Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5FB17525775775A25E579EBB1B8F188A8905EF9C.cer
File:                     5FB17525775775A25E579EBB1B8F188A8905EF9C.cer (raw, json)
Hash identifier:          qiyRBRJJvE9ppUyikImPQdW0pDOE+/7sw6DQ6soR6tM=
Subject key identifier:   5F:B1:75:25:77:57:75:A2:5E:57:9E:BB:1B:8F:18:8A:89:05:EF:9C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4BCE3F717200219947C4CA22D78B33E03B5B9EC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/0/5FB17525775775A25E579EBB1B8F188A8905EF9C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 17 Dec 2022 12:15:13 +0000
Certificate not after:    Sat 16 Dec 2023 12:20:13 +0000
Subordinate resources:    AS: 264412
                          IP: 131.221.104.0/22
                          IP: 2804:1e2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ce:3f:71:72:00:21:99:47:c4:ca:22:d7:8b:33:e0:3b:5b:9e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 17 12:15:13 2022 GMT
            Not After : Dec 16 12:20:13 2023 GMT
        Subject: CN=5FB17525775775A25E579EBB1B8F188A8905EF9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:78:82:7d:3d:55:01:61:c4:84:fb:44:4c:69:
                    58:2a:df:f4:42:95:f2:b0:ec:c1:4c:e7:53:60:0e:
                    4c:aa:b4:2d:a4:c1:05:93:40:90:20:9e:6f:2c:49:
                    2b:8c:55:b4:fd:23:19:0e:a0:4b:8b:5b:d0:7b:19:
                    c3:62:ae:12:fe:c7:eb:4d:bf:ad:d9:d6:5c:e3:1c:
                    c5:16:89:ec:49:92:24:8d:5b:3f:b7:17:d0:d7:18:
                    a7:94:73:57:2d:69:0c:f8:78:7b:c7:06:a5:7f:b7:
                    d2:0b:94:61:54:01:d6:2f:57:67:f4:93:9f:f3:75:
                    9e:00:52:d0:d2:28:29:1d:56:7a:4f:a5:fc:1a:8a:
                    a1:b7:b3:c8:d7:8b:5f:a2:fb:d8:54:a9:e1:05:6a:
                    70:78:9b:7a:12:63:37:b4:93:05:71:a4:68:84:77:
                    25:00:d4:f4:43:44:70:4b:d0:bb:ff:7d:6b:1e:46:
                    15:6a:82:1d:8e:19:7c:4c:74:6e:90:7e:42:1d:e4:
                    e1:24:27:85:8f:4e:30:6e:a6:2b:5a:8f:99:fe:ab:
                    9a:1d:ec:6a:13:2c:8a:23:2b:bb:8b:31:ad:d4:38:
                    0b:d9:34:ae:05:e5:59:ac:b8:27:f6:60:d8:d0:06:
                    71:8e:67:f3:c4:80:98:cd:3c:be:00:97:fd:b7:b7:
                    4f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:B1:75:25:77:57:75:A2:5E:57:9E:BB:1B:8F:18:8A:89:05:EF:9C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/0/5FB17525775775A25E579EBB1B8F188A8905EF9C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.104.0/22
                IPv6:
                  2804:1e2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264412

    Signature Algorithm: sha256WithRSAEncryption
         81:ed:a5:6a:9f:7d:23:06:f2:b3:ae:78:61:4d:7f:b9:fe:6a:
         0e:88:a1:0d:01:3a:a7:e1:1b:30:d0:c1:38:af:fc:d5:70:59:
         8c:bd:a1:fe:4a:38:01:9a:36:8e:74:49:e4:74:72:4f:32:99:
         1f:ae:83:de:15:34:73:ff:67:ab:67:46:bd:f8:bc:a8:1a:06:
         39:1d:02:92:5f:a9:cf:44:d8:05:10:4e:0a:84:aa:f8:9a:f3:
         77:6f:81:af:9a:bd:c6:c7:00:b8:5c:29:0b:46:f1:fc:db:9c:
         59:a4:c2:08:ca:b6:20:cf:8d:63:0c:7f:08:d8:41:80:d3:d1:
         69:fc:e8:b8:9e:36:5f:39:6f:ff:42:65:f6:b5:9d:21:cc:30:
         8d:df:de:ca:de:a0:e4:3c:51:fd:0b:27:d3:a1:f4:e0:3a:ec:
         04:c3:35:3f:ce:4b:b0:00:2a:7d:26:a7:cb:78:b9:24:73:ff:
         90:f2:0b:41:37:e0:f0:c5:9f:fb:2f:1c:44:4d:ec:a9:a3:4d:
         f6:9d:61:b7:4a:b2:36:a5:bf:97:b3:14:7c:a7:b7:d1:22:d8:
         66:7e:b5:08:89:59:54:a1:a8:e7:16:bd:94:0b:1e:76:97:9d:
         75:fd:5a:d0:cc:0a:0d:27:6b:b7:37:ec:3f:83:17:df:60:69:
         f3:da:56:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org