Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5F8FFB1FA6A12CA394255F5031399D9A137B3EC7.cer
File:                     5F8FFB1FA6A12CA394255F5031399D9A137B3EC7.cer (raw, json)
Hash identifier:          xttb8hRHE3oC91vgMQHWBtP5GB+vumMxlZGKJN+z/fQ=
Subject key identifier:   5F:8F:FB:1F:A6:A1:2C:A3:94:25:5F:50:31:39:9D:9A:13:7B:3E:C7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       34FD57B644237160F5A8A9C8F81525304F5B05A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/5F8FFB1FA6A12CA394255F5031399D9A137B3EC7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Oct 2023 17:09:32 +0000
Certificate not after:    Mon 21 Oct 2024 17:14:32 +0000
Subordinate resources:    AS: 264241
                          IP: 138.118.4.0/22
                          IP: 168.196.8.0/22
                          IP: 2804:24c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:fd:57:b6:44:23:71:60:f5:a8:a9:c8:f8:15:25:30:4f:5b:05:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 23 17:09:32 2023 GMT
            Not After : Oct 21 17:14:32 2024 GMT
        Subject: CN=5F8FFB1FA6A12CA394255F5031399D9A137B3EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:37:0e:09:49:22:87:31:00:81:3c:fb:9c:a6:
                    89:7e:e9:f6:6c:b7:a0:41:e6:9a:fd:df:4f:63:b4:
                    c6:83:83:5a:28:6b:fd:5c:df:f0:75:a6:66:af:a4:
                    91:ba:f5:6a:d1:b1:a3:1a:5a:10:f1:d5:a3:4e:44:
                    78:b0:2d:06:f9:84:25:41:d4:31:6d:66:71:76:c4:
                    fb:3f:07:99:c2:4a:ca:8b:5c:12:31:5e:2e:c0:31:
                    2c:0b:1d:85:3b:6c:fe:99:97:fa:20:39:98:81:0b:
                    3f:16:2e:c2:c7:a6:d2:bd:b2:a6:85:97:c8:6d:c3:
                    37:d1:a3:7e:d1:1a:eb:1c:e9:3c:c7:6e:f6:10:96:
                    4c:87:a8:28:dd:c9:da:a4:ed:8d:1a:90:02:01:19:
                    2a:3e:35:36:7a:7a:4b:c5:ea:32:5a:df:e0:3e:e3:
                    d4:89:5e:aa:1c:33:e1:b6:b9:c2:db:54:d4:7c:17:
                    57:d1:ba:8e:01:ae:f5:b3:04:08:f2:cc:00:f6:0d:
                    e1:04:89:cc:b8:49:d6:43:86:9d:68:b4:c3:70:bf:
                    fb:18:d4:35:77:9d:f9:2c:eb:c5:78:ac:08:5a:ec:
                    5d:f1:f8:3b:1a:58:0b:05:c8:b7:1c:3e:72:b0:88:
                    da:42:d7:d9:16:c0:a4:11:63:73:1b:c8:e2:c7:24:
                    56:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:8F:FB:1F:A6:A1:2C:A3:94:25:5F:50:31:39:9D:9A:13:7B:3E:C7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/5F8FFB1FA6A12CA394255F5031399D9A137B3EC7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.4.0/22
                  168.196.8.0/22
                IPv6:
                  2804:24c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264241

    Signature Algorithm: sha256WithRSAEncryption
         a5:05:a3:42:46:77:41:61:d2:41:e8:4e:d0:09:db:6e:ce:65:
         75:dc:20:23:34:71:c7:5e:05:52:81:33:70:8a:ae:45:cc:cd:
         5f:0d:91:da:9e:36:58:2f:60:76:79:c2:27:a2:48:eb:6c:86:
         28:df:27:d1:a2:75:8f:d8:3d:07:dc:7c:a5:41:66:76:a6:0a:
         19:0a:9e:2f:86:b8:c4:f3:69:1d:58:3b:60:e7:38:db:b5:5c:
         5d:d8:63:b2:9a:c3:b5:10:40:1c:ab:5f:00:71:cc:86:e8:cf:
         ea:ef:9e:c3:55:23:1d:89:08:22:df:3f:cb:c9:a9:88:64:3d:
         b7:24:d2:d8:e7:b2:a8:5c:cb:18:fb:0e:cf:1a:3e:4e:b2:81:
         03:06:bf:54:91:5a:82:63:56:50:37:79:41:ac:8e:1d:30:e1:
         dd:3c:85:d2:de:23:a3:1f:5c:19:c0:f0:93:27:3d:bb:1c:cc:
         de:9c:02:04:42:f3:c3:4a:2d:6b:36:d0:f7:36:f9:4f:e1:6e:
         23:33:1c:ad:52:3a:38:24:d0:62:8e:10:fa:05:35:96:47:12:
         9c:bb:68:9f:a1:11:22:3c:a4:aa:52:43:c4:a6:21:c6:97:f4:
         eb:fd:10:1f:67:44:ed:7a:e8:8b:65:d4:1d:f3:3d:a4:55:1d:
         6c:a7:b9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org