Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A5889F35659E742837BEE520B02DAF77462D8041.cer
File:                     A5889F35659E742837BEE520B02DAF77462D8041.cer (raw, json)
Hash identifier:          oqgCqsk53TXQB+2iRbQcRA+9dCLNHplnvHpwNuETOJA=
Subject key identifier:   A5:88:9F:35:65:9E:74:28:37:BE:E5:20:B0:2D:AF:77:46:2D:80:41
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       23CB4DCF1FDDD2BF111B19433A62F107D0845BBE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/A5889F35659E742837BEE520B02DAF77462D8041.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Sep 2023 12:48:59 +0000
Certificate not after:    Mon 16 Sep 2024 12:53:59 +0000
Subordinate resources:    AS: 273760
                          IP: 2804:8bcc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:cb:4d:cf:1f:dd:d2:bf:11:1b:19:43:3a:62:f1:07:d0:84:5b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 18 12:48:59 2023 GMT
            Not After : Sep 16 12:53:59 2024 GMT
        Subject: CN=A5889F35659E742837BEE520B02DAF77462D8041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:06:b2:e3:14:f6:63:ca:ee:46:6d:9c:89:58:
                    66:c7:83:dc:e2:61:58:42:ba:ea:00:53:d9:a3:2e:
                    39:bf:ca:50:d1:b7:99:f4:2a:35:e5:bd:3b:9b:5e:
                    b7:12:90:34:68:e1:54:90:0b:bc:72:a7:81:2b:ac:
                    2b:0e:63:98:ed:f6:e2:38:55:9e:4a:ec:db:e6:4b:
                    d0:99:1b:27:4e:eb:41:1f:7b:39:b0:70:c0:75:b1:
                    0a:07:a6:4a:cf:30:38:82:e4:c7:95:8c:55:5c:5b:
                    9a:b1:9e:ea:11:15:d9:22:3e:50:f2:eb:24:ff:32:
                    d4:a0:2f:83:5e:d6:c5:f0:2a:7a:d6:a8:b6:59:e6:
                    a5:54:17:f6:7b:b5:65:0d:2f:d8:40:21:da:b0:09:
                    bb:98:0f:2d:1b:25:f3:29:6c:ea:d8:89:b0:71:1d:
                    cc:b6:0d:d9:e5:95:8d:a7:37:79:f9:aa:e1:a5:32:
                    b7:04:2e:45:07:48:d0:64:04:88:30:05:09:54:5d:
                    2a:bc:12:1a:22:e8:a3:ae:96:66:70:14:9a:72:0c:
                    f5:d3:58:c5:d1:86:ba:ea:46:8e:87:d4:ac:67:64:
                    62:94:1d:87:d0:39:34:56:5e:a6:3c:90:84:29:65:
                    29:d3:ca:ad:79:4b:5f:f7:db:fc:3b:38:50:7d:d4:
                    ab:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:88:9F:35:65:9E:74:28:37:BE:E5:20:B0:2D:AF:77:46:2D:80:41
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/A5889F35659E742837BEE520B02DAF77462D8041.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8bcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273760

    Signature Algorithm: sha256WithRSAEncryption
         4a:ee:e0:95:a4:89:6a:1a:37:96:6a:20:cd:3e:ba:e2:26:70:
         b5:ec:71:04:45:27:c1:cd:c6:18:1e:ab:a7:36:e2:33:a6:41:
         5f:58:14:9b:c1:7e:61:6a:e1:ba:73:76:1f:0f:08:c8:4b:b3:
         71:bc:8d:a2:2a:bf:40:46:4c:45:67:95:c6:51:19:41:30:b3:
         f3:ef:ee:3d:88:b4:0f:9a:43:17:91:5f:cb:7b:f3:b8:64:b1:
         af:d3:24:5a:d9:20:fb:b0:3c:9a:1c:7f:67:52:08:0b:9a:64:
         e3:c6:3b:48:f5:3f:f6:c8:54:b9:08:05:67:ef:cd:83:3e:1e:
         13:87:d2:22:89:db:ef:ab:26:ae:ca:92:e8:b6:02:0c:0d:28:
         bd:a3:26:a4:63:9b:08:8d:c7:16:06:ab:17:61:2b:bb:a2:20:
         4d:c2:42:c7:e4:a7:2e:49:3b:fd:2e:f9:2e:93:f2:b4:5b:46:
         5c:7c:0d:0f:80:a1:73:36:a6:6f:8c:38:97:a7:a2:23:fb:29:
         6d:4d:55:ec:cc:3b:45:ac:9c:08:c9:fa:60:40:50:66:88:82:
         fc:eb:03:8c:02:37:bf:e0:78:36:a6:0e:55:de:9f:f0:58:7a:
         b8:10:5f:74:17:01:2f:56:34:6c:c8:c0:4f:9e:08:e9:2c:b8:
         54:62:8a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org