:02:98:78:3e:67:11:6f:7f:e1:
                    e8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:7A:B3:4C:4F:3B:DB:EC:6B:2D:84:F0:06:41:EB:1C:E1:DE:08:0D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/0/5F7AB34C4F3BDBEC6B2D84F00641EB1CE1DE080D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.148.0/22
                IPv6:
                  2804:7bcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271455

    Signature Algorithm: sha256WithRSAEncryption
         6c:c4:da:cb:bc:a8:54:8e:81:30:bf:14:3a:1f:96:0a:b7:f7:
         07:da:0d:61:e1:c5:ef:0b:be:a4:c2:16:49:7b:d2:04:43:1b:
         d5:8a:db:99:54:f5:b8:e4:6a:27:11:e4:fb:8c:ec:89:1e:92:
         de:b3:dd:33:3d:ff:07:4b:3d:bf:3c:be:d2:6c:76:73:3b:68:
         24:da:7d:ee:9d:30:66:0c:71:c7:d1:65:28:e9:ec:0c:3c:14:
         47:e9:f4:09:07:e8:02:69:db:28:a8:17:fc:cf:e3:80:60:52:
         ba:46:4d:dd:09:3c:f4:6e:48:27:07:b3:4e:90:f5:b0:d9:49:
         01:63:09:69:06:29:e6:bf:2a:fd:10:4e:7c:e6:5a:f4:d6:0f:
         28:20:8c:76:1a:b2:7c:d0:a5:de:44:2d:b8:fb:3b:cc:92:a3:
         3f:19:57:b2:ba:a6:58:ee:aa:1f:86:7a:b3:67:01:9b:1f:aa:
         08:20:09:82:07:bd:38:85:45:83:85:dd:d7:c0:d1:e2:d4:a3:
         00:11:5c:4d:34:75:e3:b1:1a:38:85:5c:87:eb:db:cc:84:07:
         af:35:d1:76:1b:c0:5b:bf:b6:cc:9e:f2:ad:a0:48:d4:bb:f8:
         eb:e5:a4:0d:4b:1e:b6:6d:61:77:8d:d6:e6:96:5f:56:96:75:
         e0:a7:a4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org