Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A5073EB1E427A3F5329F0966AD6155C0B7F34BF8.cer
File:                     A5073EB1E427A3F5329F0966AD6155C0B7F34BF8.cer (raw, json)
Hash identifier:          zxh6ZzsbeOZLJzbElfwd9UO32/Tr9iYCEcFQifXBYjk=
Subject key identifier:   A5:07:3E:B1:E4:27:A3:F5:32:9F:09:66:AD:61:55:C0:B7:F3:4B:F8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0A3EE2B4AC7571BA8BBF9C0FEA690D27A2AA8B45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/4/A5073EB1E427A3F5329F0966AD6155C0B7F34BF8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/4/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 12:25:10 +0000
Certificate not after:    Fri 26 Jul 2024 12:30:10 +0000
Subordinate resources:    AS: 270628
                          IP: 177.70.248.0/22
                          IP: 2804:6ef0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3e:e2:b4:ac:75:71:ba:8b:bf:9c:0f:ea:69:0d:27:a2:aa:8b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 28 12:25:10 2023 GMT
            Not After : Jul 26 12:30:10 2024 GMT
        Subject: CN=A5073EB1E427A3F5329F0966AD6155C0B7F34BF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:49:a5:a5:73:3f:43:45:b1:e0:f3:f4:10:4d:
                    98:b8:b6:86:45:e6:04:70:15:82:bc:1e:5c:8e:50:
                    bb:0b:a1:ba:fc:b0:56:b7:fa:06:12:9a:29:77:6e:
                    13:c3:2b:eb:7e:a1:3e:ab:c4:2d:0a:67:21:d5:bf:
                    0e:a6:71:70:4b:b0:6c:37:d6:c8:14:8d:bd:26:47:
                    db:75:42:d6:6b:1f:0c:db:38:b7:9d:57:3b:7b:68:
                    67:22:17:45:64:33:49:06:28:da:25:d3:f3:a8:53:
                    a4:af:6c:ab:95:2c:51:2b:56:32:63:f4:a8:6a:56:
                    ce:fa:b3:47:7c:42:9a:03:4e:86:ec:22:43:8c:4b:
                    48:68:0b:26:9f:72:22:0a:41:26:da:e6:a7:50:cf:
                    4f:0d:97:bf:bf:55:57:c6:a9:28:df:99:85:bd:70:
                    30:23:3a:cb:2b:05:92:13:65:84:44:7d:bb:9c:a8:
                    f1:fc:2d:43:aa:aa:27:e3:87:17:d4:5a:67:5d:6f:
                    12:57:cb:9b:7d:06:13:72:19:9b:e1:77:01:6f:10:
                    28:6a:45:45:9c:57:69:5c:2a:04:73:e7:cd:39:27:
                    2a:45:3c:a1:e3:d0:d6:d6:ef:f0:fc:7d:15:4f:82:
                    bb:29:5c:3b:16:b3:6f:14:b6:c3:57:fd:ad:30:3e:
                    73:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:07:3E:B1:E4:27:A3:F5:32:9F:09:66:AD:61:55:C0:B7:F3:4B:F8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/4/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/4/A5073EB1E427A3F5329F0966AD6155C0B7F34BF8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.248.0/22
                IPv6:
                  2804:6ef0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270628

    Signature Algorithm: sha256WithRSAEncryption
         9d:e6:9f:53:db:52:9d:21:8a:51:2c:1d:51:52:11:75:8c:51:
         20:d0:5b:4f:db:cb:51:89:df:6e:5c:54:d9:df:20:bd:59:d4:
         45:6e:e7:60:42:e8:ba:c9:8d:56:50:ec:31:19:b8:09:17:e6:
         62:2c:1b:11:42:72:e9:a7:5c:ce:cf:a3:1e:b9:94:36:d5:4b:
         52:c8:b5:c4:89:59:0d:9a:26:a4:43:48:c3:73:fd:57:38:e5:
         66:cf:dc:98:c4:a9:1b:06:c1:ca:cf:cb:e2:5b:64:2f:6d:de:
         94:13:6d:8f:e7:03:c4:70:7a:f6:73:24:45:0e:29:e7:35:18:
         a2:9f:01:15:65:78:b4:8e:b0:a6:c3:07:e6:e5:7f:a7:f8:1f:
         fc:b4:03:7c:2e:d3:a1:7e:b8:a8:32:ce:a6:1b:16:ab:01:f0:
         6d:22:77:77:57:08:a5:3c:7f:db:cd:d3:de:83:e9:9c:35:11:
         5f:ba:32:a9:9c:5b:da:eb:0d:1a:70:39:c1:f2:5a:b8:75:65:
         5b:4b:29:02:fb:52:6d:8c:6c:58:c1:52:7c:93:5b:bd:95:81:
         59:27:7e:c2:3c:43:cb:8f:b0:c1:6b:9a:c4:6c:66:46:3d:fe:
         48:f9:d7:5c:0f:d8:e1:eb:75:94:86:9d:66:b9:bf:27:ee:a2:
         ae:6e:2c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org