Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A5766C825150ED3F3AFE55B1E0ED3721718F1CBE.cer
File:                     A5766C825150ED3F3AFE55B1E0ED3721718F1CBE.cer (raw, json)
Hash identifier:          bcC1MW1ECX37te0NkL5vjRSN4MUpDuU1VMfWByWP6oI=
Subject key identifier:   A5:76:6C:82:51:50:ED:3F:3A:FE:55:B1:E0:ED:37:21:71:8F:1C:BE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F38F3A59C63C67D90E042757384CB31A10B99F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/A5766C825150ED3F3AFE55B1E0ED3721718F1CBE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Mar 2023 15:44:32 +0000
Certificate not after:    Tue 19 Mar 2024 15:49:32 +0000
Subordinate resources:    AS: 265328
                          IP: 168.181.64.0/22
                          IP: 2804:2e28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:38:f3:a5:9c:63:c6:7d:90:e0:42:75:73:84:cb:31:a1:0b:99:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 21 15:44:32 2023 GMT
            Not After : Mar 19 15:49:32 2024 GMT
        Subject: CN=A5766C825150ED3F3AFE55B1E0ED3721718F1CBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b7:9a:b5:d4:dc:61:36:b7:12:00:04:86:ed:
                    09:fc:be:ae:e4:5a:a7:1b:5e:b8:84:d2:bd:e1:2b:
                    e6:48:a4:92:c0:0f:09:ca:bb:a2:ef:44:44:50:f7:
                    cf:e2:22:48:1b:7b:e8:ce:5a:86:0b:90:4f:58:fe:
                    ed:ac:58:55:37:1f:98:06:a0:d5:0d:81:04:56:e3:
                    54:e7:79:08:37:55:21:b8:fc:ca:7e:52:47:be:d5:
                    b7:72:9d:1c:b1:08:6d:19:78:df:d0:68:19:f6:c7:
                    44:45:bb:62:13:67:f4:e7:6a:e7:36:1d:5a:fc:a7:
                    93:81:be:c7:4d:b3:58:b5:c4:9d:36:ea:ad:0d:3f:
                    6e:df:3b:38:b5:70:c9:74:b3:53:3a:07:a8:9a:2e:
                    e5:45:e3:35:f7:22:26:69:09:11:f1:ff:75:9f:f4:
                    38:f0:28:c6:74:60:eb:68:83:ee:52:ce:0d:05:f2:
                    ad:66:9d:5b:19:d1:cf:3f:57:9e:a6:49:81:4b:4b:
                    fe:8a:ac:71:67:43:f0:e3:06:99:19:53:03:88:4f:
                    e1:63:49:1b:99:9d:47:d0:9f:c6:dd:71:f8:73:78:
                    cd:2a:f1:8a:8f:ab:1f:48:d9:ff:d1:29:2b:fc:2d:
                    30:9b:cd:3a:be:66:66:44:90:6b:ce:7b:56:1a:a7:
                    4b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:76:6C:82:51:50:ED:3F:3A:FE:55:B1:E0:ED:37:21:71:8F:1C:BE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/A5766C825150ED3F3AFE55B1E0ED3721718F1CBE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.64.0/22
                IPv6:
                  2804:2e28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265328

    Signature Algorithm: sha256WithRSAEncryption
         71:68:1b:e0:a1:da:ef:77:a0:29:dd:2e:ab:56:51:06:46:aa:
         ab:f8:0f:65:cd:41:fb:3d:ba:ff:0f:8a:1f:e3:de:df:32:6f:
         ba:a9:c9:7a:a4:24:57:23:cc:69:1c:c8:53:23:8f:cd:94:db:
         8e:d3:68:76:62:2a:85:c8:45:ff:c3:27:fb:e9:4d:01:ce:80:
         e6:98:77:98:1c:bf:79:45:37:88:5b:4f:5b:e7:80:a6:de:85:
         33:8a:98:88:e4:27:08:87:6e:b6:d6:46:2e:17:17:64:84:fd:
         d0:65:b4:7f:09:8b:46:c5:2a:d9:a8:5a:59:01:0d:7c:08:b3:
         23:0a:39:ad:72:db:84:21:0d:72:64:4b:07:41:ef:c5:21:15:
         6a:ac:c8:a6:98:41:3c:7a:8c:51:63:cb:e8:a7:94:42:f1:60:
         28:f7:f2:d9:8e:95:9c:2c:90:9c:23:b8:cd:b5:15:72:03:25:
         3b:09:ad:64:de:8f:0e:26:60:89:73:dd:19:05:69:36:63:1d:
         67:09:ba:0e:bf:e4:21:5f:13:83:51:86:71:f5:f4:ec:94:18:
         0c:56:d2:93:59:eb:1d:23:74:e6:47:36:8a:62:b3:2e:10:53:
         f0:ca:55:66:0a:45:90:27:a2:ae:46:9f:56:1e:b3:51:70:29:
         f5:90:2f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:41 2024 by rpki-client on console-ams.rpki-client.org