Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A5A26ED2218EB0EB577553778D5CD61470558FF3.cer
File:                     A5A26ED2218EB0EB577553778D5CD61470558FF3.cer (raw, json)
Hash identifier:          Ek443gUEiKzZzhuyR7mTF80okxVkIL14TXG6l/OAS7o=
Subject key identifier:   A5:A2:6E:D2:21:8E:B0:EB:57:75:53:77:8D:5C:D6:14:70:55:8F:F3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       77012E9A18353B19D30F57B8D3FFE2BF7644E5D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/0/A5A26ED2218EB0EB577553778D5CD61470558FF3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 27 May 2023 11:34:54 +0000
Certificate not after:    Sat 25 May 2024 11:39:54 +0000
Subordinate resources:    AS: 270319
                          IP: 190.83.0.0/23
                          IP: 2804:6a34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:01:2e:9a:18:35:3b:19:d3:0f:57:b8:d3:ff:e2:bf:76:44:e5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 27 11:34:54 2023 GMT
            Not After : May 25 11:39:54 2024 GMT
        Subject: CN=A5A26ED2218EB0EB577553778D5CD61470558FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:92:e7:b3:a2:08:55:da:8d:dc:93:82:73:e3:
                    cc:fb:e6:1e:33:33:ed:9e:7e:7f:d9:22:43:dd:95:
                    da:8c:ef:b5:6c:6d:b1:56:8e:c2:95:a2:e9:a1:4f:
                    17:a1:b8:29:dd:b2:03:17:79:e4:4b:d3:51:48:6d:
                    ba:ce:4b:e2:1a:07:56:32:af:fb:b6:38:e8:c6:39:
                    57:40:9d:9b:95:f7:69:43:49:0a:81:c7:28:e4:7e:
                    73:50:c0:65:db:2e:da:ca:9e:d5:d0:6c:e2:6d:35:
                    c8:6c:41:6a:68:7a:e0:20:b1:98:78:41:73:a8:58:
                    e6:85:0c:df:32:54:7d:d7:41:e9:46:f5:d0:76:78:
                    79:4c:76:29:3d:63:2c:4d:4c:c8:9f:29:6b:c8:db:
                    53:65:74:a5:4e:56:5d:7d:44:3f:63:71:e4:5a:6b:
                    7a:02:89:f6:7d:0b:5d:9c:7d:cd:56:35:82:2f:49:
                    a3:21:ea:d2:08:9d:0a:d7:82:19:c0:66:0e:20:34:
                    95:ec:f7:6b:03:16:0c:2b:a8:bd:8f:b1:29:43:4e:
                    e2:e4:d5:14:e7:00:3f:30:23:08:4f:68:5e:aa:36:
                    4d:bb:5e:79:7d:e4:5d:ad:e5:22:64:e8:75:c0:f5:
                    13:0c:7b:31:f9:52:c2:99:32:f6:73:88:92:a3:58:
                    ea:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:A2:6E:D2:21:8E:B0:EB:57:75:53:77:8D:5C:D6:14:70:55:8F:F3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C5dtmGrGuHeSd3Doj2nctxHPfNarwTqDRjgX8E5Zozra/0/A5A26ED2218EB0EB577553778D5CD61470558FF3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.0.0/23
                IPv6:
                  2804:6a34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270319

    Signature Algorithm: sha256WithRSAEncryption
         a6:fe:86:76:8f:28:b4:18:1a:1c:00:69:0f:00:51:67:3a:77:
         78:ad:02:49:2c:81:fb:91:2a:c6:e7:95:6c:26:c7:ee:28:54:
         fe:31:18:0c:b2:d4:63:a3:0f:95:25:a3:65:c6:cc:45:ba:27:
         9d:d2:a9:31:26:69:10:54:ab:2d:61:b8:01:5f:09:73:3c:3b:
         76:a5:c3:02:8a:6a:65:04:6b:be:65:72:bc:ca:c6:e9:d2:fe:
         7a:6d:5b:c9:fc:53:da:fa:81:67:44:68:4e:eb:6c:05:6e:cb:
         c2:24:01:77:b2:31:6c:6c:a3:d6:91:93:44:ab:64:2f:a0:2e:
         a5:f1:10:5b:2b:97:2c:8e:af:10:9f:be:cf:e5:08:4f:54:24:
         f3:e9:58:ad:91:63:de:b0:5c:0c:a5:64:ba:78:70:cb:a1:88:
         4d:10:b6:38:22:4f:38:55:27:c8:23:50:f5:57:4f:11:b9:ca:
         1f:41:14:9a:83:4f:d1:61:d3:6f:ed:4c:d1:a2:1e:15:02:c2:
         ac:a8:82:99:0d:9b:ca:62:d7:38:71:00:08:98:5f:27:d1:b9:
         bb:6b:b8:e7:22:a7:6d:03:72:99:16:5d:ef:d5:6a:ab:13:f7:
         b0:2f:72:e7:cb:aa:6b:8a:f3:9f:4d:a9:67:3c:75:db:04:e4:
         9a:85:04:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org