Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5FF400439781FE8490A8662BF8C3E0E5C82C89A2.cer
File:                     5FF400439781FE8490A8662BF8C3E0E5C82C89A2.cer (raw, json)
Hash identifier:          5UaVpV5qDO8EXlMLPFM1zxvT4S22xgpOXyx1IgO8Xe4=
Subject key identifier:   5F:F4:00:43:97:81:FE:84:90:A8:66:2B:F8:C3:E0:E5:C8:2C:89:A2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2BB4FC1CFCD0BECAF4F0C25647306D96E5D1C2AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/5FF400439781FE8490A8662BF8C3E0E5C82C89A2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Dec 2023 08:54:18 +0000
Certificate not after:    Wed 04 Dec 2024 08:59:18 +0000
Subordinate resources:    AS: 267325
                          IP: 45.233.176.0/22
                          IP: 2804:4bb4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b4:fc:1c:fc:d0:be:ca:f4:f0:c2:56:47:30:6d:96:e5:d1:c2:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  6 08:54:18 2023 GMT
            Not After : Dec  4 08:59:18 2024 GMT
        Subject: CN=5FF400439781FE8490A8662BF8C3E0E5C82C89A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:32:86:d3:f3:e1:08:6a:f2:58:ae:94:6e:23:
                    0b:88:31:e7:bf:ca:d5:9f:51:af:53:ea:b2:81:4f:
                    63:35:66:54:2c:f4:07:d9:4f:10:ff:74:68:65:06:
                    05:23:a2:a0:11:61:92:57:91:5b:fc:3c:61:1d:ac:
                    50:d0:80:9a:49:1f:bf:94:03:a4:70:c0:3d:97:76:
                    87:6c:4b:30:fb:0a:ed:cc:95:d6:9e:c6:43:2d:49:
                    01:30:3e:86:88:df:46:79:42:f7:66:dc:79:c6:7e:
                    32:3b:33:9c:7e:48:c4:0d:34:68:8c:e9:75:3b:05:
                    3e:af:d6:6f:04:83:a0:76:f5:1d:b8:a3:34:73:43:
                    74:42:24:23:50:0e:f8:19:97:17:47:98:31:7f:9f:
                    fc:6d:e1:43:10:cd:19:cd:ab:fc:fa:f1:18:57:f8:
                    0b:11:d3:8a:b2:35:39:d8:f6:f1:99:dd:50:61:6b:
                    fc:13:81:00:e1:28:9a:df:d9:f1:26:50:b0:23:27:
                    9a:63:f7:28:75:ce:a8:b5:79:f2:5f:7d:6f:80:ef:
                    59:b2:fd:5d:6c:dc:14:05:a8:c6:cf:15:a2:01:fd:
                    ac:ee:7f:c8:09:07:ab:89:ae:9a:19:79:5f:4d:bd:
                    d3:fb:7e:cf:3e:30:2b:2d:0f:75:fb:9a:d9:01:ab:
                    49:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:F4:00:43:97:81:FE:84:90:A8:66:2B:F8:C3:E0:E5:C8:2C:89:A2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/5FF400439781FE8490A8662BF8C3E0E5C82C89A2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.176.0/22
                IPv6:
                  2804:4bb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267325

    Signature Algorithm: sha256WithRSAEncryption
         30:20:0a:47:bd:95:db:df:81:4a:98:e1:34:d6:35:dd:9c:93:
         b1:30:e8:62:8b:c7:79:5a:97:25:58:69:10:c5:78:39:f6:67:
         69:81:9f:ab:8f:e6:9c:43:60:98:9b:fd:6c:94:51:e0:e1:cd:
         4e:fe:56:51:b8:6b:62:f8:49:2c:7f:e9:7f:8b:f6:23:68:59:
         83:98:9b:61:e5:e5:1f:b4:e8:b4:46:1b:a3:bf:92:0a:a3:28:
         82:80:25:b5:40:82:c9:d4:ac:fa:fb:a2:38:e7:3d:72:55:6d:
         64:49:08:c9:bc:9e:1e:7f:8f:16:ca:ff:b7:1b:d1:eb:f3:20:
         af:c6:2e:ca:a0:f5:ff:c5:c5:50:e0:c0:ad:c4:aa:48:e9:18:
         66:3c:dc:aa:c1:b4:6b:cc:48:23:e5:cc:8d:84:0b:89:9b:e5:
         a5:ce:fb:c4:86:25:f0:ec:36:9f:06:06:e7:c0:7a:fd:08:b7:
         2a:df:f3:10:9b:86:63:45:83:98:c1:86:16:e6:2b:10:ee:23:
         7d:19:0c:ff:73:62:3e:81:20:a0:fd:a0:fb:f0:37:56:eb:de:
         f7:ed:9b:8e:95:25:6e:d0:39:51:24:24:e1:92:73:fe:b4:ae:
         61:f0:22:23:15:f5:a5:9f:29:4a:42:79:29:5e:de:47:0c:a0:
         9f:01:87:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org